Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0wnOJRWDHFiPWS-dh_92C7ZbHpo.roa
File: 0wnOJRWDHFiPWS-dh_92C7ZbHpo.roa (raw, json)
Hash identifier: uc9/y63/K5pCnOS1XWCOJdU8GjyL0DS/EYJDJYGNgn8=
Subject key identifier: D3:09:CE:25:15:83:1C:58:8F:59:2F:9D:87:FF:76:0B:B6:5B:1E:9A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194D703F0087DA24DE5B436453DAF6592EC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0wnOJRWDHFiPWS-dh_92C7ZbHpo.roa
Signing time: Wed 05 Feb 2025 16:49:06 +0000
ROA not before: Wed 05 Feb 2025 16:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62425
IP address blocks: 45.95.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d7:03:f0:08:7d:a2:4d:e5:b4:36:45:3d:af:65:92:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 5 16:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d309ce2515831c588f592f9d87ff760bb65b1e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:71:44:d8:75:21:46:ec:ad:8e:ad:fd:a7:ba:
f5:04:7e:7d:ae:3f:01:c7:9c:96:8a:2d:90:69:17:
fd:73:50:db:ad:06:d3:46:02:d0:23:dd:52:3a:d1:
54:ff:d3:df:b9:59:5f:c8:61:4a:86:b2:19:eb:b5:
44:d9:94:da:5e:c7:64:f1:69:ba:50:b6:e0:6d:a1:
da:8e:61:c7:75:6c:ba:67:e7:93:05:c3:f7:dc:15:
1d:89:fd:0c:6a:cf:25:5c:a1:5f:56:57:28:23:1b:
57:8b:87:1f:d7:5d:0c:4e:40:be:3e:52:12:6f:82:
d2:77:da:fe:af:96:f7:65:db:61:7e:5c:c8:3b:e6:
c1:56:b1:66:df:45:50:26:3b:14:a2:bd:cd:d8:42:
08:1b:5f:6b:8f:ae:89:ac:e7:94:7e:71:d7:f1:17:
43:a3:10:ce:75:cc:a8:65:75:ee:02:37:6b:65:d5:
5f:44:1b:98:32:13:20:46:e5:bc:ba:86:3d:b2:a3:
b2:4d:7d:d4:fb:ad:7c:c5:a5:b2:81:e7:60:dd:4a:
5c:4a:ac:44:a8:5a:a2:6d:98:43:f0:25:fe:c6:7e:
46:a8:bf:2b:27:86:66:8e:8c:61:1c:4b:ce:19:c6:
94:cb:d8:a1:ba:f5:56:e5:2d:c7:da:c9:3c:a1:6f:
41:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:09:CE:25:15:83:1C:58:8F:59:2F:9D:87:FF:76:0B:B6:5B:1E:9A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0wnOJRWDHFiPWS-dh_92C7ZbHpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.1.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a5:f3:ed:e2:d4:ff:b0:e1:f8:03:6c:5d:7b:33:ba:52:ee:
cf:e7:d2:ef:e1:b3:ac:98:e4:5f:73:9d:de:bf:bd:06:f3:90:
28:60:89:ef:d2:e4:ed:5c:ce:e3:b7:f1:0d:22:fb:07:7a:a9:
e2:4d:00:e6:a6:92:d2:c5:42:4a:43:4c:3d:d3:6f:87:ff:f1:
fe:0f:47:a5:0a:f8:08:1e:aa:a4:c1:85:b6:8c:b0:98:f8:d6:
8d:dd:b8:e6:eb:ae:ec:1d:33:45:58:b1:f9:ed:92:4f:75:6d:
d1:55:3e:a4:56:98:a7:58:74:f4:a2:63:64:44:aa:e1:71:c2:
6f:a7:70:54:b7:4f:b4:a0:8b:a6:04:2d:c5:99:0c:6c:e3:df:
42:0e:66:65:b1:1c:fd:ed:c1:22:a5:3b:19:1e:32:f2:1d:b0:
c2:75:0b:56:78:11:2c:b6:19:aa:21:b5:80:d5:2e:3f:3d:c5:
6f:35:66:39:a8:cb:cf:3c:e5:4e:61:12:78:a1:f6:6c:67:37:
30:26:48:1c:fd:20:15:54:82:cf:ef:99:2a:1c:70:d5:e6:7a:
aa:c8:64:a6:ca:3c:12:34:03:41:a2:7b:93:be:c7:c9:f4:07:
d6:04:e3:eb:e2:29:f3:75:4b:b3:2c:93:91:42:0f:f7:57:1a:
c6:5a:a7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:02 2025 by rpki-client