Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/rp1BUH4wi3m0ZRePKunctbuAs1Q.roa
File: rp1BUH4wi3m0ZRePKunctbuAs1Q.roa (raw, json)
Hash identifier: 5yUZsPGTg7jVt3bBKRE63yxBpMNZrLdVCVPJ6IkaaOo=
Subject key identifier: AE:9D:41:50:7E:30:8B:79:B4:65:17:8F:2A:E9:DC:B5:BB:80:B3:54
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01942143FD8E3B69B932D3489AFBA55FBC29
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/rp1BUH4wi3m0ZRePKunctbuAs1Q.roa
Signing time: Wed 01 Jan 2025 09:48:11 +0000
ROA not before: Wed 01 Jan 2025 09:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43581
IP address blocks: 45.155.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fd:8e:3b:69:b9:32:d3:48:9a:fb:a5:5f:bc:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae9d41507e308b79b465178f2ae9dcb5bb80b354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:37:75:0c:81:c8:b0:79:ce:fe:80:45:e3:be:
a3:68:ea:99:2b:80:f8:27:47:b8:df:03:9f:e5:4a:
37:12:d5:e6:dc:69:e8:05:fe:d2:70:6b:63:35:b8:
6a:dd:b8:f8:63:9f:ce:7b:71:8a:91:71:ce:1f:80:
a1:8f:10:b8:6f:87:db:c3:eb:e1:8a:6c:0b:0b:3d:
26:49:6a:ad:bc:fe:90:a9:9c:89:59:1a:5b:46:e6:
a2:57:b8:3c:b8:42:1d:d2:6a:e2:f4:42:f5:6d:fc:
b0:52:c2:a1:7a:78:8f:0b:64:60:db:03:d5:32:09:
1d:c2:d2:e3:b3:d1:6f:3b:cc:c2:63:c8:bc:dd:6a:
f2:c8:d6:ba:28:58:70:ee:28:f8:f6:ab:bf:14:ff:
aa:de:60:02:7e:5d:14:dd:78:a8:d1:5d:a9:d0:aa:
d2:99:b2:5c:75:36:0c:38:92:29:79:e4:c9:1a:68:
79:67:8d:78:51:b3:47:cb:d6:c7:2e:b5:27:47:e1:
09:dd:56:a8:e0:be:f4:c3:fe:95:3b:35:7d:15:ca:
e4:a6:35:01:da:bf:29:d2:19:5d:49:18:5d:fc:a7:
01:02:36:23:99:1d:29:71:58:44:e0:a8:d7:25:40:
ee:23:99:2d:a9:6a:1f:36:de:a4:46:da:c3:90:63:
14:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9D:41:50:7E:30:8B:79:B4:65:17:8F:2A:E9:DC:B5:BB:80:B3:54
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/rp1BUH4wi3m0ZRePKunctbuAs1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.207.0/24
Signature Algorithm: sha256WithRSAEncryption
92:18:17:8e:a0:b3:67:67:6e:c2:40:72:c2:fb:3f:79:6d:b3:
44:ee:ce:7f:89:c9:0d:ba:e2:d5:c9:54:58:b7:2f:70:99:8f:
cf:ad:59:f3:11:85:ca:a3:66:d9:c2:28:e1:46:60:52:d0:09:
e3:cf:b7:da:14:16:b7:04:84:5a:32:e7:d8:5d:14:e3:da:70:
a8:2e:bd:c1:5f:ce:d0:08:47:84:76:32:7e:44:be:ab:84:b0:
04:74:43:07:db:8a:7c:0a:a0:29:d6:b1:f3:4e:9d:07:ad:2b:
dc:dd:74:33:5b:fb:51:90:d3:20:54:b9:e7:3e:60:71:04:7f:
a5:7a:96:7f:95:77:83:06:13:92:f5:a6:2d:46:03:bb:66:8d:
c7:2f:8d:bd:da:40:f2:5c:34:0f:ba:7f:70:61:ca:54:a5:38:
fc:b5:8c:07:56:b4:a3:db:a1:26:59:0a:c9:bd:52:cd:68:f6:
b8:ea:d0:45:38:66:e9:b8:ac:e7:2d:f1:d8:39:a1:89:c9:1b:
6b:68:0e:39:18:b5:91:c3:66:99:da:cc:67:3c:9d:c4:9f:57:
ec:22:4f:83:47:5f:9f:34:25:49:6e:59:de:35:d7:c1:6b:6c:
cb:e1:63:8b:46:8f:b5:80:d1:50:4b:f4:ca:15:3c:55:4d:24:
e4:69:21:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:41:10 2025 by rpki-client