Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/O1ywiFiLkq1fR5di5oR2ZQ0O0VU.roa
File: O1ywiFiLkq1fR5di5oR2ZQ0O0VU.roa (raw, json)
Hash identifier: SE/6ae9nVewYClVlXFv1//+tibHGjvE3o8ZX8Ja08V4=
Subject key identifier: 3B:5C:B0:88:58:8B:92:AD:5F:47:97:62:E6:84:76:65:0D:0E:D1:55
Certificate issuer: /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Certificate serial: 019420D5A07C0C6276256A55994162B0B28C
Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/O1ywiFiLkq1fR5di5oR2ZQ0O0VU.roa
Signing time: Wed 01 Jan 2025 07:47:38 +0000
ROA not before: Wed 01 Jan 2025 07:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208206
IP address blocks: 45.154.20.0/22 maxlen: 24
185.181.12.0/22 maxlen: 24
2a0a:bb80::/29 maxlen: 48
2a0f:9f00::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a0:7c:0c:62:76:25:6a:55:99:41:62:b0:b2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Validity
Not Before: Jan 1 07:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b5cb088588b92ad5f479762e68476650d0ed155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:91:4d:a0:c9:32:bc:74:55:42:56:0f:8e:
83:e9:47:b8:e4:87:0a:7e:fb:ba:17:57:0f:57:77:
30:8c:e6:40:5e:39:61:be:8b:ae:5e:05:78:53:77:
57:cd:a8:9a:40:ed:9a:69:33:27:a9:34:72:4c:d3:
77:41:22:05:8d:93:20:6a:f8:7e:60:60:02:d3:70:
3b:01:28:f5:65:b9:97:59:f4:6e:68:9c:24:29:d2:
3f:44:ae:2f:0d:ef:d6:4e:2a:48:08:f4:61:1f:6b:
8f:35:fb:21:c2:fa:49:3d:83:ae:a8:c6:d4:36:5b:
61:86:22:49:ff:d4:98:75:c2:19:9f:3e:45:12:35:
25:96:c3:1b:8f:64:4b:b5:12:78:9c:a4:a9:fe:1b:
b4:eb:f3:b7:02:fd:33:e0:8c:76:7f:d5:82:a0:56:
07:54:f4:37:46:9f:36:26:a5:ae:4b:d6:81:d9:92:
1b:eb:01:64:c4:2c:40:af:7e:ec:f8:66:60:01:51:
f6:09:cc:13:47:0e:bc:df:f3:0d:02:b2:72:64:14:
ce:2d:8d:f7:31:64:5e:be:2a:4b:91:a3:57:1c:5c:
98:5f:06:82:d1:34:13:c9:47:1b:f0:52:b3:53:6b:
61:ef:f1:19:6c:18:59:64:ee:d7:02:47:df:e6:32:
cb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5C:B0:88:58:8B:92:AD:5F:47:97:62:E6:84:76:65:0D:0E:D1:55
X509v3 Authority Key Identifier:
keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/O1ywiFiLkq1fR5di5oR2ZQ0O0VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.20.0/22
185.181.12.0/22
IPv6:
2a0a:bb80::/29
2a0f:9f00::/29
Signature Algorithm: sha256WithRSAEncryption
58:cc:71:7c:9f:cd:12:26:2a:7f:08:73:82:2d:16:fd:49:bd:
7c:81:b3:9a:3f:28:3a:ae:60:b3:20:50:8d:16:1d:f8:7d:74:
47:8a:9a:11:3b:23:ad:c3:b5:71:0b:72:04:27:13:69:8a:34:
9b:e6:81:a0:b8:a7:d4:4b:66:56:c6:6c:72:3d:e2:ef:f0:23:
e1:4c:c7:3a:7e:72:84:e2:e8:ef:8a:bc:57:e4:5f:ab:57:7f:
0a:51:a4:67:7d:82:20:b6:78:3c:89:fd:17:a1:0b:19:0d:f1:
82:fe:cb:7b:30:3e:4b:57:e5:45:bd:14:c7:97:6b:3f:bf:cb:
94:7d:bb:52:8b:d3:ec:6b:ca:e8:88:e1:46:8f:74:35:b5:91:
05:79:89:c2:d5:c8:be:6d:2f:50:b8:4a:a8:1d:44:d1:a4:f0:
ad:45:47:b0:ce:a0:a0:47:1c:4b:1b:0c:e4:60:c6:1b:3c:2b:
60:45:78:ae:a9:a9:4a:25:fb:57:b2:dd:2b:d7:52:65:f1:23:
c3:81:6b:94:fb:64:75:c3:a7:77:29:b0:a8:12:c7:d4:6f:89:
c1:93:1d:02:c4:49:dc:66:79:2f:cc:6f:73:7e:d4:2a:12:96:
ca:a3:f3:87:00:4d:2b:6c:e0:d3:22:15:17:da:4f:a4:69:0a:
bd:fc:c6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:39:06 2025 by rpki-client