Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/2sVCpnUAKblWh9v7qVEsEKRUfWA.roa
File: 2sVCpnUAKblWh9v7qVEsEKRUfWA.roa (raw, json)
Hash identifier: 1CKYprr2EavvDbIEOzey7tbCXji3ClAfurVr7rHadc8=
Subject key identifier: DA:C5:42:A6:75:00:29:B9:56:87:DB:FB:A9:51:2C:10:A4:54:7D:60
Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial: 019422FB626C0F7102F2442608076FA468C8
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/2sVCpnUAKblWh9v7qVEsEKRUfWA.roa
Signing time: Wed 01 Jan 2025 17:48:07 +0000
ROA not before: Wed 01 Jan 2025 17:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11426
IP address blocks: 45.158.192.0/22 maxlen: 22
185.45.92.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:62:6c:0f:71:02:f2:44:26:08:07:6f:a4:68:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Validity
Not Before: Jan 1 17:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dac542a6750029b95687dbfba9512c10a4547d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ed:7c:ab:d0:53:42:88:cf:ec:06:d0:2e:7d:
03:f4:28:da:43:8c:ca:ba:75:13:bc:76:f8:31:74:
11:5c:84:ae:c3:a4:e7:df:ae:01:74:8e:0e:02:2e:
17:36:ae:cc:b5:ed:2d:82:1a:c3:3d:ef:66:c5:d0:
b5:90:ee:53:04:16:66:7f:c5:6b:43:c9:58:af:29:
cb:5c:ba:85:50:f6:70:0a:e5:28:7c:79:76:80:68:
42:8b:76:a2:ad:fb:97:b1:b8:9a:c4:83:54:7f:aa:
8e:8a:66:23:40:e0:04:0d:31:8c:4f:b4:24:a5:cb:
f8:89:57:e8:9e:4f:d7:36:d7:1e:3b:75:21:8a:94:
42:bd:77:32:58:f4:b3:a1:56:8b:e6:29:e7:b4:fb:
77:23:14:f4:59:4f:42:53:f3:a3:bf:05:a6:fb:0a:
ac:90:b2:a2:b6:b1:78:97:f8:29:3c:e1:99:97:a2:
a1:16:e0:f0:1e:54:9c:a5:8d:b4:27:20:8d:24:e0:
54:d8:9e:2e:f4:d2:b1:43:37:67:06:09:9f:67:36:
62:f7:bb:7d:eb:25:e2:27:b5:e2:fc:cd:73:d0:8b:
93:b5:06:fd:90:fd:9e:be:75:6f:7e:d6:46:bc:3d:
8f:d3:c1:a8:af:77:d5:1d:f1:ea:c4:c9:f1:1d:2a:
0b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C5:42:A6:75:00:29:B9:56:87:DB:FB:A9:51:2C:10:A4:54:7D:60
X509v3 Authority Key Identifier:
keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/2sVCpnUAKblWh9v7qVEsEKRUfWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.192.0/22
185.45.92.0/23
Signature Algorithm: sha256WithRSAEncryption
29:26:d5:c6:ec:f3:68:1d:c2:3d:62:fb:67:88:7b:02:ce:88:
cb:e1:4d:7f:24:4e:43:bc:0c:6d:7f:ed:a3:77:28:1a:c1:a8:
28:aa:dd:8c:83:7b:e1:b2:ac:a1:64:1d:50:be:f9:91:85:d7:
b8:d7:5e:b8:86:99:0e:dd:8c:23:b4:40:a3:0d:18:3e:1e:e0:
43:98:0e:c0:09:42:dc:cf:79:84:a3:a8:2d:f1:6e:50:ab:cc:
9d:fb:70:f0:3f:63:c5:05:e9:fd:53:33:79:40:ed:cb:7c:55:
5f:57:93:e9:44:e9:ca:0d:78:3c:f2:1d:03:39:cb:91:8e:07:
d6:53:22:66:e7:15:5b:5e:91:a7:f2:ef:cf:d5:90:e6:e8:8a:
98:bb:2d:62:ab:34:88:38:d1:99:a2:e0:69:88:91:27:df:85:
1a:8a:b1:fa:23:9d:a5:aa:7c:b9:ed:c4:ef:ae:80:ed:0b:ee:
82:78:e1:7d:e9:28:f4:77:0d:f1:ae:8f:54:d6:12:c9:09:15:
2b:38:f5:88:2b:74:02:a4:1c:65:a7:8c:84:8a:f8:6b:20:8a:
09:40:1f:44:af:7a:0e:78:6e:24:7c:4a:51:0d:8c:62:08:6c:
96:08:d6:d4:62:77:27:73:f1:26:3a:63:d5:31:ef:e0:65:dc:
91:45:2e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:21 2025 by rpki-client