Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/DSVR7QIy0UPUErMehW4PxJP4J1w.roa
File: DSVR7QIy0UPUErMehW4PxJP4J1w.roa (raw, json)
Hash identifier: RxBfnEoFmNE2dkCZjNvrHRwuVoiFTGWB2B/srN/Z1tQ=
Subject key identifier: 0D:25:51:ED:02:32:D1:43:D4:12:B3:1E:85:6E:0F:C4:93:F8:27:5C
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 0194385BAB24F108626584366DB1BABC6235
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/DSVR7QIy0UPUErMehW4PxJP4J1w.roa
Signing time: Sun 05 Jan 2025 21:25:19 +0000
ROA not before: Sun 05 Jan 2025 21:25:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208949
IP address blocks: 45.88.0.0/24 maxlen: 24
45.148.145.0/24 maxlen: 24
45.148.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:38:5b:ab:24:f1:08:62:65:84:36:6d:b1:ba:bc:62:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Jan 5 21:25:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d2551ed0232d143d412b31e856e0fc493f8275c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:42:46:91:b1:b3:6c:a2:3e:1a:6f:79:0f:e3:
90:95:90:6d:fa:dd:3f:88:e4:9a:1c:06:46:e9:6d:
08:49:21:34:39:e5:22:59:ef:13:c8:b5:b4:5f:1e:
cc:02:a7:64:77:24:26:fd:80:4a:1b:66:81:32:ac:
e6:f5:4b:7c:54:be:d2:21:6f:42:b8:b2:0a:f3:a5:
74:98:1e:82:00:a1:ec:18:b6:98:23:3b:ff:a6:49:
f7:5d:a1:9b:b0:ca:33:c6:27:3f:77:2f:85:ca:af:
78:ed:e9:e8:4c:48:8c:35:00:64:e3:0b:f8:e8:fe:
ce:60:59:11:d4:4f:eb:ab:ae:22:fa:29:6d:09:5f:
ea:24:cb:da:be:bd:31:c6:31:e3:1f:b4:8e:eb:dc:
e7:7c:28:67:25:b5:d8:22:e6:dc:c2:ee:65:aa:43:
f4:6d:81:bd:4a:c3:30:ba:41:89:0c:a6:d8:2a:78:
c8:9e:87:88:23:c8:09:0b:c1:fd:43:69:16:d3:10:
92:fb:cc:a6:2b:ee:70:8b:50:49:4b:19:26:a8:23:
77:f3:74:c5:40:46:2a:d5:df:b9:11:b8:7d:91:5c:
8b:d8:d8:3c:76:25:86:a9:2b:b3:1b:d8:7b:dd:bd:
46:d6:c5:6d:17:98:84:a6:cd:db:f0:3a:28:49:00:
7c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:25:51:ED:02:32:D1:43:D4:12:B3:1E:85:6E:0F:C4:93:F8:27:5C
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/DSVR7QIy0UPUErMehW4PxJP4J1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.0.0/24
45.148.145.0-45.148.146.255
Signature Algorithm: sha256WithRSAEncryption
a6:5d:33:c0:f5:9c:57:86:47:bc:49:96:d0:d5:68:75:48:91:
b4:87:2d:b0:0f:fb:35:ef:97:91:d4:1f:2c:a6:16:32:e9:c3:
fe:39:e2:ed:46:ac:5d:d7:4a:c4:89:55:14:8f:f8:72:e1:6f:
7e:99:2a:16:96:1f:23:36:8f:80:7f:c2:1d:3e:cd:79:aa:8a:
55:f5:bc:66:42:a4:89:62:15:1b:2a:22:c8:4e:bd:11:5c:c5:
75:ec:b8:e7:e9:7d:9d:4f:d7:2b:8e:65:38:9f:f5:75:41:64:
1b:b4:e6:c4:b2:b2:ae:24:d4:f6:08:08:14:67:76:43:2b:da:
28:cd:69:bf:4b:5a:9b:ac:40:de:ef:03:54:f6:11:d6:b1:48:
ed:06:10:7e:cf:b0:23:4b:0f:b2:f1:da:c7:7f:59:13:e7:c4:
a3:3b:ed:d4:58:2d:0f:87:c6:a8:b5:e2:ca:6f:8d:c3:0e:24:
e7:83:6b:85:b6:1c:52:f7:4e:c7:67:db:8b:fd:ce:97:c5:ec:
73:28:9e:28:34:e6:ef:2a:c4:eb:2e:49:cd:47:2a:b7:d3:f5:
8e:b4:38:2b:43:0d:9b:0c:d0:12:d1:05:3f:02:00:d6:4e:c2:
bc:26:de:9f:ba:db:94:e4:98:64:fe:19:e7:f5:18:6f:ea:95:
06:87:e1:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:29:35 2025 by rpki-client