Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/pN5SnkQN19ou2x5UZOfTyn6_Rb0.roa
File: pN5SnkQN19ou2x5UZOfTyn6_Rb0.roa (raw, json)
Hash identifier: KbWqEMgAWb6IcUnuvD0+WC5dIqXTlJgmk7uOCLNfK1M=
Subject key identifier: A4:DE:52:9E:44:0D:D7:DA:2E:DB:1E:54:64:E7:D3:CA:7E:BF:45:BD
Certificate issuer: /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial: 019425FC39FA243EA7DE58C11AC3365A24DE
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/pN5SnkQN19ou2x5UZOfTyn6_Rb0.roa
Signing time: Thu 02 Jan 2025 07:47:54 +0000
ROA not before: Thu 02 Jan 2025 07:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206150
IP address blocks: 45.80.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:39:fa:24:3e:a7:de:58:c1:1a:c3:36:5a:24:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Validity
Not Before: Jan 2 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4de529e440dd7da2edb1e5464e7d3ca7ebf45bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:d0:74:a8:1e:15:35:8f:9b:f3:e1:5b:0c:
d5:bd:f9:d4:13:2a:fb:50:73:61:49:0f:95:cc:f9:
49:ba:97:f0:af:b9:79:42:d7:ca:9f:27:a6:4e:8e:
e3:d8:b6:9b:08:2d:47:c4:21:5c:46:68:67:2d:3e:
79:c9:1b:80:d1:93:99:db:dc:a7:95:88:a4:65:98:
e5:7b:a0:92:da:7e:d9:db:94:7f:7d:3e:78:95:b3:
53:e3:03:19:4c:27:23:a7:88:c4:6c:77:35:b8:32:
90:7c:2a:0c:62:bb:02:53:34:ac:72:52:45:61:fa:
ab:24:60:a4:9d:58:be:53:03:3b:8d:55:64:bb:72:
a2:16:32:1c:65:88:8e:d6:2c:1e:f2:09:8b:bd:58:
5b:0d:54:43:a8:04:94:96:8d:f1:da:f3:7b:46:6c:
db:b2:e4:54:61:93:d4:74:49:72:16:3f:17:2f:e9:
4b:b0:fb:ae:dc:c9:d0:49:3b:df:b4:c6:70:7e:f9:
71:c5:a7:d3:20:26:90:9f:c3:7b:a5:5c:a6:fc:5f:
28:85:49:d4:0f:06:2b:36:75:46:c9:29:14:7a:5b:
78:40:fd:4f:d0:8c:ee:68:ad:5d:38:0c:31:66:dc:
d5:f9:79:ec:b2:56:23:c3:ee:43:c4:23:45:f6:cf:
79:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DE:52:9E:44:0D:D7:DA:2E:DB:1E:54:64:E7:D3:CA:7E:BF:45:BD
X509v3 Authority Key Identifier:
keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/pN5SnkQN19ou2x5UZOfTyn6_Rb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.48.0/24
Signature Algorithm: sha256WithRSAEncryption
45:82:da:0e:5e:89:76:9b:ff:5b:c2:38:e8:25:3b:95:bf:4c:
0a:a9:99:19:2e:af:95:82:c8:2b:3e:52:81:54:0a:18:82:4a:
8b:04:1e:24:3f:07:01:62:4b:0b:12:e8:0b:f7:ff:e4:20:ec:
d1:4a:4a:08:16:ec:ec:64:84:f4:71:ab:cc:b2:b7:dd:4e:28:
25:27:9e:6f:0f:6a:17:4f:e3:91:f8:31:26:14:95:ad:e1:84:
f8:4f:5d:49:f1:e6:d0:da:fb:15:3b:11:5c:47:1b:e2:17:9c:
2c:d7:df:2e:b6:86:81:e3:3b:05:05:7b:5e:4b:a1:3c:b0:0a:
c0:62:1a:7a:4f:84:30:d5:d6:1a:34:09:23:2b:4a:50:22:4a:
a1:10:f2:a3:13:7c:5e:9e:e3:73:34:d2:ec:8e:e0:96:a0:24:
2d:d9:6d:08:cc:e3:f1:6f:50:17:28:29:32:be:80:3e:d3:53:
4e:4d:57:59:54:18:cf:de:a0:5b:33:65:9e:64:8b:25:6e:7c:
e0:07:f4:cc:cb:02:4c:fe:cf:5d:17:a3:96:7a:76:a0:a7:35:
d2:48:ce:2f:70:66:65:58:bc:92:f7:2e:1d:38:6c:f2:4f:53:
af:fd:42:61:01:ea:30:dc:63:46:19:ae:be:74:84:47:ac:04:
0b:6d:94:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:43:51 2025 by rpki-client