Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/RgkGs56a3wBSH0Yhny04eNJEX3I.roa
File: RgkGs56a3wBSH0Yhny04eNJEX3I.roa (raw, json)
Hash identifier: 1WUdRWIGnTtyys0okmGp0iV2hIZohfzABaDiV/G7uDo=
Subject key identifier: 46:09:06:B3:9E:9A:DF:00:52:1F:46:21:9F:2D:38:78:D2:44:5F:72
Certificate issuer: /CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
Certificate serial: 0194228D74AF72A6B3C606CA495AE03A579B
Authority key identifier: A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/RgkGs56a3wBSH0Yhny04eNJEX3I.roa
Signing time: Wed 01 Jan 2025 15:48:03 +0000
ROA not before: Wed 01 Jan 2025 15:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12843
IP address blocks: 45.14.124.0/22 maxlen: 22
2a0e:e80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:74:af:72:a6:b3:c6:06:ca:49:5a:e0:3a:57:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
Validity
Not Before: Jan 1 15:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=460906b39e9adf00521f46219f2d3878d2445f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:48:af:1e:26:0f:3c:97:34:c9:3c:92:24:
48:5f:b2:19:bb:43:e2:0e:0a:59:67:ca:9b:b4:ed:
11:48:96:f7:1f:01:79:a0:cb:b3:77:d8:e5:66:95:
ec:9a:ba:40:ca:64:de:67:93:c6:3d:84:ab:51:e8:
bd:c4:c4:e9:0b:5a:cf:fd:59:e1:2c:de:04:d2:6a:
61:88:a3:cf:2e:40:a0:ad:c0:bc:2c:23:52:e3:86:
f3:ed:cd:eb:ef:04:34:e2:da:bc:93:a7:f6:59:72:
65:e7:c3:4b:7a:b9:47:5b:dd:24:2b:28:06:da:fa:
65:c4:4e:09:b1:6d:3e:55:47:d9:8a:1e:9a:27:05:
4b:cd:08:32:33:08:9f:02:1b:2f:24:f3:c5:eb:56:
e0:35:b2:75:2e:75:a7:b4:ca:f5:4a:d9:7b:af:a9:
2b:99:56:44:b6:1a:ef:fb:47:c7:43:0e:d7:c2:c7:
ec:68:a0:8e:f1:81:de:b9:ec:ac:39:dc:eb:69:4d:
8c:f9:e7:9e:67:fc:fc:1d:ec:cf:71:18:72:23:d6:
2c:02:3b:bc:29:00:16:61:42:d7:55:eb:7b:5b:73:
f4:07:50:ba:69:51:9d:8a:f3:1f:df:9e:d4:16:1f:
5c:a1:c2:08:ff:0f:ee:a3:de:b6:77:45:d2:aa:2f:
cf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:09:06:B3:9E:9A:DF:00:52:1F:46:21:9F:2D:38:78:D2:44:5F:72
X509v3 Authority Key Identifier:
keyid:A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/RgkGs56a3wBSH0Yhny04eNJEX3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.124.0/22
IPv6:
2a0e:e80::/29
Signature Algorithm: sha256WithRSAEncryption
38:55:28:bb:d6:7e:a5:38:ef:24:a6:68:14:fb:71:de:73:ce:
19:14:dd:53:a9:07:83:44:85:07:73:08:12:b5:58:6a:bf:af:
5b:3d:92:65:7e:df:33:51:88:54:4f:c4:b8:92:cd:f1:40:54:
de:e1:80:52:4d:8c:52:fe:83:eb:28:17:d5:5c:b9:31:26:e3:
c2:a4:0e:2b:73:28:16:91:fe:58:33:03:81:45:b0:08:51:bf:
64:64:64:cd:0e:6b:a6:1a:4d:a1:b3:84:0d:66:e6:4e:74:2e:
79:2e:9e:4b:43:f6:14:23:59:83:42:29:16:ad:e8:bd:ca:76:
26:5c:8e:df:5f:80:3c:b5:3e:4f:7f:53:01:6f:bc:05:8e:93:
5d:85:09:f4:43:01:4f:da:0c:22:4a:0c:90:e2:ad:06:0e:37:
49:6b:15:da:8c:bf:74:07:8a:c7:51:a4:96:f2:d7:11:22:b2:
d4:f8:20:b8:8a:13:36:51:95:39:ee:e4:d2:44:f6:9a:62:c0:
e1:cb:0c:ff:d3:35:19:fd:45:5e:74:af:f5:a4:f3:09:23:02:
57:b4:f3:b2:70:66:49:9b:8f:3a:b0:c1:81:3e:a7:08:27:87:
37:2d:10:bc:b4:63:86:a9:bc:e8:5e:ae:2f:59:9f:88:53:05:
0c:32:43:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:08:14 2025 by rpki-client