Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/oxGdzAdcDsYU9dIYUi2ZtZFy78o.roa
File: oxGdzAdcDsYU9dIYUi2ZtZFy78o.roa (raw, json)
Hash identifier: fyDjVMq0dZA3uV5RGXDZ0ngdUW0DGALLFF9KABuohUU=
Subject key identifier: A3:11:9D:CC:07:5C:0E:C6:14:F5:D2:18:52:2D:99:B5:91:72:EF:CA
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01954163528BBDF5710A225CCC7AC5CF846C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/oxGdzAdcDsYU9dIYUi2ZtZFy78o.roa
Signing time: Wed 26 Feb 2025 08:33:03 +0000
ROA not before: Wed 26 Feb 2025 08:33:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 45.87.120.0/24 maxlen: 24
91.132.49.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:41:63:52:8b:bd:f5:71:0a:22:5c:cc:7a:c5:cf:84:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 26 08:33:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3119dcc075c0ec614f5d218522d99b59172efca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f7:15:ab:08:76:e3:f2:28:f1:e3:7e:4b:1e:
3b:d4:44:b9:a5:7b:79:de:b1:ed:42:20:d7:16:1e:
72:c1:e5:f9:be:dc:8c:93:d3:92:73:95:03:6a:44:
5c:fb:20:b2:1e:d1:5d:85:5c:c9:ab:0d:eb:71:dc:
54:19:07:d3:c8:5c:8e:61:c0:cd:e3:a2:cd:21:f8:
e1:9d:b2:e7:22:7c:b2:2b:af:4d:4e:e8:a5:a2:a3:
6f:c5:5c:ad:d4:3a:39:99:fb:b0:0e:f6:15:72:e9:
e9:38:13:2e:2d:7d:f2:dc:32:ba:fa:79:71:68:b4:
6e:a3:04:38:75:87:97:35:80:18:fb:c9:b1:48:82:
e5:d0:e4:c9:fc:3a:43:9c:08:64:12:66:ec:65:26:
fa:77:7a:c6:f5:c1:7b:b3:c6:42:a0:67:06:51:b5:
c3:17:f0:c0:b8:81:49:30:de:ea:1f:b9:7f:18:d3:
5f:2f:3d:42:45:00:d6:41:db:e1:a8:d1:9e:ec:5e:
b3:37:a0:85:7c:4a:b9:fe:36:5e:4e:43:a3:48:82:
35:42:fa:66:21:f5:13:36:a0:2b:3f:4d:c1:b6:8b:
a0:ab:4b:11:f8:2d:b7:e9:0e:34:7a:bb:f3:46:43:
f2:39:71:32:d7:f9:da:46:be:89:33:91:21:c9:02:
ac:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:11:9D:CC:07:5C:0E:C6:14:F5:D2:18:52:2D:99:B5:91:72:EF:CA
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/oxGdzAdcDsYU9dIYUi2ZtZFy78o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.120.0/24
91.132.49.0/24
193.124.80.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:6f:ae:40:41:ca:97:27:a4:90:60:50:af:a0:b8:ca:5b:19:
36:90:1e:16:79:c3:22:2c:fb:06:af:22:08:5e:c1:b7:b6:27:
56:2c:d1:69:d5:f8:d0:3e:a7:9c:05:ea:16:8b:ae:f8:e6:1f:
76:ff:1b:2f:3b:35:53:f4:aa:7c:58:ed:fc:2a:99:c6:66:f3:
25:bd:cb:fe:6c:e9:1b:6b:75:dd:64:7d:ef:a8:8c:f8:8d:07:
0a:11:1f:c2:59:c6:83:f5:5e:cd:00:1c:18:61:3e:d4:cd:a4:
c0:01:d0:c4:00:d4:bd:da:b2:72:54:31:0d:ff:f0:54:c3:ed:
63:62:64:48:ab:9f:32:73:b2:6a:b4:fb:6a:83:27:f5:bb:c8:
ba:4d:42:b9:89:70:d2:17:97:a6:dd:8c:15:8c:91:50:86:98:
a2:33:4f:55:48:d0:68:f2:c5:8a:de:0b:6a:fb:3f:ee:f5:e4:
a6:3d:83:86:e7:5d:54:c1:1a:b6:d9:7e:7a:80:48:b8:c9:c9:
92:4e:7e:c3:7a:51:11:86:93:90:86:21:3c:88:4c:34:1b:b9:
76:cb:30:9b:e0:15:78:4c:fc:17:49:68:61:16:6c:37:13:86:
c8:24:f5:a1:3a:80:03:a8:fe:11:dd:e6:35:a8:b4:c7:dd:b5:
4f:5d:7a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:34:48 2025 by rpki-client