Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/PQ4JRK_v8Rb4S6Y1Hjjg1mh8-RM.roa
File: PQ4JRK_v8Rb4S6Y1Hjjg1mh8-RM.roa (raw, json)
Hash identifier: 6S6SDi+NoevpWtxjp+Phs+mUreAi/RCvfLId1bbLsWc=
Subject key identifier: 3D:0E:09:44:AF:EF:F1:16:F8:4B:A6:35:1E:38:E0:D6:68:7C:F9:13
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 019421B19C33B8DD43A5D6771F59FAB1C45D
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/PQ4JRK_v8Rb4S6Y1Hjjg1mh8-RM.roa
Signing time: Wed 01 Jan 2025 11:47:55 +0000
ROA not before: Wed 01 Jan 2025 11:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210538
IP address blocks: 45.133.36.0/24 maxlen: 24
185.169.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:9c:33:b8:dd:43:a5:d6:77:1f:59:fa:b1:c4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jan 1 11:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d0e0944afeff116f84ba6351e38e0d6687cf913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:20:09:0e:d4:0e:e7:3b:0a:c6:01:c4:42:16:
e1:bb:c2:88:ed:dc:2a:ae:a6:10:63:a3:c6:a9:1f:
08:c1:23:34:4c:45:33:ae:04:4d:b5:6f:ee:d6:d4:
10:1e:0b:9e:0c:f8:ef:11:d9:9d:db:2b:aa:39:7d:
f6:71:31:ad:cb:e8:70:e8:b4:1f:57:f3:3c:ff:17:
e4:c1:27:c7:66:b4:45:98:48:8b:e9:9f:3a:9b:6a:
a0:6f:d3:0c:0a:96:57:b8:15:c3:d8:d0:dd:c4:13:
09:b0:1c:9d:2f:41:21:d0:72:fb:48:0a:2a:9a:36:
dd:b2:57:e6:b9:c7:7e:4a:7d:5f:f4:bf:f0:f7:31:
3f:9f:2c:33:65:f5:81:7e:2f:d7:50:48:fd:36:bd:
d1:d8:7b:e6:42:3b:10:a2:1f:37:4e:e7:2c:f5:84:
90:35:fa:41:0c:2b:65:c1:f1:b8:ba:9e:c3:cb:d6:
05:55:b3:2b:44:a0:80:cd:31:8a:59:5e:37:40:27:
39:40:5f:05:75:4f:94:a0:01:e6:1f:90:1c:eb:e0:
21:e8:bf:c0:c0:09:f6:7b:11:ef:4e:fc:af:e5:a8:
30:f3:51:3d:45:d8:5f:6e:0a:f5:76:c1:fb:15:47:
1e:cb:ff:66:54:4c:b9:64:f2:bd:13:29:7f:26:4f:
ee:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0E:09:44:AF:EF:F1:16:F8:4B:A6:35:1E:38:E0:D6:68:7C:F9:13
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/PQ4JRK_v8Rb4S6Y1Hjjg1mh8-RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.36.0/24
185.169.180.0/24
Signature Algorithm: sha256WithRSAEncryption
96:ed:a2:6c:3a:89:7d:d7:86:62:66:9c:7f:30:ae:ae:b7:d0:
51:53:93:24:2a:26:0d:e6:22:b9:d2:b7:62:6d:d0:5b:82:76:
70:46:a2:29:08:8e:92:d1:fd:d2:f2:ba:59:95:b1:79:6f:fc:
7d:28:73:9e:e6:7c:ec:30:4c:48:8e:6f:ed:63:21:1d:b3:c4:
30:d0:ee:a8:d9:f0:9c:27:9c:c9:d0:62:b5:7e:10:66:0e:99:
04:4d:69:01:74:13:b9:14:21:ce:15:24:e9:47:ac:85:fa:80:
81:c7:91:e0:01:b8:59:d5:c8:76:23:4a:4c:46:0c:43:7b:51:
68:6f:c5:23:cd:92:95:60:e8:15:3a:2a:08:f9:7b:e1:fc:d0:
2c:f3:8e:bb:e5:58:25:d7:48:4a:70:1d:73:2a:d4:c5:b8:3a:
fb:31:05:20:91:75:cc:08:d7:5c:7d:55:1e:c7:a0:74:00:41:
35:c3:4c:f9:a6:5c:15:66:91:6d:88:63:77:2e:18:51:c9:58:
ee:42:00:a1:6a:89:03:83:96:50:c2:c5:04:0d:b0:44:84:fa:
ee:d4:77:70:76:8a:eb:95:77:9b:91:02:cc:91:3c:eb:a3:10:
fa:b3:10:35:4e:7f:cb:94:ed:78:e8:7c:60:86:fe:8c:e2:40:
53:29:06:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:09 2025 by rpki-client