Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/aO3r11e9FzxFIAvzci6U1ugRCX4.roa
File: aO3r11e9FzxFIAvzci6U1ugRCX4.roa (raw, json)
Hash identifier: RN1LPTFZ9dixQeq/j0V0Euzw3FqtnyCrfR7culnL03E=
Subject key identifier: 68:ED:EB:D7:57:BD:17:3C:45:20:0B:F3:72:2E:94:D6:E8:11:09:7E
Certificate issuer: /CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
Certificate serial: 0194221F90845E44C773FE3E97406CA45C59
Authority key identifier: 47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/aO3r11e9FzxFIAvzci6U1ugRCX4.roa
Signing time: Wed 01 Jan 2025 13:48:01 +0000
ROA not before: Wed 01 Jan 2025 13:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208597
IP address blocks: 45.93.208.0/22 maxlen: 23
2a0e:28c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:90:84:5e:44:c7:73:fe:3e:97:40:6c:a4:5c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
Validity
Not Before: Jan 1 13:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68edebd757bd173c45200bf3722e94d6e811097e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:b5:0b:f7:21:d5:74:02:ab:84:6c:04:f7:
94:a2:ad:8b:dd:c6:3f:2e:25:3e:92:6b:78:c8:b6:
74:c9:34:49:8d:f0:f3:5f:98:35:45:8c:bb:81:32:
f7:d2:3c:2a:4b:56:78:74:a5:3c:9e:d4:61:d2:19:
68:b5:c3:22:3a:13:60:1d:f6:b9:74:33:b7:e3:0c:
e7:2a:98:11:d1:70:eb:85:b7:3e:50:7d:df:55:57:
3a:81:45:18:2a:24:1d:b5:67:1c:73:18:03:c1:a9:
af:6a:a0:53:69:17:3f:aa:3e:19:50:10:1c:c0:39:
25:15:41:e3:4f:55:49:31:c5:35:14:36:57:6d:c1:
db:d5:34:09:c4:8b:60:ff:9d:66:a5:61:3d:e1:b3:
86:a3:ce:7e:78:54:86:c6:c1:70:72:8f:db:1c:d5:
df:90:88:18:8a:49:e2:13:3d:c3:18:f4:2a:76:4e:
72:f8:9f:ce:14:c5:56:ab:2b:64:fc:d8:b3:ec:9e:
20:5f:e8:98:35:37:78:30:02:7b:ef:64:f8:85:e9:
05:c3:88:07:ae:23:8f:f3:f6:40:ec:ce:ce:3f:c2:
6e:76:17:ef:c6:a9:08:6d:6e:42:d6:8e:b7:ec:7b:
3d:2a:53:0d:f6:19:a2:aa:a0:b4:ae:f7:5a:6d:30:
4a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:ED:EB:D7:57:BD:17:3C:45:20:0B:F3:72:2E:94:D6:E8:11:09:7E
X509v3 Authority Key Identifier:
keyid:47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/aO3r11e9FzxFIAvzci6U1ugRCX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.208.0/22
IPv6:
2a0e:28c0::/29
Signature Algorithm: sha256WithRSAEncryption
61:f2:bb:ce:92:06:09:13:8c:ad:86:d7:c8:e1:19:c7:63:75:
3f:72:db:ad:75:48:79:03:fc:42:1b:d5:d3:e8:3e:81:2b:91:
a2:8a:d3:67:79:48:ba:3a:dc:5e:bf:3a:c8:45:e8:2d:d9:cc:
ee:8e:55:95:51:0d:b8:5f:0d:be:5d:53:e5:15:b7:13:e0:19:
6a:f9:4c:44:b3:dc:0a:6e:64:80:72:80:72:7a:33:2d:1f:92:
21:18:96:fe:73:78:d1:8b:49:c2:ff:af:9e:f3:a5:39:05:f9:
cc:66:c8:33:81:21:7b:bb:0c:4e:6c:83:8b:86:e5:3b:0a:d2:
3e:d4:c0:c9:5a:f9:57:6b:3f:46:e0:1d:35:d7:c5:db:95:6b:
81:2f:32:7a:af:f2:7d:8f:30:e0:04:f7:f4:ca:56:60:3f:74:
21:1f:51:c8:38:77:13:a3:cb:32:b2:98:2a:ff:f9:f9:12:ff:
56:da:eb:04:ce:b4:02:35:3e:4f:d4:72:c4:5b:4b:c4:17:45:
1c:c7:6d:b8:a7:c6:91:ab:c8:c4:89:a9:2e:d9:a2:96:4d:c7:
6f:e6:00:4f:89:04:bd:8f:c8:75:2c:64:63:f2:82:d7:51:25:
06:e9:7a:31:bf:8b:2a:5e:92:18:c0:ea:a3:10:6c:bc:e8:c3:
5c:58:69:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:51:55 2025 by rpki-client