Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/l0gHM8GvVK6QwtZ12bJdUWZyAgA.roa
File: l0gHM8GvVK6QwtZ12bJdUWZyAgA.roa (raw, json)
Hash identifier: EQ1dP2YRTk2eZV0a40sNzCpIDgU0CGJQGOvWRKK6OaU=
Subject key identifier: 97:48:07:33:C1:AF:54:AE:90:C2:D6:75:D9:B2:5D:51:66:72:02:00
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 0194236A287EF3A610B21CBFD229D348A6CA
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/l0gHM8GvVK6QwtZ12bJdUWZyAgA.roa
Signing time: Wed 01 Jan 2025 19:49:07 +0000
ROA not before: Wed 01 Jan 2025 19:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134450
IP address blocks: 45.94.138.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:28:7e:f3:a6:10:b2:1c:bf:d2:29:d3:48:a6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Jan 1 19:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97480733c1af54ae90c2d675d9b25d5166720200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3f:d8:41:e2:ec:52:8c:0f:47:62:a2:76:12:
20:0f:16:83:d2:bf:6f:f7:e1:d5:9b:5f:82:d2:b0:
08:4a:f6:d4:2f:18:ce:a5:22:29:39:cc:c4:78:00:
83:77:d9:08:85:f5:d7:a1:fd:21:2e:50:e4:eb:dd:
44:7a:3e:c7:58:b7:8d:b9:40:84:99:23:4b:cd:f1:
95:5f:e9:2b:1a:6a:eb:23:77:e3:40:d6:ae:70:f3:
12:1b:cc:5f:66:74:fb:d3:f7:c8:4b:56:85:de:09:
b2:33:c7:70:90:f6:64:8a:02:10:d2:ec:35:ff:41:
ad:89:d6:ad:b7:dc:2d:16:93:1b:4c:3e:48:65:8d:
33:ad:0c:98:64:bc:e6:db:12:84:8b:18:af:20:c9:
dd:3a:04:6c:25:da:a4:40:05:99:c4:ae:97:d5:1d:
a0:28:c1:37:72:43:e3:53:95:2d:25:0d:db:3d:89:
5a:54:33:39:4d:77:3d:2c:9b:f9:d9:33:f3:cc:96:
a6:39:fc:d3:95:05:92:ca:9c:d4:d5:da:65:96:0b:
32:bb:43:63:f9:e7:d7:71:ec:56:96:35:a8:15:7e:
6b:e1:1c:bd:bc:33:2f:41:03:92:88:a6:8c:b3:d2:
8f:19:6a:95:2d:15:71:8e:59:24:54:08:f0:c9:a8:
48:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:48:07:33:C1:AF:54:AE:90:C2:D6:75:D9:B2:5D:51:66:72:02:00
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/l0gHM8GvVK6QwtZ12bJdUWZyAgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.138.0/23
Signature Algorithm: sha256WithRSAEncryption
78:c2:1b:e0:ea:73:62:8b:6f:9a:ed:94:63:be:db:98:29:b2:
8e:d8:c3:71:ae:4e:be:8f:ef:9f:eb:66:ff:ce:7b:9e:f3:96:
d7:8a:d3:13:ba:07:0c:ac:e4:f4:fe:fb:ba:9c:2f:82:68:04:
87:10:b8:0e:fb:95:9c:e8:33:cc:10:b7:ca:f5:5d:3e:1a:3b:
c3:72:43:0e:36:ba:62:8e:52:6d:23:e0:f2:68:c2:a7:04:af:
8d:ab:79:8e:2e:09:b1:eb:cb:56:24:d2:47:d7:00:4b:b3:81:
6a:ac:56:a2:64:ac:59:16:ed:32:78:f2:83:ed:59:b8:da:14:
cd:d3:47:06:f0:00:f5:e7:ab:4c:78:43:b3:37:bd:bd:00:bf:
4d:4e:a5:f7:e3:4d:c3:9a:f2:84:d0:99:39:5b:69:db:8e:ee:
0e:aa:e5:9e:29:e6:89:42:f8:df:78:d6:55:e6:da:97:19:7f:
cb:ea:35:66:f6:f1:3e:68:97:22:04:49:1b:09:7c:50:df:7a:
07:00:64:f7:cb:85:73:ae:ce:c0:51:65:b8:f1:42:25:cb:cc:
bb:d8:e6:35:51:42:fd:84:8f:84:8e:36:7a:15:6f:75:8c:45:
6e:d9:47:b7:bb:b8:b7:3f:31:35:cc:cd:c5:51:6f:ae:30:95:
d2:e1:36:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:54:16 2025 by rpki-client