Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/1wHz9itaaIOutvJbiLzjoh-KZtU.roa
File: 1wHz9itaaIOutvJbiLzjoh-KZtU.roa (raw, json)
Hash identifier: a0TL9iwZU0oRfdDEOO3AGkbTz5l5jRDjC2JWXY9aScI=
Subject key identifier: D7:01:F3:F6:2B:5A:68:83:AE:B6:F2:5B:88:BC:E3:A2:1F:8A:66:D5
Certificate issuer: /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial: 01955BEDB573D4D0976D8242662CC0142FA9
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/1wHz9itaaIOutvJbiLzjoh-KZtU.roa
Signing time: Mon 03 Mar 2025 12:14:19 +0000
ROA not before: Mon 03 Mar 2025 12:14:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200017
IP address blocks: 45.91.33.0/24 maxlen: 24
45.91.35.0/24 maxlen: 24
45.94.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:ed:b5:73:d4:d0:97:6d:82:42:66:2c:c0:14:2f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Validity
Not Before: Mar 3 12:14:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d701f3f62b5a6883aeb6f25b88bce3a21f8a66d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:b8:f3:f1:e6:69:72:49:01:a5:a6:bd:e0:
a2:6a:c8:ab:e6:33:a9:91:17:d2:98:de:69:cc:11:
ab:d6:24:ea:f6:d5:b5:94:32:71:fe:d4:a1:82:5f:
2d:32:42:85:b0:02:5d:c5:3b:9c:c8:77:dd:28:10:
55:0f:41:e6:9f:e3:fa:41:7f:3e:d5:db:9f:86:f8:
f2:2b:9f:52:33:e0:b3:90:ce:74:5f:f1:f7:42:06:
bf:1c:ed:34:e6:6c:86:59:35:46:80:ec:04:c7:74:
39:f4:55:e4:ee:39:e3:ff:e0:db:c4:78:4a:c7:35:
5c:f5:0a:46:df:d5:43:2b:1d:48:31:af:e2:eb:64:
4b:c8:23:58:da:58:a8:5d:55:6e:2d:e9:52:93:ab:
f6:cf:d7:23:9c:ff:8c:85:d9:99:d3:02:bb:87:76:
9a:98:61:ee:40:25:f8:d5:e6:35:b4:a1:d1:f3:5e:
c6:5d:9c:44:60:0c:50:cd:09:80:60:12:11:c5:64:
38:1a:36:4d:53:10:95:ea:c0:be:ec:85:e2:26:65:
2f:3d:79:fb:38:b3:db:b4:f1:fb:2b:0a:b3:6e:3d:
d1:f7:57:db:e8:d5:7e:12:bb:cf:8a:17:dd:03:27:
50:66:6a:86:5f:50:ae:f0:69:63:13:51:32:7a:25:
0a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:01:F3:F6:2B:5A:68:83:AE:B6:F2:5B:88:BC:E3:A2:1F:8A:66:D5
X509v3 Authority Key Identifier:
keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/1wHz9itaaIOutvJbiLzjoh-KZtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.33.0/24
45.91.35.0/24
45.94.239.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:4b:7f:ef:4e:06:f2:04:60:7c:9c:68:97:51:34:e7:0c:ee:
e8:cb:7f:2a:0f:de:ad:61:ce:b5:98:11:b3:a1:b0:ae:bc:f9:
fa:45:6e:92:ab:50:14:63:b3:c6:8e:99:e8:65:07:f6:6d:e7:
7c:83:4b:92:0c:3f:3e:29:36:a2:91:a9:f1:88:39:15:fe:7d:
0f:14:ad:75:0a:46:0b:df:2f:1c:81:22:3f:44:38:44:48:72:
ba:f9:16:4f:e1:b3:1f:09:57:f4:99:09:d7:08:42:1f:1a:5c:
11:c7:d2:85:14:6e:f6:2d:67:cf:2d:7c:af:6c:8c:1e:5a:18:
28:0b:96:6c:de:d4:0b:22:f2:af:60:8d:1b:e3:69:ed:4f:68:
07:72:2e:ae:04:db:93:9b:46:0e:31:b9:97:f8:47:0f:b8:62:
18:6b:a8:60:d2:bc:b5:24:e4:17:84:27:fc:6c:1a:c7:0e:e2:
1b:1f:19:89:bc:ae:8a:3d:8a:0f:43:75:1e:05:5e:72:20:2e:
df:87:bc:d6:57:82:c9:9d:f5:8b:6a:34:5d:71:e7:ba:74:d7:
9b:72:93:86:34:87:77:25:cb:e4:5a:98:8f:27:57:ca:a4:31:
93:1a:fd:c6:ad:c8:3e:73:53:75:15:a8:32:68:92:51:dc:de:
fa:14:d9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:25:03 2025 by rpki-client