Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/r0HIP-3dGzEl8LJOC5Q7l8L3bTo.roa
File: r0HIP-3dGzEl8LJOC5Q7l8L3bTo.roa (raw, json)
Hash identifier: jfr0QYiCFGcK2PdaQAFOPftayngcakQ27RLnfJHcu4w=
Subject key identifier: AF:41:C8:3F:ED:DD:1B:31:25:F0:B2:4E:0B:94:3B:97:C2:F7:6D:3A
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 019422FB0EA5B0523B97135C7E0764882A0D
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/r0HIP-3dGzEl8LJOC5Q7l8L3bTo.roa
Signing time: Wed 01 Jan 2025 17:47:46 +0000
ROA not before: Wed 01 Jan 2025 17:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 45.112.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:0e:a5:b0:52:3b:97:13:5c:7e:07:64:88:2a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Jan 1 17:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af41c83feddd1b3125f0b24e0b943b97c2f76d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4e:ea:cc:c3:70:9e:2a:cb:ae:16:1e:70:75:
28:b7:85:0d:88:c6:41:7a:1f:8b:2f:bf:a9:b3:75:
7d:ab:37:46:26:95:2d:ad:bc:a6:d6:83:65:df:de:
6c:18:b1:a3:37:02:7d:fc:93:24:12:e6:f3:e7:24:
e9:c3:48:1e:68:02:08:21:0a:cd:ec:b5:84:02:eb:
eb:74:81:c2:cc:4a:46:34:a1:5c:52:c6:9e:ec:ea:
34:7e:20:d0:69:e5:ee:09:7e:07:a7:95:c4:b4:69:
43:23:71:3d:55:37:fc:a0:91:2f:87:63:76:54:1b:
00:a2:bb:a4:23:1a:4d:15:94:27:a1:22:c3:53:d2:
06:29:c5:23:1d:05:d2:ba:10:c3:16:3f:5e:89:f1:
12:f3:23:5e:bc:f9:a7:47:57:44:d9:53:90:3f:dc:
f5:96:02:b2:16:5c:cc:c2:aa:f8:e1:73:d7:21:d2:
e1:ab:46:9b:3d:06:59:9e:1c:fd:5c:72:02:8a:8d:
fb:16:da:e5:4b:4a:80:6a:d8:19:9d:62:43:c1:83:
78:1f:d3:6e:38:45:72:c7:4b:b6:b1:bc:e7:32:0d:
10:2a:18:a3:33:e5:54:3d:86:bb:70:8a:4b:db:ad:
20:ba:80:26:d7:76:97:b8:89:e6:62:a5:d5:32:a1:
5f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:41:C8:3F:ED:DD:1B:31:25:F0:B2:4E:0B:94:3B:97:C2:F7:6D:3A
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/r0HIP-3dGzEl8LJOC5Q7l8L3bTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.112.194.0/24
Signature Algorithm: sha256WithRSAEncryption
32:e9:fb:58:8c:26:7f:50:94:1f:2d:01:cc:b1:ae:51:1c:91:
e4:d4:a2:ba:a5:72:c1:83:f6:d9:6b:53:af:77:2a:68:2e:07:
7b:80:ab:d9:18:c7:64:fd:50:d7:a5:bd:92:f2:87:dc:98:70:
c1:c2:12:bf:db:3c:39:29:64:b8:7c:56:da:18:db:86:e6:1c:
df:4d:c0:f4:66:3d:45:8f:d1:5b:93:6a:4f:59:11:cd:a1:7b:
03:64:b9:82:88:b0:ec:36:41:4e:42:bf:8e:0a:ba:ec:7e:21:
4e:e5:75:10:82:64:d5:a3:92:1a:c9:bf:6a:b9:95:36:90:5e:
b5:6a:ba:e3:6d:c2:6f:4c:ad:06:d3:58:cb:0b:5c:93:79:9d:
c1:56:87:4a:5b:fe:50:c2:4c:6c:bb:3e:c0:0b:9d:1b:e2:d7:
b8:c8:9e:eb:31:72:fb:3c:a7:45:8e:a5:d2:96:73:fe:3f:d1:
c3:c4:07:9e:1b:7a:df:92:4e:40:81:92:43:2b:10:07:18:a5:
28:3f:21:93:4f:0c:d9:93:e8:84:6f:4f:3a:db:21:22:67:77:
24:1f:ca:86:e9:26:a3:50:94:a8:a4:0e:50:e3:78:36:09:fa:
d5:11:c0:34:5e:de:23:d8:86:d5:56:b0:c5:31:a1:78:50:1b:
08:af:45:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:13:35 2025 by rpki-client