Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/G-QNdZi06yaAgAlzF3xNpvNZeYo.roa
File: G-QNdZi06yaAgAlzF3xNpvNZeYo.roa (raw, json)
Hash identifier: 9VsPCjRuCaGf6HWcDrGAdyUgToNR8R5e0Fv9tz7qgp4=
Subject key identifier: 1B:E4:0D:75:98:B4:EB:26:80:80:09:73:17:7C:4D:A6:F3:59:79:8A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195C7DDB3C95FEBA4A862DE4069B79AFC2A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/G-QNdZi06yaAgAlzF3xNpvNZeYo.roa
Signing time: Mon 24 Mar 2025 11:15:50 +0000
ROA not before: Mon 24 Mar 2025 11:15:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215316
IP address blocks: 45.14.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c7:dd:b3:c9:5f:eb:a4:a8:62:de:40:69:b7:9a:fc:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 24 11:15:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1be40d7598b4eb2680800973177c4da6f359798a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:47:e3:bd:98:05:2a:5b:31:15:38:d5:37:22:
25:aa:8b:7b:6b:03:1d:9c:65:fa:83:8e:47:14:9c:
26:0f:7f:2a:82:6c:2b:53:e3:07:fb:dc:d8:94:c6:
8c:65:c9:78:fe:50:7f:f1:33:4e:1f:eb:31:4d:41:
48:a6:c8:ec:cf:a6:f5:3b:2d:b9:be:8c:26:93:67:
80:17:c9:9f:4d:5b:45:fd:d6:86:3f:90:52:e9:46:
49:f9:7d:21:d9:02:fa:ef:74:e6:04:ae:00:c3:b0:
ab:fc:1e:5b:a5:c7:c8:69:52:da:3c:e8:84:8c:76:
8c:10:69:b8:9b:ec:9b:01:bd:0d:04:63:05:a5:b9:
9b:44:f3:69:81:80:20:77:21:1e:ba:e8:19:02:07:
d4:b5:fe:73:73:4e:df:ed:75:57:87:9c:58:b2:97:
43:c2:32:7f:d7:8d:17:4d:96:39:d5:0e:3b:ce:07:
75:f5:84:bc:10:d4:44:6c:5c:c8:0e:16:bf:5d:bc:
08:ce:1b:e3:99:ae:bc:ea:33:eb:f1:0f:8e:92:ab:
7c:d1:28:0b:f2:5f:38:8d:8e:d0:b9:b7:c9:4b:b2:
1f:37:00:36:0b:29:95:5f:a2:c1:77:8d:72:f1:04:
1d:12:23:4b:e9:e5:60:0f:42:c8:3b:11:c8:97:9e:
7c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E4:0D:75:98:B4:EB:26:80:80:09:73:17:7C:4D:A6:F3:59:79:8A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/G-QNdZi06yaAgAlzF3xNpvNZeYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.164.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:8a:db:6c:75:5d:91:9a:ac:77:b3:09:50:d9:46:cd:81:ee:
2a:37:77:30:3e:a9:42:4f:0f:77:1f:38:89:a1:ca:17:48:dc:
e3:8d:2e:67:14:8f:3d:bf:99:34:3f:76:c0:82:ad:48:a7:0e:
c4:68:29:0e:46:34:4b:15:e0:2f:ef:9f:4d:9c:55:35:30:d4:
b7:8c:0a:2f:29:61:b3:83:43:33:69:94:75:bf:93:bd:61:c1:
71:2c:5a:29:1c:0a:ce:45:db:5a:f7:97:17:ec:e2:cb:50:77:
ce:bf:f2:80:ee:24:eb:a7:4a:df:31:bd:24:1e:5d:a1:e1:9b:
49:a7:fd:b3:c2:a4:0c:34:cb:c9:e7:de:ce:d1:f1:16:9f:f2:
63:80:64:cf:7c:c3:c2:97:31:47:d8:17:c8:c7:05:4f:31:36:
97:a7:1f:bc:3c:2b:e7:eb:b1:bb:31:df:84:9d:a5:f3:42:c4:
f1:4b:dd:60:73:07:78:f6:c9:a4:02:ff:cf:6f:d8:d4:4f:b4:
8d:f0:42:71:b1:de:3e:3f:75:a1:ae:64:86:14:a6:09:62:cd:
2f:df:6d:9a:4e:15:a1:0a:eb:97:cf:93:c2:44:34:f5:ab:9a:
42:e8:d1:02:56:1b:70:41:d6:ba:90:b1:a9:a1:ac:6a:9c:78:
e4:81:ca:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:05 2025 by rpki-client