Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/1-DdA-do2aUnfFDViNUxhUDqFzbE.roa
File: 1-DdA-do2aUnfFDViNUxhUDqFzbE.roa (raw, json)
Hash identifier: BKYK/ZWsPHxxlNPF0PEHOjs0OjsXKAGuBICEBJN+sBU=
Subject key identifier: F8:37:40:F9:DA:36:69:49:DF:14:35:62:35:4C:61:50:3A:85:CD:B1
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 0194221FA0BB544E709C5A6B25248A1C9317
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/1-DdA-do2aUnfFDViNUxhUDqFzbE.roa
Signing time: Wed 01 Jan 2025 13:48:05 +0000
ROA not before: Wed 01 Jan 2025 13:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39855
IP address blocks: 45.92.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a0:bb:54:4e:70:9c:5a:6b:25:24:8a:1c:93:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Jan 1 13:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f83740f9da366949df143562354c61503a85cdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:37:7e:24:4d:b8:c3:c1:40:4e:ca:8e:c7:3e:
df:81:d8:6a:71:1c:09:65:ec:cf:8d:53:b9:01:09:
8a:e8:e0:77:9b:8b:ca:b1:16:d2:c2:3c:32:51:41:
3b:34:5c:0e:b8:e8:99:2e:62:9a:3c:4e:de:72:dd:
b7:1d:7c:10:0a:a7:93:0f:fa:be:ad:da:7b:e0:4e:
9b:b9:dc:df:39:ba:c4:68:aa:99:06:1f:fa:a6:b5:
be:11:23:ce:a2:37:ea:9a:da:82:e9:dc:9e:a6:f8:
9e:ad:97:d4:ab:b9:31:17:0c:5f:92:8b:ab:b6:39:
58:ab:6b:d3:40:75:d3:d5:32:5c:f4:ac:2e:c1:27:
9b:00:c9:ee:c3:e3:87:00:26:56:df:99:71:a7:5d:
b5:93:a0:8c:94:2b:45:ed:46:d0:4a:f7:da:54:84:
48:8b:b0:e7:fd:11:10:25:56:24:9b:39:41:5d:55:
9a:3b:d2:e8:40:43:50:5d:30:c7:67:9d:e2:64:a4:
87:4c:4c:13:9f:60:bc:c6:d4:40:0e:ea:f3:7b:83:
b3:bb:6e:40:2d:df:f0:67:d7:83:c6:db:d4:43:ce:
8b:b1:69:1c:9d:60:bf:19:35:50:91:1f:15:cf:7b:
c5:ce:2b:74:80:8c:f5:52:16:6b:89:5e:bc:ed:e0:
de:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:37:40:F9:DA:36:69:49:DF:14:35:62:35:4C:61:50:3A:85:CD:B1
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/1-DdA-do2aUnfFDViNUxhUDqFzbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.78.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:1c:14:f8:df:6e:0c:78:45:83:56:22:2b:d3:05:6a:0a:47:
32:7e:39:05:7c:01:c4:93:f1:db:bd:11:15:c5:35:f6:ac:1c:
b3:ca:22:0e:04:9b:45:ff:2c:bb:49:73:4f:79:d4:a7:4c:e8:
d4:41:75:33:9a:41:74:ba:06:b5:25:e1:74:f9:d8:79:4b:0e:
41:ca:e4:e7:d2:c3:4d:35:32:7a:d4:91:1e:b3:34:f9:e9:b2:
ab:64:33:dc:f3:a5:c9:93:33:39:4c:76:9d:3d:d7:95:11:26:
5b:3f:5d:7b:e2:7d:f2:9d:58:b9:b8:82:2e:f2:48:33:f1:8b:
9e:3f:b3:2c:d0:cc:50:01:f2:62:5c:c2:0e:c3:02:b9:4e:30:
d7:d1:d3:ad:88:c6:82:10:12:f3:32:e2:69:08:b6:cd:2f:a8:
ff:e8:4b:a1:ef:99:5b:1a:97:f8:84:93:94:c6:a0:94:e8:94:
99:90:0b:e0:c6:96:b5:d4:64:34:63:05:fd:c9:ef:f2:c7:a3:
07:de:e1:87:4c:3e:a1:af:37:61:69:6b:b4:1f:ac:c8:75:fe:
9b:6e:a2:23:c1:5d:e3:65:8c:e2:7c:1a:9b:65:d8:15:0f:62:
35:48:68:4d:c9:0d:1e:4b:6f:2e:e8:9b:5f:71:2f:29:26:e7:
dc:f6:f0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:37 2025 by rpki-client