Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/0j_F7ObjeWM_-MDv2vnltyDHFUk.roa
File: 0j_F7ObjeWM_-MDv2vnltyDHFUk.roa (raw, json)
Hash identifier: OsaLtzwPIW8gqCsltJsusg8e34JBn85Om/z5CrRK5Uo=
Subject key identifier: D2:3F:C5:EC:E6:E3:79:63:3F:F8:C0:EF:DA:F9:E5:B7:20:C7:15:49
Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial: 019422FB62E031CAA7B23B1E0FF6B667B4AD
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/0j_F7ObjeWM_-MDv2vnltyDHFUk.roa
Signing time: Wed 01 Jan 2025 17:48:07 +0000
ROA not before: Wed 01 Jan 2025 17:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 45.14.81.0/24 maxlen: 24
185.45.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:62:e0:31:ca:a7:b2:3b:1e:0f:f6:b6:67:b4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Validity
Not Before: Jan 1 17:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d23fc5ece6e379633ff8c0efdaf9e5b720c71549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:bd:25:d2:74:40:f1:23:42:12:46:50:1b:
62:fb:51:22:42:6c:8e:aa:82:4c:2c:22:bf:11:4a:
f6:81:e4:d4:d1:45:0c:5a:b9:b8:5f:bd:eb:95:87:
5d:9b:de:0a:53:17:b3:07:1d:15:bc:f6:26:a2:53:
e8:54:7d:e6:cf:75:af:21:7b:3e:14:67:ba:15:91:
6b:4d:c9:48:c8:54:9d:ae:4c:be:62:d8:c1:eb:01:
76:18:64:6a:77:62:48:8b:13:a3:13:b1:c2:e9:85:
86:84:98:2f:b6:8e:14:e9:bc:53:ec:a0:19:c4:a1:
10:72:0e:c2:04:b3:da:4c:15:42:5d:d7:ed:a3:81:
bd:d1:07:60:a0:1c:df:8d:86:a1:9b:60:3a:bc:66:
04:69:b5:c4:5b:c0:e0:3b:a2:14:ba:ac:3b:76:22:
4f:a3:5d:05:7a:c3:65:89:3f:6b:5b:29:c9:c6:a6:
0a:3b:1b:19:c0:a4:ef:cb:90:8f:e5:46:fa:e5:a8:
b8:38:86:74:2e:c5:fb:1b:26:02:49:04:15:3b:5e:
52:58:07:69:be:08:2d:1b:d4:07:58:2f:ae:64:2c:
d4:a0:9b:fd:08:f2:e3:21:ff:b6:1b:76:2f:2c:1c:
61:e0:77:5b:cd:e0:16:0d:60:48:7a:49:4d:e5:cd:
7b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3F:C5:EC:E6:E3:79:63:3F:F8:C0:EF:DA:F9:E5:B7:20:C7:15:49
X509v3 Authority Key Identifier:
keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/0j_F7ObjeWM_-MDv2vnltyDHFUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.81.0/24
185.45.94.0/24
Signature Algorithm: sha256WithRSAEncryption
73:f2:ad:c9:7d:fe:b4:e1:68:2b:9a:91:6e:bb:a4:87:5d:bd:
97:11:b0:59:d0:f4:67:b1:1f:15:d8:d0:c6:ff:07:9e:b1:de:
ba:40:f6:0f:c6:7a:e9:6a:45:4f:c3:d1:25:1a:2b:00:f5:2b:
90:57:47:fe:08:be:3c:b2:57:7c:97:07:8e:da:47:44:be:66:
5b:2f:1d:57:68:51:4c:43:f0:39:f3:ff:6c:51:a4:7e:ca:c3:
9e:bb:2e:ec:d6:f7:02:d2:ee:6e:c0:4a:c6:2e:d4:df:dc:88:
3b:ee:f5:92:34:3e:8d:3f:a0:08:78:30:d7:fa:20:ac:9f:15:
52:29:e3:3b:e0:89:8f:80:39:a4:1c:2f:38:fc:5f:72:e5:b6:
2d:d1:8c:88:07:3a:0a:df:b8:7f:68:79:af:df:b9:a3:d2:e3:
ac:78:15:05:20:64:66:74:dc:65:5f:bc:d7:b3:4f:88:aa:f2:
75:1b:36:bf:e1:13:c4:66:62:65:e3:b8:02:36:fd:b3:d4:50:
57:4f:fa:a3:c6:5e:ad:bd:df:1d:74:07:3e:0e:ea:ba:aa:59:
aa:3a:3b:94:7e:c6:50:8d:95:00:52:33:a2:fc:bd:0d:b4:43:
c8:ab:de:61:3b:0e:19:f1:52:8c:cd:2f:98:db:d2:97:5f:7f:
bf:ab:e4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:00:40 2025 by rpki-client