Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/15KhGd4HmYbpuYXtzncXGULTUqY.roa
File: 15KhGd4HmYbpuYXtzncXGULTUqY.roa (raw, json)
Hash identifier: iH3AMLCtT6vKx2SSnrUr9zrzWdEsbyifJgPpor+ZLYo=
Subject key identifier: D7:92:A1:19:DE:07:99:86:E9:B9:85:ED:CE:77:17:19:42:D3:52:A6
Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial: 01941F8C1862FFBC0D2E0F1A706F4DC0518D
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/15KhGd4HmYbpuYXtzncXGULTUqY.roa
Signing time: Wed 01 Jan 2025 01:47:42 +0000
ROA not before: Wed 01 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210056
IP address blocks: 94.45.158.0/24 maxlen: 24
94.45.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:18:62:ff:bc:0d:2e:0f:1a:70:6f:4d:c0:51:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Validity
Not Before: Jan 1 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d792a119de079986e9b985edce77171942d352a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:26:3c:10:e1:d2:01:99:ca:42:77:54:d9:
e4:7d:04:8c:fc:f3:b2:a3:36:61:40:b3:18:4b:a6:
e4:40:34:84:94:9a:67:92:9a:1f:54:10:48:aa:94:
74:34:82:d0:63:36:52:9b:3b:c8:b1:46:de:0e:45:
e2:d5:97:8e:fb:fe:08:c6:b8:dd:5d:57:d2:79:7c:
1e:26:8e:e1:b6:e8:b2:27:41:57:18:44:5a:ef:0c:
09:26:2f:ae:1a:5c:a3:0a:b2:56:b7:f5:aa:7c:15:
4e:c1:c2:3c:5f:e5:24:a9:a4:b1:85:8e:26:ff:8b:
a8:f1:97:9e:ae:79:07:68:12:9f:60:df:73:05:7c:
75:8c:45:ce:5b:c5:ba:dd:24:6a:eb:29:c1:a0:f4:
5c:8e:4d:b1:bb:74:c0:26:bd:3d:17:18:db:a7:26:
f3:27:d0:2e:0f:17:af:16:69:79:ef:57:ba:9d:86:
1b:3a:eb:61:18:23:d9:8a:9b:32:3c:9a:0c:da:14:
a1:f8:79:f8:31:8f:b0:af:11:fb:22:60:b9:ed:3c:
01:14:c8:1c:84:2b:2c:14:0e:bb:bc:c7:b4:95:34:
f2:78:35:f1:a7:37:c7:cb:15:b6:13:ae:b6:08:e5:
28:f4:d6:1f:0c:fb:35:2c:ec:dc:e4:8a:43:e3:2a:
60:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:92:A1:19:DE:07:99:86:E9:B9:85:ED:CE:77:17:19:42:D3:52:A6
X509v3 Authority Key Identifier:
keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/15KhGd4HmYbpuYXtzncXGULTUqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.45.158.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:2f:06:7d:15:0e:59:9c:89:87:d7:76:59:73:53:48:31:0d:
90:6d:0c:1f:26:f6:b5:43:76:5c:ec:aa:35:7d:35:c3:cb:2a:
11:07:d6:08:bf:ab:aa:da:3f:31:be:61:bc:13:84:33:74:e5:
03:ef:41:f4:13:78:a5:c3:d1:ad:8d:8b:39:20:f8:aa:7b:b2:
8f:b1:43:e5:54:51:30:f4:00:eb:ea:00:87:9e:ce:68:0e:05:
62:7e:bd:b9:4a:c7:53:ee:87:15:32:10:14:e9:56:22:61:25:
dc:d0:de:be:7f:e6:e4:a9:eb:80:86:f1:38:2e:ea:a7:4a:db:
0d:92:a1:14:b1:a8:e3:00:e7:72:d7:ce:c1:5d:42:b1:f3:9c:
52:0f:30:b1:4f:67:90:da:01:e8:68:c0:1e:cb:01:3a:e8:c4:
ed:bd:65:ec:eb:56:56:f7:7b:5b:8e:87:f8:c7:92:32:e0:3b:
a6:b1:26:4f:ec:e8:87:48:b2:b7:85:87:20:0f:e4:08:b4:23:
98:e0:51:21:ed:3a:d7:fd:f8:16:b4:69:4d:00:82:fa:4c:db:
90:bc:f3:33:d1:c8:6c:4c:64:81:d1:7c:af:de:e4:04:d8:a2:
8d:80:1e:b2:0e:8c:a2:86:62:dd:aa:39:a1:7e:5f:82:e3:7f:
91:b0:de:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:51 2025 by rpki-client