Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/VwscqchdEAmsVSyV2eD8RGldRmQ.roa
File: VwscqchdEAmsVSyV2eD8RGldRmQ.roa (raw, json)
Hash identifier: VdjKB9pG2pwAZNShYBPvCakHnXSVowEhPi3XTbCbuyI=
Subject key identifier: 57:0B:1C:A9:C8:5D:10:09:AC:55:2C:95:D9:E0:FC:44:69:5D:46:64
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0194258F128DB01459D2394131CAD1E94C43
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/VwscqchdEAmsVSyV2eD8RGldRmQ.roa
Signing time: Thu 02 Jan 2025 05:48:40 +0000
ROA not before: Thu 02 Jan 2025 05:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201839
IP address blocks: 45.67.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:12:8d:b0:14:59:d2:39:41:31:ca:d1:e9:4c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 2 05:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=570b1ca9c85d1009ac552c95d9e0fc44695d4664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:51:43:5d:34:ea:be:2c:9d:16:e0:d8:d6:b5:
3d:88:31:0a:68:a0:d4:8c:23:5e:b4:6a:8d:f6:38:
00:7c:3d:cf:3a:61:25:21:96:40:df:74:bb:9a:d7:
ad:ad:d1:ea:9b:58:8e:71:8d:95:54:67:df:89:36:
1f:72:4e:f4:80:d4:99:0c:6f:84:30:d5:c8:dd:24:
a9:af:86:69:66:c5:a0:4f:47:ed:31:8b:20:f2:4d:
ca:d5:32:2d:95:f7:60:d2:22:15:00:1f:7b:09:e7:
ae:18:dc:15:d1:f0:0d:97:8f:30:c9:0c:41:4f:80:
90:86:af:d6:04:63:db:ae:e2:b5:8b:c9:17:7e:1f:
f0:b6:ba:c7:31:a5:3b:6e:89:cf:09:d9:87:14:22:
2d:4b:ba:08:14:9c:60:5a:06:ea:f2:9c:0e:c9:13:
2e:b0:c6:49:dc:8a:23:5e:5f:da:23:84:e7:5e:c7:
7c:4a:23:d1:bb:74:25:c0:7a:bc:be:42:b3:f3:44:
26:a5:76:5e:5c:d2:80:f3:09:35:9d:6e:c4:86:d2:
73:5b:78:c6:25:96:f6:51:66:e2:b8:45:3c:43:64:
e7:65:24:b5:e0:f7:e7:b9:d8:d9:4f:15:cb:f8:9b:
cf:69:c0:dd:96:ed:1e:0d:6b:0a:1f:b2:7c:a9:2a:
9b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0B:1C:A9:C8:5D:10:09:AC:55:2C:95:D9:E0:FC:44:69:5D:46:64
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/VwscqchdEAmsVSyV2eD8RGldRmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.215.0/24
Signature Algorithm: sha256WithRSAEncryption
52:34:70:be:37:3c:61:7a:00:3d:47:4f:fb:5f:66:fd:67:7b:
75:27:a2:e2:57:e6:9e:88:18:62:2e:ef:ce:fc:46:5c:95:db:
bc:d5:9e:5d:9d:ad:35:e2:0f:d4:0e:19:81:b0:1d:d0:6d:ef:
6c:0b:c0:65:80:c9:1d:8a:b2:4d:7d:ef:3d:6e:41:ab:11:af:
76:0d:a7:f8:f2:f9:12:85:9d:c4:00:bc:78:fb:1d:39:37:f8:
2f:1d:95:5f:52:0c:4c:7c:fa:97:34:7f:aa:67:05:2f:7a:b9:
5f:37:d8:45:99:44:c9:82:7f:2c:6c:ad:57:8a:47:48:a2:db:
a6:d7:f0:2e:1d:fc:40:e5:5c:ec:51:30:5a:eb:55:1e:03:7e:
6e:90:6d:4a:66:50:7e:7b:3f:2b:53:60:bc:64:e1:a5:cb:fe:
61:2a:c6:60:02:33:05:e1:c8:ad:ad:f9:09:93:e0:69:c5:50:
f3:f5:bb:53:c3:fb:fd:d5:ef:b9:97:68:27:95:bb:0b:01:21:
91:0f:e3:86:05:3c:24:6f:77:4d:32:2d:5e:ff:7c:c0:ae:e5:
98:04:24:4b:d5:7e:24:9d:d3:0d:40:6f:62:fd:71:a0:3c:a2:
86:d6:60:67:07:f1:14:76:b7:9c:8e:9d:8e:6b:7d:01:90:41:
c9:f1:92:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:57:48 2025 by rpki-client