Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1fXYURsq7P3niIobzJApNjsixU4.roa
File: 1fXYURsq7P3niIobzJApNjsixU4.roa (raw, json)
Hash identifier: jyUWictepoQQ5AzLhwaLGnt5Rd2wZKZfLphdS3f5vDg=
Subject key identifier: D5:F5:D8:51:1B:2A:EC:FD:E7:88:8A:1B:CC:90:29:36:3B:22:C5:4E
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D721D745FC2BD33A38C98D53DF163D
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1fXYURsq7P3niIobzJApNjsixU4.roa
Signing time: Wed 01 Jan 2025 21:48:09 +0000
ROA not before: Wed 01 Jan 2025 21:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205125
IP address blocks: 45.95.201.0/24 maxlen: 24
2a03:e2c0::/32 maxlen: 32
2a0d:8340::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:21:d7:45:fc:2b:d3:3a:38:c9:8d:53:df:16:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5f5d8511b2aecfde7888a1bcc9029363b22c54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:17:4a:8f:f4:71:ef:cb:66:d7:d4:92:8d:63:
99:d9:36:b3:bb:dc:f6:dc:66:21:da:7c:ba:18:e5:
cf:2a:3c:13:ce:28:67:1b:d3:ac:1d:3d:69:57:b8:
f2:c4:58:37:19:19:58:df:60:a6:61:7a:b3:49:48:
4b:7d:f0:62:c1:50:cd:cb:ed:fc:b3:32:0b:f5:16:
6a:59:7f:6a:7b:ea:a6:fc:fc:42:ec:9c:67:f8:4c:
8c:4d:f5:13:43:43:f1:1c:d2:43:03:da:0d:8a:b6:
65:40:1f:19:ad:50:f3:c9:d0:d2:0d:7f:5c:21:ea:
ef:67:d9:da:da:bc:c9:f0:1e:d6:9c:99:43:14:49:
c2:4b:0b:44:1a:ad:3e:88:97:2c:97:46:30:c9:cc:
0b:42:43:e6:24:8a:38:d3:1a:aa:2b:10:f0:e2:fe:
13:9c:ac:e4:f9:ea:4a:ae:88:6c:80:78:d1:f6:05:
e3:77:62:80:fe:37:7c:e3:b1:4a:02:5d:88:c1:c4:
f9:98:e8:c4:eb:85:8a:b5:70:3b:a7:2a:c5:05:2f:
b6:65:60:94:bc:78:28:5f:58:2b:b4:73:7b:71:e5:
c9:54:4f:88:4f:a4:9e:54:fe:00:f6:62:f9:b1:ac:
23:4c:50:04:9e:10:9a:93:cb:ac:0d:0e:5c:8e:37:
b1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F5:D8:51:1B:2A:EC:FD:E7:88:8A:1B:CC:90:29:36:3B:22:C5:4E
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1fXYURsq7P3niIobzJApNjsixU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.201.0/24
IPv6:
2a03:e2c0::/32
2a0d:8340::/32
Signature Algorithm: sha256WithRSAEncryption
8e:a0:5f:78:e7:e5:29:20:21:54:c7:cd:8e:70:67:28:57:3a:
be:0e:5d:9d:7d:02:8e:22:f3:85:0f:c2:7a:07:6b:9d:cb:b0:
d1:bb:d2:23:4d:8b:93:0a:ba:1c:b6:b5:bb:6a:af:0a:a1:ff:
33:57:f1:79:90:24:56:a0:af:5f:8f:90:5d:31:a6:98:db:0a:
f7:0b:ae:31:5c:62:6a:80:96:a9:25:5e:fb:b4:1d:2f:fa:4c:
a6:f4:36:2e:c8:36:65:b6:42:bd:ba:ad:ec:b9:7a:03:7e:87:
66:e5:d3:2a:2e:6a:96:3a:b0:38:b7:c2:aa:c3:ea:51:98:8c:
ce:75:c9:87:fb:cf:b2:20:6f:ca:76:c8:6a:c1:be:6b:6d:5e:
4c:fc:c8:6e:2b:cd:5a:7f:0e:42:e6:bf:87:9c:7b:0c:c8:8d:
98:51:c2:45:7c:9b:b7:1f:16:b7:01:8a:e3:75:f0:4f:bc:6c:
aa:4d:ee:2b:3c:6e:5b:c0:5c:14:96:f6:6a:35:bc:d6:4d:31:
a8:ad:4a:f3:0f:63:65:58:5e:09:f8:65:38:ab:93:5e:c4:10:
98:f9:d3:a0:d0:c7:90:c9:60:d4:89:06:b4:6f:96:12:67:f0:
1c:67:1c:d4:ea:58:1b:f9:80:18:1c:dd:fc:49:6e:60:f5:29:
3a:29:14:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:32:32 2025 by rpki-client