Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/ltRYivrHDrWNdxne_A9FIv1LJlY.roa
File: ltRYivrHDrWNdxne_A9FIv1LJlY.roa (raw, json)
Hash identifier: qB1Eut1IyAFg4Lz5YzqH97WbuLNnEkbs/hF3c3T/wFo=
Subject key identifier: 96:D4:58:8A:FA:C7:0E:B5:8D:77:19:DE:FC:0F:45:22:FD:4B:26:56
Certificate issuer: /CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
Certificate serial: 019421B1E61DA6D91899F965D7F15F6F9AD8
Authority key identifier: C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/ltRYivrHDrWNdxne_A9FIv1LJlY.roa
Signing time: Wed 01 Jan 2025 11:48:14 +0000
ROA not before: Wed 01 Jan 2025 11:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49810
IP address blocks: 45.84.147.0/24 maxlen: 24
2a04:d202::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e6:1d:a6:d9:18:99:f9:65:d7:f1:5f:6f:9a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
Validity
Not Before: Jan 1 11:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96d4588afac70eb58d7719defc0f4522fd4b2656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:5e:fc:32:4a:61:6e:43:bf:93:c8:16:3f:
42:4f:3a:4d:51:48:32:21:e2:a4:82:fb:26:94:10:
e8:ec:37:ac:7a:6e:52:c6:30:1e:fc:36:bc:23:6c:
2f:93:86:c6:7b:b0:ff:d2:95:0f:02:8f:0a:99:37:
7a:1e:ff:ad:2e:3d:0a:7e:a1:7e:86:de:5f:03:d4:
4c:3a:cb:c3:49:9e:0c:0e:e6:cd:de:db:05:3a:48:
fb:2d:7b:3c:dc:08:59:8a:ee:54:16:b4:5c:ef:4e:
2c:15:1c:2f:21:c3:29:54:dd:ff:3e:73:27:3b:21:
26:b1:60:95:12:b5:89:83:7c:e8:ad:0a:a7:c8:ed:
03:44:00:73:e5:1b:7f:34:45:67:ea:52:b6:4a:10:
6e:75:a5:7d:21:4f:73:a6:06:b6:33:79:52:a6:7f:
06:1e:0d:84:4b:1f:8c:97:98:49:b3:82:b1:d0:6a:
3b:1b:a6:58:93:ec:3a:cb:44:de:44:57:99:8c:8a:
4e:66:ff:60:f8:bb:08:6a:9c:98:63:6f:77:0d:5a:
54:75:42:13:f0:13:de:72:1b:b4:e5:dc:83:b9:19:
28:2e:46:bf:dd:25:85:40:a3:e9:ab:d8:bd:11:2b:
42:8a:c8:bb:99:af:53:39:90:99:73:0a:9a:73:eb:
87:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D4:58:8A:FA:C7:0E:B5:8D:77:19:DE:FC:0F:45:22:FD:4B:26:56
X509v3 Authority Key Identifier:
keyid:C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/ltRYivrHDrWNdxne_A9FIv1LJlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.147.0/24
IPv6:
2a04:d202::/32
Signature Algorithm: sha256WithRSAEncryption
c5:8a:a7:76:86:b2:64:12:b3:17:e6:0f:1d:04:78:9e:64:d9:
b3:6a:c1:fd:bd:2d:7d:d6:36:c4:43:13:80:c7:20:f6:d2:34:
05:c9:d3:d6:8b:53:66:21:95:23:7d:0f:19:3c:1c:30:91:8e:
d2:57:32:76:30:9c:5e:a5:47:6b:d4:49:61:cd:02:2c:75:d0:
ae:10:f0:7d:00:15:6f:88:f2:8e:85:7c:ee:df:91:af:e3:09:
2c:50:f7:31:65:2b:c2:6a:b1:b8:f0:42:be:ca:e9:b9:aa:84:
b8:c6:3c:66:f6:af:cb:72:52:57:8f:e1:20:8e:b8:93:7d:a7:
93:54:9d:1f:ac:6e:fc:c9:0c:54:e9:70:40:32:54:b1:31:01:
b6:0b:ed:85:93:25:6a:2a:21:8e:59:ed:63:0f:80:6c:9c:c1:
c3:55:4e:5b:20:c2:0f:53:fe:68:50:4f:ae:13:09:06:3f:04:
fc:95:da:cc:cd:f8:85:ec:e4:d7:2b:4a:41:22:40:96:f8:18:
a0:40:72:86:7d:0f:89:29:c9:70:67:e4:b8:09:f8:eb:05:d7:
6b:ef:de:b1:27:94:2e:3f:40:9d:8c:e6:b0:53:fc:4f:18:13:
b6:e6:cc:7b:e2:c7:2c:fc:e5:76:66:dc:15:8c:82:3c:b8:ec:
74:ff:20:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:48:04 2025 by rpki-client