Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/2137GkYhKriIsKTcyKMgkP9brCg.roa
File: 2137GkYhKriIsKTcyKMgkP9brCg.roa (raw, json)
Hash identifier: /7cteLANHoZOiqVgusN3Dqohbx1yk5x8PXrJnu2i8Fs=
Subject key identifier: DB:5D:FB:1A:46:21:2A:B8:88:B0:A4:DC:C8:A3:20:90:FF:5B:AC:28
Certificate issuer: /CN=096e293ba380dcc75f00106443668f51002555b7
Certificate serial: 01941F8C9DFEA2D16D396E7A7524BAB1FEA0
Authority key identifier: 09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/2137GkYhKriIsKTcyKMgkP9brCg.roa
Signing time: Wed 01 Jan 2025 01:48:16 +0000
ROA not before: Wed 01 Jan 2025 01:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 45.157.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:9d:fe:a2:d1:6d:39:6e:7a:75:24:ba:b1:fe:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096e293ba380dcc75f00106443668f51002555b7
Validity
Not Before: Jan 1 01:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db5dfb1a46212ab888b0a4dcc8a32090ff5bac28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7d:dd:39:c7:90:af:6c:75:f6:ea:da:0f:ff:
de:85:93:69:19:3a:55:0d:68:dd:88:7d:c1:d3:4b:
e1:3d:72:50:aa:20:99:85:8a:92:d6:b0:19:fc:51:
24:b9:78:73:36:dd:98:b7:ea:27:88:61:f9:f2:83:
3e:f1:7d:ab:b8:c3:ec:87:56:8b:2b:21:bd:90:14:
32:9d:d2:47:96:b9:cf:6a:ae:a7:0c:94:d7:39:28:
88:25:ba:8c:a9:7f:10:64:d1:f5:cc:74:22:94:08:
d0:ef:09:e8:eb:99:7f:f8:20:30:c2:bd:87:ac:4b:
22:b6:59:c9:fc:fe:ca:08:85:66:27:d5:9a:55:67:
9c:68:5a:6e:5e:ea:0d:53:8d:f3:fc:1e:99:46:ba:
1c:e1:a6:bf:29:a4:b2:ba:fc:ae:21:67:a0:db:f1:
9a:e7:a0:01:24:a3:a2:56:26:91:90:60:bc:0d:24:
77:18:a3:95:ac:c2:34:22:a9:2c:79:6f:18:1b:89:
96:db:49:11:45:2d:d1:6b:0d:02:ce:47:62:80:27:
a0:70:eb:b9:6f:55:ed:26:51:4f:ca:09:d9:da:c2:
0f:3c:71:4c:fa:95:62:f6:03:da:f9:40:d5:61:43:
08:c7:8f:19:6d:35:ec:b6:5b:20:46:aa:1c:cd:42:
02:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5D:FB:1A:46:21:2A:B8:88:B0:A4:DC:C8:A3:20:90:FF:5B:AC:28
X509v3 Authority Key Identifier:
keyid:09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/2137GkYhKriIsKTcyKMgkP9brCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.7.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d3:14:dc:1a:b5:fe:11:74:e9:ce:66:a3:c3:70:e7:0b:b1:
70:b7:d1:17:08:8c:cf:79:aa:b8:4c:42:65:55:31:30:89:c2:
d6:4a:48:58:4b:0e:75:d2:b1:96:4e:ba:18:a8:ff:5e:07:f6:
e1:d0:d3:df:87:b5:6e:42:ca:c0:ae:2a:27:83:24:12:61:95:
8e:b3:51:b8:74:3b:c6:d3:c1:3f:fd:72:8f:66:e4:15:da:03:
3e:fc:33:a7:67:9f:15:da:51:1e:fd:b4:93:39:32:49:f3:2e:
e7:6f:4f:3f:98:be:e6:38:b9:10:c1:a1:f0:fb:3a:0e:70:c2:
5c:b4:64:ea:66:fb:f3:fd:e9:0e:26:77:cf:c1:a9:ab:49:d2:
88:b2:2f:fa:80:08:0a:5d:69:5c:4a:3f:c1:93:a7:2c:cf:2b:
d5:34:aa:3a:8b:1b:dc:49:66:05:2b:9f:d7:8d:01:59:50:67:
1f:55:20:38:05:9c:bf:25:9b:cc:9a:d9:42:5d:cf:9c:f9:a5:
3c:4f:02:92:eb:ee:81:96:5f:c7:9f:eb:b0:72:7a:5a:de:5c:
87:6f:f4:9e:8f:f0:56:59:cd:13:44:46:bc:07:50:9c:3a:89:
85:46:fa:c6:45:06:a9:ff:f2:cb:86:4c:d7:e1:34:d8:4b:b9:
b2:d0:fe:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:04:05 2025 by rpki-client