Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/90EI_dpCesTDZErva38pqWSowkc.roa
File: 90EI_dpCesTDZErva38pqWSowkc.roa (raw, json)
Hash identifier: O+jaAMmLxLBiHUnxgS8zvyFSPUE4LonTZM0Sq4OGluo=
Subject key identifier: F7:41:08:FD:DA:42:7A:C4:C3:64:4A:EF:6B:7F:29:A9:64:A8:C2:47
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282460EB0BC98BE8D8AD2AA9F462C34F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/90EI_dpCesTDZErva38pqWSowkc.roa
Signing time: Thu 02 Jan 2025 17:51:00 +0000
ROA not before: Thu 02 Jan 2025 17:51:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19437
IP address blocks: 45.8.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:60:eb:0b:c9:8b:e8:d8:ad:2a:a9:f4:62:c3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f74108fdda427ac4c3644aef6b7f29a964a8c247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:64:aa:8e:a3:89:fa:35:df:31:13:e4:6c:
d1:55:54:39:58:3e:53:e1:77:08:46:05:a4:21:b8:
d4:d8:2a:6d:57:9d:f1:02:e5:06:94:f2:1c:cc:a1:
3f:51:ac:00:1b:b6:98:3e:fa:a9:dd:a9:14:9e:03:
ed:2b:3c:30:78:79:43:1e:4c:fa:52:d3:84:b7:fd:
26:93:6a:4f:b3:80:0a:9c:70:15:5b:6e:60:72:aa:
ab:da:dc:2b:bd:ea:e1:76:64:7c:b9:0d:4c:d2:bc:
31:09:a4:84:27:26:20:25:23:55:52:49:7c:1c:a3:
1d:36:be:f7:96:68:be:7c:3c:90:95:8f:5e:66:8d:
36:49:3f:2c:a6:b4:b5:1e:54:62:ac:45:99:ca:84:
d8:1f:f5:54:2e:be:0c:e1:70:60:90:73:a2:16:b3:
d1:75:2d:31:04:ca:32:0a:21:0b:6e:99:1c:2f:51:
e6:e0:5c:3c:b8:90:bd:a5:28:71:4a:a7:7f:df:8a:
46:e7:fb:de:95:e9:bd:b4:26:57:db:91:87:12:30:
bc:c3:93:fb:33:07:6f:d3:6b:ec:ba:24:ef:c8:e9:
02:32:a4:8d:4c:b0:fc:df:a4:02:b9:67:74:73:db:
10:d7:06:36:4e:00:12:1c:34:7b:98:95:86:59:4e:
5a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:41:08:FD:DA:42:7A:C4:C3:64:4A:EF:6B:7F:29:A9:64:A8:C2:47
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/90EI_dpCesTDZErva38pqWSowkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.95.0/24
Signature Algorithm: sha256WithRSAEncryption
06:91:bf:31:bc:bf:2c:83:2d:b2:47:42:48:f2:d9:7a:69:5a:
1a:a6:91:90:79:bd:21:b9:ea:e8:66:2a:ce:95:35:09:e3:50:
17:e2:70:b6:3a:5f:9d:cf:8d:73:fa:83:57:14:04:1c:96:20:
97:c2:5e:8f:2e:1a:bd:fc:dc:91:f0:67:98:1d:95:1a:78:07:
5b:c8:62:6a:1c:35:3e:38:89:01:fd:21:fd:5b:eb:81:0f:1b:
e9:cd:09:24:cb:ec:3b:51:68:3c:66:83:09:75:6e:64:1e:51:
8b:dc:22:cc:e7:54:7c:1f:1f:cb:32:ab:4a:6d:d7:9c:b0:16:
15:7b:29:9b:a7:e2:07:b7:33:50:44:28:49:50:a8:70:19:80:
aa:3b:27:92:1e:b4:73:d3:b3:c6:58:a1:23:c8:e9:4b:5c:fc:
a0:3d:e7:9e:67:71:95:98:2e:99:1a:bf:da:8a:b9:07:3c:d4:
2d:f3:aa:ec:8a:41:cb:0b:05:34:e2:d2:b6:43:30:23:98:8e:
8e:b4:90:62:ca:e8:1b:28:87:e5:85:6d:62:82:55:13:df:ed:
7e:cb:f2:d0:f4:0b:c2:1d:41:e4:29:04:33:f0:3f:16:3e:60:
5b:32:e3:e7:02:6d:0c:34:ae:1f:69:4d:6d:34:e9:99:d9:ae:
ae:ea:ab:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:25 2025 by rpki-client