Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/IELJH6M7c-qGa_xF_N_rVAXGjYc.roa
File: IELJH6M7c-qGa_xF_N_rVAXGjYc.roa (raw, json)
Hash identifier: QPFfU1BkEUCanKp/XJb5ENTQ74R8UjYATL4PwXWDHyg=
Subject key identifier: 20:42:C9:1F:A3:3B:73:EA:86:6B:FC:45:FC:DF:EB:54:05:C6:8D:87
Certificate issuer: /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Certificate serial: 019421B1EBDEC2A54D9082702C575FB710EF
Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/IELJH6M7c-qGa_xF_N_rVAXGjYc.roa
Signing time: Wed 01 Jan 2025 11:48:15 +0000
ROA not before: Wed 01 Jan 2025 11:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 45.91.255.0/24 maxlen: 24
193.57.172.0/24 maxlen: 24
2a11:5ec0::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:eb:de:c2:a5:4d:90:82:70:2c:57:5f:b7:10:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Validity
Not Before: Jan 1 11:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2042c91fa33b73ea866bfc45fcdfeb5405c68d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:8c:69:69:21:5c:74:09:91:8c:c8:d0:59:
89:6a:b5:66:99:9e:74:8b:5b:55:b1:43:ad:da:15:
25:2d:71:b2:3d:bc:5e:e9:98:d2:fc:91:01:df:8a:
7b:42:ed:1d:1a:0e:d3:61:76:3e:ed:7f:e8:48:c8:
f6:36:7a:65:b1:d5:8d:2b:28:6e:55:74:69:7b:64:
1f:6e:c1:9b:f6:60:aa:a5:a5:d0:b4:dd:ee:91:1c:
40:1b:75:3a:7f:fd:a9:82:9d:f8:73:5f:0f:05:bc:
57:54:90:c1:97:e1:c2:9f:c2:f8:36:3f:44:2a:a1:
07:05:bc:b0:f2:70:7f:88:af:61:53:86:f3:b3:c7:
f9:2a:86:c6:d2:9e:1e:12:ca:9a:a9:7c:5e:01:d2:
69:8b:d7:fb:3c:b1:f0:91:74:a2:07:da:2c:ce:fa:
0c:db:95:c9:e3:f6:33:a9:93:3a:2d:bf:9b:0b:49:
ac:64:7e:36:40:8d:28:05:53:69:28:dd:01:eb:6e:
97:83:6f:6c:22:34:a5:b9:63:9e:38:dd:a5:64:66:
85:7a:c5:72:2e:37:da:ba:f5:75:da:07:df:e1:a5:
6f:e4:c7:0c:71:c2:a1:5b:43:86:f1:22:80:3f:8b:
3e:7e:30:74:ff:a0:dc:ed:38:03:ae:3f:61:aa:ba:
fe:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:42:C9:1F:A3:3B:73:EA:86:6B:FC:45:FC:DF:EB:54:05:C6:8D:87
X509v3 Authority Key Identifier:
keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/IELJH6M7c-qGa_xF_N_rVAXGjYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.255.0/24
193.57.172.0/24
IPv6:
2a11:5ec0::/40
Signature Algorithm: sha256WithRSAEncryption
3b:7c:13:41:28:a1:50:1b:94:b0:84:1e:44:74:1b:15:b2:93:
4d:26:3e:31:74:77:81:66:22:93:eb:a6:7f:38:ee:b3:79:aa:
4e:b7:09:13:aa:85:2f:d0:72:86:06:0a:b0:96:82:d7:78:c2:
84:0d:2b:f0:32:e3:38:d7:2d:e0:91:dc:d1:61:8d:c1:86:51:
f6:42:24:02:40:5d:41:e5:c2:7d:21:9c:d4:36:eb:bc:c5:71:
ef:03:78:a1:a0:a3:6f:88:7f:2c:ec:fb:ed:81:1a:ed:6c:c5:
e4:a7:25:2b:3b:1c:b2:6f:47:e7:39:80:67:8f:df:e7:98:7b:
7a:52:bd:90:d5:05:d9:85:7c:20:7a:00:69:46:b1:8a:97:de:
7a:d7:1c:9c:9a:d6:d9:a6:ae:eb:01:9c:ac:36:e4:a6:dc:ad:
de:a6:f0:bf:66:bd:29:b7:bf:71:1b:ca:ff:5d:0d:85:79:03:
4f:02:71:97:7b:42:8f:d5:bd:11:f8:13:5b:87:ff:09:43:b6:
53:77:5d:a1:6c:b9:1f:79:6d:b3:3f:20:37:bc:05:9a:19:3c:
df:6f:45:10:a0:cf:52:ef:33:73:b9:72:7e:a0:15:c3:62:41:
81:b8:56:02:74:b3:82:ff:82:42:05:51:66:ef:ca:5d:63:e4:
ce:6c:c9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:59 2025 by rpki-client