Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XaLABWOQNXqHC_jDegNFSakNwoM.roa
File: XaLABWOQNXqHC_jDegNFSakNwoM.roa (raw, json)
Hash identifier: 3QzrTv82PciMa1IBVzam4E/TiyC1PhNk3v+7xqdI/Yo=
Subject key identifier: 5D:A2:C0:05:63:90:35:7A:87:0B:F8:C3:7A:03:45:49:A9:0D:C2:83
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824D3E83D9131E5ADB611F6C30110E9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XaLABWOQNXqHC_jDegNFSakNwoM.roa
Signing time: Thu 02 Jan 2025 17:51:29 +0000
ROA not before: Thu 02 Jan 2025 17:51:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216178
IP address blocks: 45.8.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:d3:e8:3d:91:31:e5:ad:b6:11:f6:c3:01:10:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5da2c0056390357a870bf8c37a034549a90dc283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:33:62:63:d9:25:66:f8:c7:ba:16:0f:9c:
46:41:31:d0:5a:7f:97:1f:54:98:28:87:c8:ef:bc:
01:c0:01:4b:bf:90:be:08:f8:ef:a2:19:ab:45:65:
e0:c2:9d:b8:b5:2f:b7:ff:b1:fc:ee:e2:37:12:ad:
5d:03:bd:1e:6d:61:9a:02:bf:3e:28:27:4d:8b:14:
97:39:1a:0f:09:34:44:37:62:ce:ba:d4:32:da:08:
6d:e3:8b:4a:43:b9:c8:b5:00:a1:89:a8:db:12:04:
51:b6:b9:7d:6f:d1:84:9c:9c:5c:34:43:7f:05:71:
f9:3f:4a:cc:b5:3a:4b:8c:92:de:c7:e6:a9:da:2e:
89:0f:2d:e7:ec:b1:fc:34:ce:00:5d:00:52:28:80:
ee:5e:64:2d:22:03:3c:c5:fe:ed:1e:fd:a9:16:71:
dd:d4:b7:a8:4a:62:6e:6b:b0:d9:24:c8:60:cd:e5:
4a:88:1c:85:8f:d2:cf:31:cf:dc:04:4c:d1:bc:26:
66:6f:0e:b0:31:29:2b:3e:69:b1:f8:2b:92:3e:d2:
b4:98:d4:20:7b:0c:09:29:82:bb:34:00:4b:7e:b5:
bd:6f:ea:08:26:1e:11:a6:cf:19:ac:02:53:10:cf:
5d:bf:06:3f:9e:10:21:2a:af:74:6d:72:73:94:28:
ba:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A2:C0:05:63:90:35:7A:87:0B:F8:C3:7A:03:45:49:A9:0D:C2:83
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XaLABWOQNXqHC_jDegNFSakNwoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:68:85:fe:40:8e:ea:88:5b:1e:8f:e6:14:16:40:7f:3c:f5:
2c:2b:f9:42:9c:97:07:a1:f2:b9:34:ef:ea:a4:13:72:3c:d5:
78:30:96:16:38:c9:02:0d:c3:99:bd:03:39:cd:58:eb:69:b8:
28:16:e5:7f:bc:c6:8c:67:21:d9:94:72:84:d2:d9:1f:49:a3:
1a:2d:4a:0c:25:be:13:88:66:71:82:ee:34:c9:a8:23:31:dc:
ea:24:6b:80:1d:3c:d3:eb:c6:5f:45:36:35:71:d1:fe:2f:71:
ec:c7:da:92:4f:aa:b0:a1:ab:41:13:24:17:ef:9f:f7:4b:2d:
84:fc:3e:70:b3:24:5b:ad:ce:01:b3:4b:c7:95:31:95:dd:da:
e2:57:8c:96:b5:16:f3:6d:67:9b:0a:ab:50:ad:f9:2b:98:f4:
21:af:f9:bf:77:22:4b:11:09:a9:4a:8d:a8:d6:a5:e1:da:70:
3f:4e:87:d3:9d:d7:bd:e7:9c:ec:16:71:ae:c3:57:23:7d:9a:
5f:91:1b:de:d3:d8:89:30:2f:cb:ed:08:76:4c:64:4d:0c:69:
a8:7e:53:48:9b:a9:0b:7b:f9:c3:25:ab:48:68:d4:83:a8:e3:
f2:5f:f9:9a:fb:03:c5:4e:f4:38:fc:5d:e1:b8:d4:49:bb:e8:
1a:8c:d0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:34:33 2025 by rpki-client