Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/H0NKaOe5bQ8Q0_5pjno5XSaRBtA.roa
File: H0NKaOe5bQ8Q0_5pjno5XSaRBtA.roa (raw, json)
Hash identifier: 23YuHYDJK8ztv50Y7XASqWUgok/NgTr64wM7KdMg6xM=
Subject key identifier: 1F:43:4A:68:E7:B9:6D:0F:10:D3:FE:69:8E:7A:39:5D:26:91:06:D0
Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial: 01942368D35EE8DD1AE2B493AFEA9E2935D0
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/H0NKaOe5bQ8Q0_5pjno5XSaRBtA.roa
Signing time: Wed 01 Jan 2025 19:47:39 +0000
ROA not before: Wed 01 Jan 2025 19:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138968
IP address blocks: 45.81.32.0/23 maxlen: 24
45.81.33.0/24 maxlen: 24
45.150.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:d3:5e:e8:dd:1a:e2:b4:93:af:ea:9e:29:35:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
Validity
Not Before: Jan 1 19:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f434a68e7b96d0f10d3fe698e7a395d269106d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:3e:63:a3:2e:d9:62:da:d1:b7:f3:16:c4:
69:23:41:ee:20:37:89:be:93:ed:ea:c1:44:58:9c:
65:9d:04:7b:42:af:88:f0:05:44:e2:95:33:41:a4:
1d:50:db:74:cd:79:d4:83:86:2e:a3:15:da:57:5f:
da:2f:07:78:7d:40:76:d4:a6:64:8f:54:bd:d4:74:
5f:e5:9c:2d:d2:f3:e5:11:66:93:fe:23:34:14:20:
9d:6e:69:68:ba:85:86:ad:70:b6:fc:f8:26:66:9e:
b2:ec:b8:fe:8c:ec:5d:ce:66:33:5d:d1:cd:3b:47:
f7:9d:ca:87:7e:f1:a3:0e:19:9a:fc:9e:23:af:7d:
15:4c:08:9c:e8:66:57:43:08:5b:39:bf:d6:16:e8:
ed:ed:a1:2f:d3:98:b9:45:9d:26:84:ac:28:ae:8b:
96:13:f6:de:43:dc:a8:9c:3f:a6:7c:67:7d:6c:9f:
70:53:f1:f3:95:43:0c:6d:c0:6c:9f:93:a8:a3:f4:
22:40:77:ad:89:d1:e8:fa:84:32:e5:2f:36:d3:58:
af:ee:06:e8:99:e2:8b:45:89:98:32:31:d2:fa:9e:
f4:fa:3a:cb:48:13:7a:a3:89:f1:f8:52:e4:01:b9:
59:00:da:94:11:ce:a4:18:10:6e:a8:91:7a:23:95:
a3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:43:4A:68:E7:B9:6D:0F:10:D3:FE:69:8E:7A:39:5D:26:91:06:D0
X509v3 Authority Key Identifier:
keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/H0NKaOe5bQ8Q0_5pjno5XSaRBtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.32.0/23
45.150.236.0/22
Signature Algorithm: sha256WithRSAEncryption
43:ae:f2:69:b4:5d:c2:85:5c:18:de:a8:b8:bf:2f:1a:5e:3e:
11:c8:2f:48:fe:f6:f9:1c:6d:1a:7b:91:d4:4b:6d:00:7a:96:
d7:9a:8c:7a:59:9d:de:d3:f9:fa:a6:bd:d7:8e:2e:e5:c8:e0:
8b:21:c8:a2:a3:58:07:2b:e9:1b:0c:f9:9b:b8:33:c0:c1:c8:
3c:72:44:49:ab:30:94:e8:16:0b:fb:7e:7a:2d:5e:f1:68:58:
5e:aa:93:76:a9:7b:e3:46:47:36:c7:0d:84:d2:bb:e9:48:e6:
bc:7b:fb:a4:f4:61:b0:4e:da:3e:cb:98:1f:f9:3f:77:b2:42:
66:7c:a8:76:16:36:25:d4:1d:69:1f:17:a1:fe:c0:5c:4a:f8:
10:7b:b0:a0:99:dd:f3:3c:c5:37:36:e3:e6:fc:cb:85:65:01:
a0:c1:54:20:30:92:a1:dd:16:0e:39:c3:bf:a7:7f:b6:13:f4:
e7:d1:21:6e:46:83:17:cc:e3:a0:2a:7c:79:f8:04:8f:57:74:
8f:5b:21:7e:7d:c3:f3:2d:fd:30:90:90:13:52:8e:ae:52:c1:
53:9f:c9:c4:9e:4c:c0:61:ca:27:c4:6b:47:2c:1a:72:c7:50:
dc:18:d3:8b:ce:cc:78:3f:ad:e7:ff:0b:c7:27:8e:90:39:8f:
87:a1:8e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:41:19 2025 by rpki-client