Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/d-If6rwOnPiVqU22C8IZzGvMPvc.roa
File: d-If6rwOnPiVqU22C8IZzGvMPvc.roa (raw, json)
Hash identifier: giLRuwy5wW+MIOBjFAF7Pd0PEoYtI2K0pgdHGw83fkc=
Subject key identifier: 77:E2:1F:EA:BC:0E:9C:F8:95:A9:4D:B6:0B:C2:19:CC:6B:CC:3E:F7
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 01942143D188DD6587A7925E9E4359583440
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/d-If6rwOnPiVqU22C8IZzGvMPvc.roa
Signing time: Wed 01 Jan 2025 09:47:59 +0000
ROA not before: Wed 01 Jan 2025 09:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.80.175.0/24 maxlen: 24
2a13:7c40:1::/48 maxlen: 48
2a13:7c40:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d1:88:dd:65:87:a7:92:5e:9e:43:59:58:34:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Jan 1 09:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77e21feabc0e9cf895a94db60bc219cc6bcc3ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:3d:f4:8e:4b:10:4a:e1:fb:63:8a:12:a8:
0c:e1:7d:91:93:4f:8d:0f:fd:87:cf:94:06:ed:66:
d8:74:ba:31:9c:97:e9:05:31:4a:6e:30:b1:65:b5:
9e:85:b0:d3:81:49:4a:b7:d6:26:d3:dd:95:36:11:
e1:ee:42:7b:28:ba:5e:0b:e7:56:1d:f9:47:af:2b:
03:04:1e:5c:ed:e2:83:79:85:7c:18:3b:f3:c1:34:
4f:e0:d0:a8:f1:be:dd:f4:96:a4:81:cd:25:aa:00:
8f:43:3d:ba:ee:cc:ac:07:1b:7e:b8:1b:3c:07:40:
77:7f:bf:b9:8c:29:65:a6:29:e9:c1:82:93:be:39:
7f:45:12:ec:23:f8:59:3f:05:10:2b:19:34:c3:59:
62:a4:d8:d7:78:0e:d8:b9:71:d8:a7:af:c6:56:d9:
02:ef:b3:55:11:59:9d:c6:b8:fd:20:db:44:3a:62:
2d:de:af:7e:d8:14:2b:50:0e:64:b8:2a:e0:fe:10:
66:26:8b:fe:df:5e:50:77:2a:7d:28:84:c7:38:8e:
05:55:f3:c3:27:8b:2f:d2:86:18:df:bd:ec:a4:bf:
f5:ee:6b:6c:c0:ca:85:f2:bb:83:56:ff:7a:68:98:
82:b9:14:5d:94:3d:70:7d:ff:37:63:43:98:da:d4:
66:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E2:1F:EA:BC:0E:9C:F8:95:A9:4D:B6:0B:C2:19:CC:6B:CC:3E:F7
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/d-If6rwOnPiVqU22C8IZzGvMPvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.175.0/24
IPv6:
2a13:7c40:1::-2a13:7c40:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
33:70:fa:f7:a2:b3:a9:de:a4:1b:f8:20:b1:48:69:26:af:0a:
a9:9c:07:83:98:d8:46:1f:64:1e:19:43:fc:df:9d:a0:60:65:
21:b9:b9:d8:95:8b:b4:01:86:b6:12:1f:08:f8:72:67:15:82:
62:aa:ac:2e:4e:3b:2c:ba:d4:5a:c1:ba:5e:fa:fe:9f:06:f7:
6c:08:7c:b6:22:f1:92:8e:22:dd:bd:69:5d:c1:b7:c6:48:41:
64:4b:ab:77:39:af:38:31:05:20:13:05:76:52:1f:d8:88:c3:
39:23:fd:f9:e8:7b:e5:2c:de:ab:5e:a9:57:5c:bc:d4:80:a2:
17:8e:c9:e7:f5:cb:96:ea:8b:2b:85:e5:d6:74:f6:50:a5:27:
d1:79:5b:e0:f7:fb:ff:34:bd:56:30:6c:70:0a:4a:85:c2:14:
3a:e7:c2:43:84:83:78:34:c7:5e:c1:2f:c0:43:24:bf:b3:6d:
6d:42:aa:7b:74:6a:19:50:df:5c:4d:8b:0b:4c:14:7f:10:00:
e4:f2:cc:ce:cb:9c:95:41:76:2d:cc:a9:17:1a:eb:de:5e:f7:
da:e9:7a:2e:61:a3:4d:07:0b:24:83:a1:ec:30:60:0e:00:dc:
2c:01:89:3d:e7:8e:d6:c7:48:f3:f9:50:d1:33:4d:c3:17:f4:
9a:d3:2e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:42:05 2025 by rpki-client