Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/elz21FRqy5gHuoOdFFHjWL2b9Es.roa
File: elz21FRqy5gHuoOdFFHjWL2b9Es.roa (raw, json)
Hash identifier: W2WsukI/tFamxoD8uB+FWoFR2rFAU7xa3x4SbmExrEE=
Subject key identifier: 7A:5C:F6:D4:54:6A:CB:98:07:BA:83:9D:14:51:E3:58:BD:9B:F4:4B
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 0195239BB9404834557CEB8776945634FCFA
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/elz21FRqy5gHuoOdFFHjWL2b9Es.roa
Signing time: Thu 20 Feb 2025 13:46:02 +0000
ROA not before: Thu 20 Feb 2025 13:46:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 45.43.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:23:9b:b9:40:48:34:55:7c:eb:87:76:94:56:34:fc:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Feb 20 13:46:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a5cf6d4546acb9807ba839d1451e358bd9bf44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:98:1b:78:7d:be:ef:da:c6:8e:1c:61:62:
80:6e:c4:36:6c:e2:4e:6a:49:01:89:fe:14:77:94:
68:8d:3e:a0:2d:bc:dd:05:10:0b:bd:c8:0a:45:0b:
bc:af:32:70:25:ff:71:26:af:40:3b:c4:74:8f:8a:
40:de:b9:cb:80:da:b2:45:9c:b9:86:a5:d0:ba:f7:
ea:95:bb:d6:bb:80:8f:f6:4b:8f:f9:a0:a9:08:09:
11:58:38:78:34:90:66:e5:7c:96:fb:dd:11:0e:65:
a0:12:cb:df:06:10:c9:2a:40:df:0b:12:77:ee:fd:
37:1f:17:91:52:c6:0f:69:81:46:3d:5e:02:48:60:
3f:ff:a9:30:b9:44:f2:2e:6d:2c:dc:2c:d1:d4:0d:
1d:bf:03:66:96:27:ee:f5:e3:8b:33:75:be:0a:ce:
a3:25:ed:6b:53:bf:c0:dc:2b:8f:01:a9:18:b3:42:
43:1f:1e:63:64:ee:04:05:cb:4e:7f:8a:ba:90:01:
01:04:3c:b3:d8:6e:cf:96:e3:3a:06:98:31:d7:e6:
ec:aa:b5:d9:19:22:ec:8a:56:6d:5a:bd:66:9b:13:
0d:d1:9a:ad:2f:81:69:ce:5a:9f:94:59:60:a3:a3:
a2:ce:3d:b5:12:4f:27:a4:0d:2f:82:6d:b3:8d:48:
05:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5C:F6:D4:54:6A:CB:98:07:BA:83:9D:14:51:E3:58:BD:9B:F4:4B
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/elz21FRqy5gHuoOdFFHjWL2b9Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.72.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:21:7d:3a:f4:44:33:6b:5f:52:a2:31:f4:1c:53:1e:00:bf:
f5:99:dc:66:9a:63:38:82:94:82:ce:c4:5d:1c:0e:bc:50:ad:
b3:61:e4:4a:98:b6:92:26:87:a7:aa:da:19:e5:15:87:01:fa:
1e:59:a3:eb:ec:23:7e:16:ff:18:54:0c:e4:ad:42:0e:ac:66:
f1:29:17:a8:24:3c:47:90:86:5a:f0:b3:4b:53:9a:f6:32:54:
f8:19:10:ca:b8:3b:23:2c:5d:74:df:4f:ba:c4:58:38:1b:1c:
a7:cb:80:c3:5a:54:0e:a8:71:8c:43:55:28:a2:ad:97:ba:b0:
23:85:00:4b:7d:54:a0:a2:8a:aa:71:44:48:6b:30:7c:b4:fa:
c0:30:be:39:06:db:ee:f5:09:57:99:02:f6:37:bb:4f:66:f4:
3a:9a:0b:31:0d:c3:7e:ee:22:8b:0c:d4:79:99:7d:25:e3:7d:
a2:f8:c3:19:d0:b3:17:75:e9:31:77:de:3a:f5:d6:a0:13:0a:
4e:eb:2f:74:d6:95:0d:7e:e5:1a:cd:ae:6a:7d:77:13:23:a3:
26:d0:e1:57:10:d9:e7:83:27:94:87:43:7f:e6:25:f8:af:5f:
a5:44:7d:75:0d:e4:bf:a7:a7:56:06:58:85:7b:64:d2:aa:bc:
a0:ff:18:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:59:48 2025 by rpki-client