Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/Q7HPJqSYzwAL9MgLg7-PWUtYCvA.roa
File: Q7HPJqSYzwAL9MgLg7-PWUtYCvA.roa (raw, json)
Hash identifier: Kzr58t+vIh856QCyC0+GN1fLeCTArKtLtDUh4zpgaGA=
Subject key identifier: 43:B1:CF:26:A4:98:CF:00:0B:F4:C8:0B:83:BF:8F:59:4B:58:0A:F0
Certificate issuer: /CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Certificate serial: 0194236A3239513534A2485F4A27805CB404
Authority key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/Q7HPJqSYzwAL9MgLg7-PWUtYCvA.roa
Signing time: Wed 01 Jan 2025 19:49:09 +0000
ROA not before: Wed 01 Jan 2025 19:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12884
IP address blocks: 45.95.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:32:39:51:35:34:a2:48:5f:4a:27:80:5c:b4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Validity
Not Before: Jan 1 19:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43b1cf26a498cf000bf4c80b83bf8f594b580af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:46:f4:63:2c:ef:01:d1:57:21:5c:3a:d5:38:
14:12:8b:3d:f3:24:91:e2:7b:e9:0b:e6:12:04:2f:
85:48:96:6c:bb:12:f0:aa:9a:54:67:88:e5:e0:4e:
9d:cd:40:8f:00:2e:77:4f:d1:4c:52:24:ae:91:10:
2a:d2:31:ad:e9:dd:42:29:1f:22:25:26:f4:5a:7f:
1a:7b:80:06:0b:38:0b:15:8d:f7:60:46:ba:8f:09:
5f:db:8b:dd:89:3a:46:32:f6:e6:ba:23:72:83:97:
c1:27:5b:ca:7e:4d:20:47:96:b4:e4:45:f5:10:6a:
2a:4b:14:a7:95:bc:e0:7e:5b:ba:08:95:f1:5f:2f:
89:72:a3:46:2e:16:d7:81:dc:76:dc:d5:46:4d:ad:
bc:7f:08:90:26:04:8b:5f:a2:46:99:48:cf:bf:8b:
f8:26:26:7c:2d:bd:8f:2b:ad:6d:83:54:7a:0e:54:
b7:fe:12:38:d4:13:3e:71:ce:c8:43:fb:f5:f6:a2:
0c:1f:9d:ec:a4:a7:c4:92:18:35:ef:3c:a6:f8:35:
4b:ab:b7:86:65:91:ad:76:6e:36:a5:48:51:dc:7f:
ca:1c:9d:3f:fe:96:0b:d6:fd:59:71:d5:af:ad:7b:
e6:81:50:b3:93:f5:99:50:d2:87:94:2d:58:1a:25:
1c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B1:CF:26:A4:98:CF:00:0B:F4:C8:0B:83:BF:8F:59:4B:58:0A:F0
X509v3 Authority Key Identifier:
keyid:33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/Q7HPJqSYzwAL9MgLg7-PWUtYCvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.94.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:81:c4:2e:ff:0e:25:24:aa:1a:be:3a:7e:25:aa:b3:b5:55:
68:af:88:bf:81:d6:7a:06:87:fe:82:56:26:38:77:38:07:f1:
45:83:2c:1e:03:3a:c0:95:f6:d3:e5:f1:f4:59:df:7d:53:1b:
aa:ba:54:55:16:46:9a:3f:5f:69:90:78:e6:3b:2b:c3:94:98:
45:2c:36:8e:54:b0:b1:b7:04:ce:fe:ae:91:94:d8:7c:b1:a1:
23:2f:3f:0c:cb:e4:62:af:f8:1c:3c:1e:8b:05:82:3c:ed:24:
29:12:f6:b9:dd:15:4f:21:62:0e:76:89:ff:22:83:1b:f9:05:
9a:98:0e:3b:10:80:cc:33:57:9e:87:16:6e:48:f5:0f:48:af:
9f:3d:fc:76:79:33:b9:ab:fb:45:53:32:cf:0e:8e:82:37:64:
ab:9f:03:c1:a4:b9:94:43:2a:fc:1f:b0:d8:ae:e5:a9:5e:82:
bc:37:88:63:77:16:36:df:43:4e:54:ef:c6:80:9a:ed:52:9b:
7d:fc:c1:c5:04:df:e8:16:31:df:fd:68:b4:b4:03:8d:38:8d:
22:a2:d3:f3:f4:e9:95:0e:75:f8:7b:d7:cb:bd:ae:5a:ef:fd:
aa:54:1c:db:37:d6:af:df:76:19:50:20:34:93:70:02:bf:4e:
9c:78:81:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:45 2025 by rpki-client