Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/574W7z-0GVSyQ6o383reYXA7QZc.roa
File: 574W7z-0GVSyQ6o383reYXA7QZc.roa (raw, json)
Hash identifier: 7oxCz8Z8dYajS9esPzPSpl386CuN+PzQh5YVWvXB59o=
Subject key identifier: E7:BE:16:EF:3F:B4:19:54:B2:43:AA:37:F3:7A:DE:61:70:3B:41:97
Certificate issuer: /CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Certificate serial: 0194266BC43FCFA28D84EEC0CBB610C29F6F
Authority key identifier: 85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/574W7z-0GVSyQ6o383reYXA7QZc.roa
Signing time: Thu 02 Jan 2025 09:49:44 +0000
ROA not before: Thu 02 Jan 2025 09:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200023
IP address blocks: 45.82.184.0/22 maxlen: 22
194.176.127.0/24 maxlen: 24
2a0e:7180::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c4:3f:cf:a2:8d:84:ee:c0:cb:b6:10:c2:9f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Validity
Not Before: Jan 2 09:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7be16ef3fb41954b243aa37f37ade61703b4197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:61:72:d4:5d:c0:76:d6:1a:97:24:a4:6f:
c1:7c:94:00:24:c9:c8:4f:7f:58:41:b3:43:25:ff:
47:b7:8f:41:b0:a4:3c:62:ec:db:52:8f:18:fe:5b:
0c:32:3d:e2:61:22:a6:ce:0a:2c:42:e2:e0:f3:2f:
c5:6c:99:96:c9:ce:1b:90:ed:19:c6:28:4b:63:81:
be:cc:85:72:f5:ff:23:19:ac:9b:7f:29:e8:c4:65:
f6:32:97:a0:61:df:b9:ca:f8:26:ff:e3:56:b6:4d:
83:16:82:eb:6c:e0:1f:30:7c:e4:bb:9a:f8:34:21:
5a:a7:ca:0b:cc:d6:25:36:a6:b2:ee:00:86:45:a2:
94:e2:32:9e:d5:97:73:f0:6e:18:fe:ec:28:c8:b2:
61:98:4f:97:3a:0f:c6:44:f7:6f:9c:30:04:44:d6:
f8:dc:60:71:a2:7a:06:27:4f:d8:4b:34:25:e1:3b:
aa:46:d2:11:60:19:27:61:1e:fb:87:72:d5:49:21:
dd:7b:57:c5:34:74:45:2d:f7:ff:4c:8e:f2:6c:8d:
40:74:22:aa:57:16:24:28:dc:26:a3:f9:89:45:01:
a8:64:09:e5:23:ec:50:58:93:9f:a4:e7:cf:a5:14:
47:e4:ec:4e:d5:c6:ba:41:c8:18:cc:2a:46:af:49:
cf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BE:16:EF:3F:B4:19:54:B2:43:AA:37:F3:7A:DE:61:70:3B:41:97
X509v3 Authority Key Identifier:
keyid:85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/574W7z-0GVSyQ6o383reYXA7QZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.184.0/22
194.176.127.0/24
IPv6:
2a0e:7180::/29
Signature Algorithm: sha256WithRSAEncryption
8c:92:b1:45:17:31:46:fa:f0:aa:91:9a:f3:7e:75:53:34:c4:
4e:b5:74:c9:c5:55:7e:55:81:f9:4c:0a:91:eb:2e:47:8b:29:
d0:ee:b5:15:98:4d:d4:7b:2b:3b:88:cc:26:fa:9c:0a:0f:f7:
11:15:10:d4:9f:c7:58:a2:3d:34:81:76:f6:b1:1e:b5:b1:06:
90:27:a9:36:36:76:36:0c:12:49:f4:f6:69:5b:f2:07:ce:19:
fd:b7:82:ca:39:24:f9:c3:e3:1e:b8:36:29:60:41:74:7f:d1:
5e:41:4d:80:41:69:97:37:65:1e:e0:b9:cb:6a:98:05:42:bc:
d1:d1:35:1c:fd:57:13:8d:3d:b7:cd:cb:3a:ce:e5:00:85:08:
88:75:1b:a8:84:33:c0:7a:a2:82:88:c7:cf:45:c8:ff:83:4b:
f5:c7:0d:2f:f2:e5:86:4c:c6:d2:e4:30:b8:c1:f1:b5:e5:ac:
38:33:e7:ca:85:e3:05:58:bc:9d:67:35:67:da:02:30:70:09:
f4:3d:92:72:f7:d5:06:d7:42:fa:0d:5c:56:13:c5:18:47:d1:
ad:81:20:45:40:04:2d:2f:46:87:b7:e0:6b:18:a4:0e:8a:08:
e2:fd:7f:80:8a:c0:d3:7d:1d:40:bb:5a:55:09:87:5e:9b:7f:
c3:54:07:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:29:21 2025 by rpki-client