Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/1k-z_h_ZwS63SDr6uXmM3AXasE8.roa
File: 1k-z_h_ZwS63SDr6uXmM3AXasE8.roa (raw, json)
Hash identifier: cdlAENSozIsV23f6Qzr2sxi7P2lHy2WlkfVerTdNtUQ=
Subject key identifier: D6:4F:B3:FE:1F:D9:C1:2E:B7:48:3A:FA:B9:79:8C:DC:05:DA:B0:4F
Certificate issuer: /CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Certificate serial: 019427B550CBE993F775866A8E3B22B4DCBB
Authority key identifier: 1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/1k-z_h_ZwS63SDr6uXmM3AXasE8.roa
Signing time: Thu 02 Jan 2025 15:49:41 +0000
ROA not before: Thu 02 Jan 2025 15:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209047
IP address blocks: 45.9.32.0/22 maxlen: 22
45.9.32.0/24 maxlen: 24
45.9.33.0/24 maxlen: 24
45.9.34.0/24 maxlen: 24
45.9.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:50:cb:e9:93:f7:75:86:6a:8e:3b:22:b4:dc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Validity
Not Before: Jan 2 15:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d64fb3fe1fd9c12eb7483afab9798cdc05dab04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:ae:2e:75:35:55:f5:cf:47:af:dc:34:9b:
b9:51:90:54:dc:07:18:f1:e9:50:fc:46:4c:98:89:
f3:02:ab:4a:22:c5:8f:f5:25:5d:11:96:b8:a6:bf:
d2:82:d7:23:4e:53:eb:43:74:64:e7:3f:9b:fd:fe:
57:9b:c6:96:d1:75:96:f3:71:00:20:e2:68:5b:ee:
be:83:47:3c:34:35:d5:21:39:be:89:36:7c:ea:de:
98:f8:8f:dc:20:9e:64:0f:b3:bd:1c:33:7a:f4:6d:
bc:a5:9a:4b:04:f1:ec:89:0f:d3:86:8e:75:7c:75:
23:dd:86:84:d9:75:8b:29:c2:4d:65:4b:b5:c2:e3:
9d:bd:07:d0:37:80:27:a3:db:ce:db:9c:a7:20:af:
b6:6a:94:6a:ba:ba:f1:6d:f0:65:94:63:14:b2:ae:
59:d7:8c:06:34:22:f5:7c:e2:da:54:96:3c:e0:18:
be:08:4c:cd:1d:e1:bf:0e:e1:f4:2f:38:9e:d2:8a:
6d:85:ce:4f:a2:44:e0:08:50:55:dc:7d:fe:a0:d5:
60:f7:5c:59:71:ac:78:85:ba:24:c1:25:5f:d9:24:
3b:da:c8:25:67:02:ba:4c:31:a6:50:0f:ff:24:5b:
ed:0f:c5:2a:f1:b5:f2:57:08:d0:56:70:47:30:76:
d9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4F:B3:FE:1F:D9:C1:2E:B7:48:3A:FA:B9:79:8C:DC:05:DA:B0:4F
X509v3 Authority Key Identifier:
keyid:1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/1k-z_h_ZwS63SDr6uXmM3AXasE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.32.0/22
Signature Algorithm: sha256WithRSAEncryption
66:32:cc:25:23:41:ef:ca:3f:c1:2a:7c:5b:9f:62:ea:c8:bc:
32:96:eb:b3:0a:cc:3e:7d:ff:be:60:ce:fb:b3:63:f7:d6:c1:
b0:d3:c5:1d:12:1d:65:1c:12:54:20:26:b6:22:bd:a7:b0:76:
54:e9:e9:d5:43:da:61:85:4f:42:54:8e:f7:ce:d0:c6:60:52:
db:32:ec:e1:66:65:92:94:fa:0c:2e:06:07:dd:65:41:fa:06:
77:8f:87:e0:bb:37:c9:4d:be:7f:e5:75:37:4f:8d:30:ae:63:
4f:66:02:1e:23:99:b4:e7:72:7d:f2:50:6d:8f:6e:be:29:11:
0a:92:66:20:95:5d:04:9e:72:9a:5c:cf:e6:b2:c7:76:5a:99:
73:03:d5:40:53:46:08:9d:2b:36:8e:b7:80:90:5b:93:44:cc:
0c:78:c7:7e:90:a2:d7:49:15:6a:b4:c7:cb:76:3a:73:42:d0:
55:93:34:aa:36:63:2b:57:30:fe:5a:2f:57:6a:e0:11:31:a6:
28:79:84:90:9f:24:4f:b4:d2:89:21:ce:91:60:3a:71:e5:7f:
06:dd:4e:8b:11:e1:1f:e8:f2:85:60:8e:a2:d6:97:67:59:7b:
fc:45:9b:54:a1:78:2f:fc:74:58:77:78:4f:0f:1a:7d:e4:79:
d1:75:52:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:21:01 2025 by rpki-client