Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/9XB5L2BKr8qvjKYU2Uioly6fY1U.roa
File: 9XB5L2BKr8qvjKYU2Uioly6fY1U.roa (raw, json)
Hash identifier: tKzpvJI6ftqAt+HOqzK+2PC1tLhzH4FaMM6p7/zTUWE=
Subject key identifier: F5:70:79:2F:60:4A:AF:CA:AF:8C:A6:14:D9:48:A8:97:2E:9F:63:55
Certificate issuer: /CN=a79cf10c31f2edbb557d5540973c88079b33200f
Certificate serial: 019420D5E5240D4105D3A998404DDF72B5E7
Authority key identifier: A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/9XB5L2BKr8qvjKYU2Uioly6fY1U.roa
Signing time: Wed 01 Jan 2025 07:47:56 +0000
ROA not before: Wed 01 Jan 2025 07:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20565
IP address blocks: 45.81.208.0/22 maxlen: 22
45.153.204.0/22 maxlen: 22
185.113.48.0/22 maxlen: 22
185.241.0.0/22 maxlen: 22
2a06:6800::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e5:24:0d:41:05:d3:a9:98:40:4d:df:72:b5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79cf10c31f2edbb557d5540973c88079b33200f
Validity
Not Before: Jan 1 07:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f570792f604aafcaaf8ca614d948a8972e9f6355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:74:f5:6f:36:28:06:66:fb:64:6d:aa:61:f0:
2a:2b:cb:60:ca:fb:97:42:51:be:79:0b:fc:17:e7:
1f:a5:09:83:0f:47:e0:0c:64:c6:93:58:61:27:2e:
c6:92:93:7d:45:eb:18:67:6f:cd:27:33:4b:ae:fd:
27:ad:58:a9:e9:58:71:3c:a3:a7:f6:44:f0:85:3a:
10:70:68:4b:d2:72:86:dd:8b:51:84:d4:4f:49:79:
97:6c:c9:34:f4:7d:a8:1d:91:1a:29:a2:65:24:5f:
e9:a3:30:9f:26:31:11:bd:b8:f8:10:16:d9:18:43:
5a:2a:73:93:c0:21:d2:9d:e2:e3:81:e5:38:67:25:
34:f7:f0:0f:fa:62:7b:21:d0:c8:a3:0a:3c:e5:9b:
67:1f:7c:d7:8d:0b:4a:f1:3a:f0:71:d3:70:d5:09:
d9:8a:3c:9e:89:e3:d8:70:ad:1a:a9:cd:ca:f9:04:
ae:54:26:19:1e:ed:fd:d6:15:f9:45:d6:0a:3a:b9:
cc:ff:16:20:4f:2e:6e:f6:23:4f:3b:95:e2:f3:bf:
9d:ac:36:ee:b3:c9:e0:29:c4:8c:d7:a8:88:00:f9:
eb:a5:94:26:89:38:19:a2:c4:08:fb:24:0a:07:78:
72:4c:ef:a0:5d:cd:2d:8d:0c:05:8e:8c:f6:3f:bf:
af:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:70:79:2F:60:4A:AF:CA:AF:8C:A6:14:D9:48:A8:97:2E:9F:63:55
X509v3 Authority Key Identifier:
keyid:A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/9XB5L2BKr8qvjKYU2Uioly6fY1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.208.0/22
45.153.204.0/22
185.113.48.0/22
185.241.0.0/22
IPv6:
2a06:6800::/29
Signature Algorithm: sha256WithRSAEncryption
3c:d5:4f:9d:41:18:9f:2e:36:44:09:da:7c:ec:12:aa:4e:7a:
5d:f3:b0:c1:b3:1b:42:33:cd:5c:79:39:15:06:7b:7a:48:38:
5a:65:dc:36:5c:83:ca:dd:e7:36:b3:1d:f5:94:a1:fc:a1:c3:
a7:5b:82:cb:d6:63:a1:8c:51:62:64:3c:6e:24:02:08:d1:6b:
d9:7b:48:36:39:15:54:0d:0b:53:87:d7:23:23:5b:3f:47:f3:
64:ec:01:d6:7a:4b:44:53:95:8c:32:4c:d9:9f:04:ad:1e:4b:
a9:0f:df:69:90:57:f5:f8:5e:9c:12:df:e0:72:ca:60:ec:4a:
86:c9:ac:4a:db:b2:3f:4a:2a:63:0a:51:dc:75:56:d9:55:fe:
d8:05:67:45:a1:84:c5:d9:61:f8:13:c2:70:da:df:0c:e5:15:
c4:b4:70:0c:37:04:4a:26:ab:d5:71:1b:6f:aa:a4:33:82:09:
55:fa:4d:f3:8f:8b:46:0a:6a:dc:56:91:10:2c:68:17:a4:6b:
39:c8:5f:94:50:bd:71:ec:47:bd:30:da:db:fb:e8:70:99:7a:
60:3d:b0:dc:ca:c9:d5:75:52:9c:9b:9c:cb:86:76:52:99:2e:
87:8e:96:87:3a:14:14:ce:f5:38:35:9d:84:9c:68:f9:11:c4:
4e:d0:51:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:25 2025 by rpki-client