Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/sVF_LBGDIrlpE6heJ31KIbuIkJE.roa
File: sVF_LBGDIrlpE6heJ31KIbuIkJE.roa (raw, json)
Hash identifier: AvH1YbPb9vEHhvnTABD5k6ZveYNOynhCWhTsrSWC3Ho=
Subject key identifier: B1:51:7F:2C:11:83:22:B9:69:13:A8:5E:27:7D:4A:21:BB:88:90:91
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 0194221FD649FDBEC832229D5C339C64C180
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/sVF_LBGDIrlpE6heJ31KIbuIkJE.roa
Signing time: Wed 01 Jan 2025 13:48:19 +0000
ROA not before: Wed 01 Jan 2025 13:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 45.142.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d6:49:fd:be:c8:32:22:9d:5c:33:9c:64:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jan 1 13:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1517f2c118322b96913a85e277d4a21bb889091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:c9:94:14:4f:42:3d:3e:ca:14:45:4b:93:
3d:03:c5:26:02:65:39:9e:18:5a:cf:dc:a4:1d:c2:
ef:d7:6b:f8:7a:66:7e:a9:9e:5c:8c:7a:75:e3:e0:
3b:fa:1d:e9:be:51:50:98:b4:ce:94:42:06:ae:21:
5a:84:85:15:88:99:5c:91:f3:6f:97:45:22:b1:72:
32:ed:c6:fb:b1:9b:d9:ac:94:64:68:8a:2e:6c:fb:
a8:78:11:ee:e7:ba:cf:97:6d:a9:12:d8:c8:81:25:
71:9b:07:91:10:8a:67:0d:40:c6:ec:96:47:b3:7b:
b5:e1:35:37:73:5e:78:4b:05:c6:58:05:24:27:5d:
45:10:8b:24:d7:47:e4:06:2a:d5:00:38:dd:7c:f2:
a4:ed:30:c7:cb:c3:24:16:0d:1f:2e:18:02:23:49:
9d:ab:9b:f2:28:b8:83:0d:dd:0e:5a:0a:53:4e:ca:
c0:c3:1e:33:be:20:c2:15:a6:b5:08:7a:97:e3:55:
6a:be:3c:91:1c:0b:73:1e:20:88:7e:27:9b:ce:7f:
b6:85:b7:5c:c7:43:d1:09:8e:cb:3c:04:b5:eb:74:
1d:ae:30:f6:b8:0a:36:02:40:cb:3c:02:c8:d9:63:
17:6a:45:c0:78:0d:c2:0b:22:c7:ac:00:c6:80:98:
b6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:51:7F:2C:11:83:22:B9:69:13:A8:5E:27:7D:4A:21:BB:88:90:91
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/sVF_LBGDIrlpE6heJ31KIbuIkJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.24.0/24
Signature Algorithm: sha256WithRSAEncryption
53:91:85:40:54:e9:27:38:f9:55:fb:3a:51:62:7e:08:b2:f0:
ad:3b:f3:ee:df:7e:d7:09:a3:2c:76:cb:8a:df:1c:14:39:8e:
b5:be:1a:3b:56:9e:08:55:1d:fc:44:0a:04:51:e5:98:9e:af:
7a:2a:df:4f:8b:31:b3:79:39:5f:6f:f4:2b:87:c8:97:35:67:
7d:f6:fb:1a:ad:9d:1e:96:44:61:fd:26:4a:25:4c:b2:aa:88:
0f:a5:57:de:91:38:c0:bd:e5:85:2f:4b:db:9c:e0:63:4e:f3:
08:a9:42:93:d0:45:a6:29:5d:d5:b8:b1:9d:87:d3:34:d2:a6:
81:4d:9e:fa:a1:1e:d9:59:83:29:3a:84:79:87:92:52:0c:d8:
79:c1:b5:c1:a5:5e:42:20:2b:26:2d:95:7e:88:54:5e:b7:4d:
c4:3e:1f:50:31:2a:b3:20:52:97:b7:2f:ae:f0:27:60:b7:24:
41:3e:09:fd:40:04:c7:e0:83:4b:11:66:24:4f:0c:1a:38:8f:
88:33:1e:d4:26:1f:f8:70:6d:59:d4:7f:bb:a4:98:ff:4d:41:
5c:65:1a:7a:ce:f4:c7:0a:3f:53:58:71:b4:f2:cb:b2:a4:d1:
15:94:6e:c4:48:f2:27:6a:21:0c:74:a1:e1:a5:e4:3d:27:b5:
2f:e5:21:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:02 2025 by rpki-client