Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/gV-AdPUkFl_LfbEYHO3LEVqJDIE.roa
File: gV-AdPUkFl_LfbEYHO3LEVqJDIE.roa (raw, json)
Hash identifier: oq8v8AZonrWakSkTnbhq+zFVagwWWAyJucXMeAftiMA=
Subject key identifier: 81:5F:80:74:F5:24:16:5F:CB:7D:B1:18:1C:ED:CB:11:5A:89:0C:81
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 019427B5B6039602B687D2A9CA3F8020F6E5
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/gV-AdPUkFl_LfbEYHO3LEVqJDIE.roa
Signing time: Thu 02 Jan 2025 15:50:07 +0000
ROA not before: Thu 02 Jan 2025 15:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31715
IP address blocks: 45.149.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b6:03:96:02:b6:87:d2:a9:ca:3f:80:20:f6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 2 15:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=815f8074f524165fcb7db1181cedcb115a890c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:f2:b1:a8:ec:c7:9f:af:13:5b:9d:45:b0:
6a:d6:9e:f0:bc:9b:32:e2:78:de:6d:7c:37:1f:36:
0e:2d:42:88:5e:d1:94:61:ae:72:6c:9d:e0:62:e9:
c1:b9:23:fa:a7:b6:fd:bd:9f:6f:d1:6c:e3:73:24:
b0:25:5b:fc:08:43:56:56:b0:57:89:e1:f0:c4:ba:
90:78:b3:f1:b4:bf:2b:8f:15:79:49:f5:cd:2c:05:
41:18:7a:e7:b3:35:70:89:d7:89:2a:e6:1d:da:53:
d3:91:09:f2:e1:ef:dc:22:b3:28:bd:eb:e9:e6:fb:
e4:e0:c7:ee:04:08:26:36:57:1e:b6:e3:01:4a:54:
6e:01:86:96:95:ec:70:ed:6d:a0:83:f0:6e:8f:bc:
0f:b2:a4:e6:ee:4c:5f:71:d8:79:7f:70:05:4e:08:
0c:8d:de:e7:53:8a:04:dd:7b:fa:4d:4a:81:24:de:
0d:af:89:63:4a:79:bc:5b:62:f8:7c:b0:f1:0a:00:
6d:70:13:22:27:a1:f8:1e:99:92:cb:51:8f:e7:24:
78:92:6a:90:d0:ec:83:07:91:3c:af:3e:cc:78:a5:
9d:a3:df:ef:b4:13:f6:3d:55:79:d3:c0:94:35:57:
dc:60:53:14:0a:08:50:89:58:a6:80:f4:98:6e:d4:
b2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5F:80:74:F5:24:16:5F:CB:7D:B1:18:1C:ED:CB:11:5A:89:0C:81
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/gV-AdPUkFl_LfbEYHO3LEVqJDIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.94.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:b4:41:35:97:43:e1:44:92:1d:f3:fe:93:4c:44:58:8d:73:
c2:10:eb:d6:7d:55:dd:e9:c9:7a:eb:d9:88:4a:e1:eb:46:c4:
f5:8e:58:31:f5:12:da:5f:30:cf:50:d2:3b:e6:c5:61:88:39:
80:01:ec:f3:65:88:6d:0b:61:72:33:91:db:a5:d0:84:da:55:
73:0d:60:7b:6d:9b:19:a6:8a:84:60:74:9f:4c:f7:95:b5:4b:
80:b0:10:60:e9:f6:a1:43:37:1b:87:ac:85:f7:77:b9:5d:82:
6a:1a:4c:45:fa:69:22:10:4a:e1:6e:f3:d1:a3:23:1b:94:7c:
e6:cf:8d:ad:ad:29:a5:4c:c0:00:f5:38:12:22:9c:01:c3:9e:
96:3a:62:55:ad:1e:b2:74:43:9b:fb:69:ea:e9:89:ff:e5:8f:
b9:fc:e6:b8:27:47:36:41:8e:11:75:6c:d8:92:d7:77:3a:2f:
71:a0:ac:18:5a:1b:77:1b:9a:11:ff:3c:7c:80:f9:12:69:31:
ec:3e:7d:c8:07:7a:95:a2:b7:ee:6c:70:f3:e2:5a:22:47:c6:
e9:c0:76:59:8d:0c:94:66:91:fa:39:f1:56:15:a2:ee:e3:6f:
30:40:46:db:ec:37:47:0b:f4:b6:44:c8:fb:fc:62:19:89:ed:
5a:b6:b8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:44:19 2025 by rpki-client