Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/Egd29kTFKzbvWNsxer7QLDjqzVM.roa
File: Egd29kTFKzbvWNsxer7QLDjqzVM.roa (raw, json)
Hash identifier: WGEXpUir7d8rgDB0vYw6cZTjOUVh4VUV5dDVAI/EaoQ=
Subject key identifier: 12:07:76:F6:44:C5:2B:36:EF:58:DB:31:7A:BE:D0:2C:38:EA:CD:53
Certificate issuer: /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial: 0194236A0E61605649DAF35D997D1FB1914B
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/Egd29kTFKzbvWNsxer7QLDjqzVM.roa
Signing time: Wed 01 Jan 2025 19:49:00 +0000
ROA not before: Wed 01 Jan 2025 19:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.11.173.0/24 maxlen: 24
45.11.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:0e:61:60:56:49:da:f3:5d:99:7d:1f:b1:91:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Validity
Not Before: Jan 1 19:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=120776f644c52b36ef58db317abed02c38eacd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:c8:03:25:9e:a2:1b:0b:8b:f3:71:63:8c:
5b:18:38:f2:62:3f:ca:53:b2:f8:3f:e6:1c:23:06:
64:c0:07:f9:14:2f:47:ba:13:4b:0a:a5:a6:9a:31:
2c:7c:fa:1d:be:60:1e:87:4d:ae:14:fe:d9:08:0f:
6b:1d:be:2d:e3:52:72:6e:90:1b:34:99:d3:18:3e:
89:85:3c:ed:ee:79:ca:5d:c8:b4:c0:b5:13:af:96:
d9:b1:0c:92:03:0b:2b:f1:1a:db:7f:22:69:cc:6d:
b4:e3:b9:da:24:90:01:e3:d7:00:73:29:06:9e:82:
8d:95:09:67:c1:d0:7e:e7:ea:ca:5f:aa:96:e8:81:
24:7b:f3:42:44:a8:84:71:fb:6a:81:38:c0:f7:4f:
ad:8c:d5:fd:78:0b:df:a4:68:3e:de:01:d8:9b:97:
6a:07:49:2e:64:e4:77:97:d5:22:22:c6:8c:f5:04:
4b:f4:12:c7:f4:e2:ea:4e:c7:a9:23:fa:21:b0:08:
50:3c:fb:9e:33:42:ef:8f:cf:8c:16:5e:1e:5c:dc:
e1:1b:f5:01:f9:32:5d:01:cb:29:7d:b5:63:45:91:
b4:2b:c0:a5:4d:7e:1b:64:a9:c4:24:97:ba:ba:ea:
f9:94:bc:f8:02:a5:06:f2:de:f2:cc:90:9e:ef:10:
25:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:07:76:F6:44:C5:2B:36:EF:58:DB:31:7A:BE:D0:2C:38:EA:CD:53
X509v3 Authority Key Identifier:
keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/Egd29kTFKzbvWNsxer7QLDjqzVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.173.0/24
45.11.175.0/24
Signature Algorithm: sha256WithRSAEncryption
af:50:3e:ac:45:47:de:54:8c:81:ef:70:ce:de:76:8c:63:b1:
fc:09:07:ab:cf:81:5b:b2:17:d2:8b:91:28:74:f3:b0:19:1c:
df:77:01:f5:47:cf:c8:bc:93:93:60:56:0d:bd:59:1c:3d:9b:
2c:27:a5:1e:e3:f2:4f:16:89:89:0a:9e:4b:5b:a6:73:44:0c:
dc:a4:4f:63:51:43:08:b5:17:cf:73:78:e5:af:c8:d3:90:a7:
26:89:24:a3:c7:be:66:20:6b:3d:6b:ef:d3:1f:27:5c:fb:bf:
0c:26:64:dd:ed:78:21:6a:9b:77:4b:1c:f9:af:86:3b:e4:46:
b7:cb:da:0a:1f:6f:13:01:62:bc:3c:1c:e6:5f:f2:34:ec:8e:
8f:5e:51:32:8e:f4:d8:fe:11:fd:9c:46:3d:27:33:13:c6:a6:
88:6e:03:e3:7a:27:9b:a7:1b:0a:1d:2e:4d:38:31:d0:2a:97:
fc:c6:a0:bd:c8:49:73:b5:40:ad:e0:41:d4:21:9e:7c:d4:a4:
5d:72:28:52:e9:a3:14:aa:d7:de:9f:d2:c2:07:f4:36:4e:a3:
35:15:66:de:ed:27:39:8e:fc:c5:87:7b:cb:19:45:ac:32:61:
ee:51:99:4b:ac:c6:1c:9b:14:25:65:26:1a:13:d2:d3:43:d0:
40:29:d1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:00:01 2025 by rpki-client