Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iI318gNnMbtAUlBQUyXUJtNracA.roa
File: iI318gNnMbtAUlBQUyXUJtNracA.roa (raw, json)
Hash identifier: hLuONZhrjYRz4Jf2/c22gMlTor/JwGfE4S/mGI/ps9s=
Subject key identifier: 88:8D:F5:F2:03:67:31:BB:40:52:50:50:53:25:D4:26:D3:6B:69:C0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824DBAE8B6DC37934D6AA9783AB19C8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iI318gNnMbtAUlBQUyXUJtNracA.roa
Signing time: Thu 02 Jan 2025 17:51:31 +0000
ROA not before: Thu 02 Jan 2025 17:51:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401172
IP address blocks: 45.84.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:db:ae:8b:6d:c3:79:34:d6:aa:97:83:ab:19:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=888df5f2036731bb405250505325d426d36b69c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:96:37:fd:63:22:9e:fb:45:81:a0:b9:3d:4e:
d2:25:2c:7e:92:4d:92:ff:f7:0b:73:23:00:34:1d:
40:b9:92:1c:92:a9:ce:ab:58:c4:d2:60:f0:a9:f7:
54:3e:9c:26:6a:36:ce:57:a0:f5:57:ac:2f:fb:c1:
53:90:8d:52:c3:22:4b:93:21:b2:ac:41:b5:c5:13:
1d:e5:5a:2f:15:3f:6b:98:69:8c:8d:54:5e:d9:ac:
34:d8:e5:4b:86:a7:e7:f8:30:93:06:65:d0:5a:c1:
72:de:f0:74:a3:77:e0:2c:47:19:e1:f3:0f:66:c7:
5a:97:bd:94:25:17:60:d6:8e:43:7f:7b:07:e8:19:
ff:2c:ae:70:f9:9a:a0:fa:77:31:89:54:80:c6:80:
2c:ef:44:5c:24:fa:e4:be:1a:d4:fc:f1:80:e0:e4:
d7:19:06:00:64:62:7e:9b:70:e7:ab:fa:f4:56:2a:
b3:cb:7f:59:d2:37:2d:0c:3a:3d:81:07:a1:65:eb:
d0:83:62:8a:36:b8:f8:5f:39:e6:ae:64:db:ff:08:
e9:fc:90:56:5d:f4:99:18:40:04:07:67:96:cc:e1:
d6:c4:8e:34:c6:e7:d4:dc:b3:5b:90:48:34:d7:db:
20:5c:8f:3b:86:81:38:f6:da:f3:51:6c:f6:52:20:
67:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8D:F5:F2:03:67:31:BB:40:52:50:50:53:25:D4:26:D3:6B:69:C0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iI318gNnMbtAUlBQUyXUJtNracA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:7c:3f:e6:6c:cf:26:5f:34:9c:90:28:18:4f:89:d3:8a:50:
3c:45:0d:b1:e9:d6:4e:bd:37:ed:69:e4:2e:68:91:98:1d:49:
c4:bb:62:38:d9:85:7b:c7:16:0e:68:cd:fc:92:7a:b3:ec:d8:
8a:cd:d7:29:10:8a:8a:5b:8f:ff:70:71:0f:18:b3:a8:18:13:
0d:df:df:fc:a0:8c:07:0c:77:00:3e:3d:5f:2a:4c:04:30:28:
33:7a:55:65:79:95:7d:71:5e:f1:54:cc:e8:be:97:cc:b9:38:
22:b2:be:f4:2b:62:8e:21:ee:1f:71:f4:c9:be:2e:91:2f:e8:
fa:61:62:71:c3:a8:3e:77:ac:af:33:97:35:09:8d:68:db:e1:
2f:f7:d1:d0:60:d9:00:fc:01:b8:26:9a:7f:30:7d:ab:b2:2f:
d7:3d:fe:61:b4:d4:9a:70:c4:4d:67:d5:de:12:88:5e:c7:74:
43:4c:f3:d6:1d:eb:53:b5:8b:b4:06:0b:3e:32:85:6c:c8:12:
60:4f:8e:18:cf:bb:07:c0:f9:c2:c9:36:a9:45:cf:f9:a3:67:
5b:11:52:87:f1:5d:52:5e:c5:8e:b9:5d:f0:47:ef:ea:a0:f3:
b9:a4:ba:dd:21:5d:cb:f4:2e:bc:89:52:4e:52:31:5a:6d:f7:
5a:65:e5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:49 2025 by rpki-client