Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/L0erWF8zE1RnGBSaNfbAKYl2kd8.roa
File: L0erWF8zE1RnGBSaNfbAKYl2kd8.roa (raw, json)
Hash identifier: /zy+SS2a9gbTjEnXkpsItTqQEn8dlA3GKuajYSpZLoU=
Subject key identifier: 2F:47:AB:58:5F:33:13:54:67:18:14:9A:35:F6:C0:29:89:76:91:DF
Certificate issuer: /CN=193743467b4da41c6295e9351153309586ba2399
Certificate serial: 01941FFAB19A5EBE82B5B332065FA0404089
Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/L0erWF8zE1RnGBSaNfbAKYl2kd8.roa
Signing time: Wed 01 Jan 2025 03:48:30 +0000
ROA not before: Wed 01 Jan 2025 03:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59268
IP address blocks: 45.65.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b1:9a:5e:be:82:b5:b3:32:06:5f:a0:40:40:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193743467b4da41c6295e9351153309586ba2399
Validity
Not Before: Jan 1 03:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f47ab585f3313546718149a35f6c029897691df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6c:b9:d9:b4:d3:54:bc:a7:d5:eb:a2:94:63:
92:d9:60:1d:43:bb:f4:06:af:bf:95:99:20:0a:bc:
6f:6c:f8:7e:62:b4:40:41:94:93:f2:bb:17:2f:72:
50:e8:31:6a:4c:3b:ae:49:45:0f:f0:9e:81:f4:24:
4c:10:0e:aa:22:1a:ea:db:9a:75:70:cc:35:57:de:
5a:f0:bf:06:5c:24:ee:44:50:ad:b8:8b:66:6e:35:
47:59:cf:ff:9f:3d:58:1f:53:8e:7c:81:f1:55:5a:
29:c1:3b:20:3c:f8:02:a2:17:15:9d:30:78:fa:05:
fc:72:90:93:ce:5e:2c:95:b5:41:f2:2b:75:a7:29:
3b:a4:16:46:e2:64:c4:d9:6f:12:bd:63:a0:cc:f5:
3f:d1:41:70:c7:9b:6d:b9:52:27:3d:30:09:35:5f:
59:f7:6d:dc:23:df:a2:38:83:8c:e9:d7:9d:9c:55:
10:47:8b:46:23:5b:93:5a:19:c9:ca:b0:11:8c:03:
63:6a:6f:93:7e:96:f1:6a:1f:ef:e7:28:98:b5:15:
8c:6b:dc:02:61:2f:f8:39:2a:cf:ef:63:7c:a6:90:
02:0b:77:16:4b:bd:90:c7:de:d2:d3:af:f8:f5:56:
af:c8:b8:86:4a:73:0c:90:84:72:6c:78:84:ce:c2:
f2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:47:AB:58:5F:33:13:54:67:18:14:9A:35:F6:C0:29:89:76:91:DF
X509v3 Authority Key Identifier:
keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/L0erWF8zE1RnGBSaNfbAKYl2kd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.70.0/24
Signature Algorithm: sha256WithRSAEncryption
76:24:61:30:82:9f:64:04:1c:a1:92:38:28:0c:0b:bc:70:f2:
df:93:01:d4:36:d1:e6:f9:75:53:79:d5:9e:4c:79:c9:a2:51:
96:af:1a:17:41:b1:fc:d5:6f:46:2a:29:f4:a1:c1:d8:8e:63:
4e:d5:b6:4f:62:a7:71:a4:ef:4a:c4:70:66:a6:e8:14:19:e1:
97:58:79:95:ee:24:81:40:dd:8d:70:44:9e:40:f7:02:ac:67:
ac:11:34:af:df:75:59:95:cd:c4:04:28:dd:55:69:3a:c1:87:
4f:f7:38:a4:a5:50:29:db:5a:8f:ce:b8:d7:45:f1:49:b0:f5:
64:7f:f9:3f:e7:f6:2e:7c:f5:de:f0:7c:80:67:cc:19:e1:3f:
c2:a9:47:6d:cb:3c:83:e7:d1:6e:00:c5:a0:fb:f4:74:10:dc:
a9:84:5f:9a:7f:bd:ea:52:05:c3:55:42:1d:07:a4:4f:97:b2:
5b:21:78:4f:ae:e1:b4:21:07:03:be:3d:f2:b7:c2:be:9b:2f:
76:1f:aa:35:f5:33:55:f9:c3:bb:e1:8b:04:c6:09:0f:de:7f:
4d:c1:c7:48:36:f4:3e:a3:a2:3b:18:6c:0b:bb:f1:3f:fd:f9:
07:0b:67:e1:1c:ba:d4:7b:d7:51:50:2e:dc:00:60:cd:d5:a4:
fa:36:b4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:21:56 2025 by rpki-client