Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/1eHV2MTVv9r4jaAyWzNmweINues.roa
File: 1eHV2MTVv9r4jaAyWzNmweINues.roa (raw, json)
Hash identifier: kpyvjkV25MXxf36AZvjCKoDBz8hEwaag/9XEAwnyuhU=
Subject key identifier: D5:E1:D5:D8:C4:D5:BF:DA:F8:8D:A0:32:5B:33:66:C1:E2:0D:B9:EB
Certificate issuer: /CN=32010f70276e418d58f08c56a79a82b99aca1763
Certificate serial: 019420D65FB95CF7535433A2E08D8AFFEDF3
Authority key identifier: 32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/1eHV2MTVv9r4jaAyWzNmweINues.roa
Signing time: Wed 01 Jan 2025 07:48:27 +0000
ROA not before: Wed 01 Jan 2025 07:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.88.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:5f:b9:5c:f7:53:54:33:a2:e0:8d:8a:ff:ed:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32010f70276e418d58f08c56a79a82b99aca1763
Validity
Not Before: Jan 1 07:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5e1d5d8c4d5bfdaf88da0325b3366c1e20db9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:ab:1f:0e:82:b8:07:b0:8d:26:d6:f9:31:
8d:f5:e3:e9:52:6e:87:86:f3:5a:ee:bc:2f:e3:aa:
99:11:34:3d:5b:5e:c5:61:68:e1:4b:32:37:03:95:
e9:52:b8:ca:80:48:3a:16:43:1a:d9:5b:a8:99:cb:
ac:46:cd:b7:25:1b:dc:5a:fc:46:7e:79:fa:1c:7a:
c6:e6:3c:49:b0:2a:b0:c1:b4:03:90:47:b5:34:2e:
ad:26:d4:04:00:13:40:d5:f4:9d:c5:e7:89:91:34:
eb:7d:a4:21:3e:e7:c2:59:be:11:62:69:0d:28:c9:
5c:45:2a:89:94:c3:8c:a3:1e:0b:a9:dd:fc:ad:37:
d2:c0:ac:db:49:d9:f6:af:2d:28:08:34:a6:1b:37:
16:8e:56:08:4f:5d:fa:c9:0d:d3:e1:60:37:9a:10:
4b:29:39:4b:95:fb:e8:1f:64:c4:4e:61:53:12:87:
b5:5a:05:5c:8b:6a:d6:32:9d:3b:e0:e9:3e:92:b4:
00:b0:c9:f2:94:42:1a:da:33:d5:6b:ea:91:e4:3f:
67:3d:0a:56:13:ca:4b:89:2f:0a:9f:55:02:46:1e:
ef:17:ba:ea:7c:f3:69:ec:be:0b:96:2c:8e:2e:8e:
a5:41:f3:e8:7a:7c:17:df:1e:b6:87:6b:65:68:76:
bb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E1:D5:D8:C4:D5:BF:DA:F8:8D:A0:32:5B:33:66:C1:E2:0D:B9:EB
X509v3 Authority Key Identifier:
keyid:32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/1eHV2MTVv9r4jaAyWzNmweINues.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.248.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:23:04:bc:02:4c:92:2a:80:ad:d3:7a:7e:1d:8d:a6:d3:4a:
3e:97:55:1e:ce:ae:05:1d:71:4f:e5:c7:ec:81:63:ce:bb:dd:
da:1b:fb:0c:05:f4:3e:94:2b:32:3b:a4:52:70:5c:76:69:43:
d1:80:93:f6:4f:e2:46:cc:14:f1:bc:89:ea:a2:15:33:81:18:
1e:a6:6d:74:2a:20:c3:aa:d1:fa:c3:74:fa:57:5d:30:62:63:
78:f6:0f:ef:a3:41:1a:f4:a3:5e:49:8e:5e:0b:ee:df:51:10:
2b:fc:9d:79:8e:d2:3a:93:95:dd:8d:a1:5f:14:34:50:9a:59:
15:7e:0d:97:a0:b4:c4:c4:76:2d:52:eb:79:ac:d8:d7:07:cd:
44:99:46:bc:1e:2c:0c:4b:e0:f9:21:1a:7c:f1:a5:ef:4f:14:
1b:6c:61:53:6f:08:9b:ad:5b:38:34:8f:0d:7d:cf:6d:9d:9b:
aa:37:47:9d:d6:0c:21:71:8b:89:87:f8:be:62:e1:6b:60:91:
12:c0:30:be:b6:4a:23:4e:10:ca:8b:83:ba:b9:47:60:a3:c0:
c7:45:2c:77:15:fc:da:19:b5:13:7f:1a:7f:00:d0:34:3c:9e:
7f:b8:78:d5:c6:0a:bf:ce:bc:b7:3f:d0:1c:6e:76:05:d8:f7:
22:3a:e1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:07:34 2025 by rpki-client