Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_9SXev0b5o5a5nTUGl4Y4RZG7ds.roa
File: _9SXev0b5o5a5nTUGl4Y4RZG7ds.roa (raw, json)
Hash identifier: jMqlyJjWYWaNdz519V5KuZtbFEizdaJwHuN0zAWdzMY=
Subject key identifier: FF:D4:97:7A:FD:1B:E6:8E:5A:E6:74:D4:1A:5E:18:E1:16:46:ED:DB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824B1AA189F16720AA662B8382EC857
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_9SXev0b5o5a5nTUGl4Y4RZG7ds.roa
Signing time: Thu 02 Jan 2025 17:51:20 +0000
ROA not before: Thu 02 Jan 2025 17:51:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206776
IP address blocks: 45.141.156.0/24 maxlen: 24
45.141.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:b1:aa:18:9f:16:72:0a:a6:62:b8:38:2e:c8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffd4977afd1be68e5ae674d41a5e18e11646eddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:99:86:8b:75:df:f9:11:0f:1e:37:a0:9b:
44:d1:8d:f3:5f:f9:c7:5e:f8:c7:4b:64:b9:4c:56:
4f:88:40:2b:d8:75:a3:1f:d7:22:1e:a6:42:2f:d3:
90:d5:97:87:cf:89:df:a5:9a:94:11:79:28:ea:24:
e9:1d:60:f9:c4:46:01:2b:65:e6:cd:b0:85:57:f1:
6a:b1:26:63:83:35:d8:26:53:bf:03:fe:55:88:eb:
90:ce:a2:34:67:0c:63:58:b3:c2:b2:66:1b:d6:70:
79:26:92:9e:9c:19:09:fc:2d:68:bd:8d:1c:5f:2f:
94:f3:d6:e6:4b:68:44:05:e2:f0:fd:87:e9:11:77:
f2:bc:ba:5b:13:b2:1d:2b:f6:cb:eb:e1:de:44:d3:
c6:c0:b9:db:05:35:9e:a8:5b:8e:94:06:6b:a4:b0:
0e:13:39:9e:a7:63:03:79:c2:5d:55:ab:62:e4:f2:
37:de:2c:1b:ec:3e:db:cc:a9:a2:ff:75:4d:52:7c:
dd:56:c8:c7:b9:8d:71:88:8b:5e:57:04:5e:e5:19:
5e:74:30:3d:ac:88:c4:6f:e1:df:61:59:c3:1b:28:
0c:26:a9:cb:4d:e6:b9:04:2f:ba:9c:ee:05:4f:d9:
a8:0f:9c:00:de:44:0a:57:54:68:c0:3b:b4:df:c3:
6a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D4:97:7A:FD:1B:E6:8E:5A:E6:74:D4:1A:5E:18:E1:16:46:ED:DB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_9SXev0b5o5a5nTUGl4Y4RZG7ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.156.0/24
45.141.159.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:c0:8a:b7:e4:47:11:01:b4:1d:3d:05:30:0b:9c:b9:45:13:
e2:8f:61:f9:44:0e:37:2a:df:4b:53:86:b8:df:6e:98:d2:d9:
c1:99:3c:99:7d:f8:d8:e1:db:05:66:e6:6f:d7:59:a3:77:da:
f1:5d:38:30:db:b8:30:b7:3f:1c:4f:ce:9d:87:58:f8:f0:1c:
88:50:81:af:cd:7a:01:90:4a:02:2b:ab:29:8b:bb:65:c1:17:
69:76:cf:d2:ba:9e:f9:81:30:73:62:c3:d8:b9:c8:78:a1:49:
6a:9d:54:f4:ba:8e:91:56:19:37:46:fd:82:90:f4:39:4e:1a:
6d:44:32:ac:1e:31:49:8e:ff:63:f0:22:16:b8:b8:4d:bd:5e:
2c:64:c9:17:ad:3b:fd:48:df:eb:fa:87:83:32:2b:28:82:da:
ac:20:0d:87:05:b5:65:60:6a:55:10:7e:9d:47:69:24:c3:0e:
68:1c:91:17:b5:2c:db:d5:2a:a3:c5:9f:48:52:a7:c7:fe:37:
92:e7:36:86:df:49:e6:cf:02:c6:e5:ec:38:08:3d:13:f6:b6:
56:4b:16:e1:7c:d7:5d:b2:52:61:e7:8c:48:fc:85:2b:d9:4e:
c5:f2:dc:8f:54:b6:36:3c:c3:cc:36:c4:00:33:14:e2:db:fb:
84:e8:f1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:44:44 2025 by rpki-client