Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/K3JLzJ8Oshcex34PmVjr7P9Mclw.roa
File: K3JLzJ8Oshcex34PmVjr7P9Mclw.roa (raw, json)
Hash identifier: SX0/Si7VYr/7N7XDSV0NE8sXvy6iqKrRmCAfH5t5+bQ=
Subject key identifier: 2B:72:4B:CC:9F:0E:B2:17:1E:C7:7E:0F:99:58:EB:EC:FF:4C:72:5C
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01942748A0D99536D64844A6D331423AF3BA
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/K3JLzJ8Oshcex34PmVjr7P9Mclw.roa
Signing time: Thu 02 Jan 2025 13:50:58 +0000
ROA not before: Thu 02 Jan 2025 13:50:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214915
IP address blocks: 45.84.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:a0:d9:95:36:d6:48:44:a6:d3:31:42:3a:f3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b724bcc9f0eb2171ec77e0f9958ebecff4c725c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:00:16:8d:89:99:f3:64:d1:d2:98:cc:eb:
84:53:de:f3:52:ee:2d:f6:73:dd:4a:d7:4b:f3:97:
6f:5d:8e:de:f8:f0:c2:c7:b4:df:dd:69:29:a9:ea:
79:91:ec:e7:56:00:49:65:01:fa:8f:97:40:53:6d:
87:f1:91:f1:10:94:d1:e1:e8:1f:a6:16:9a:a3:62:
ad:cf:2a:78:ca:f5:76:87:93:cc:70:8c:fb:0a:c6:
a1:09:c3:5f:30:f0:42:4a:33:3d:79:1b:4d:f0:29:
e1:f6:b0:75:e6:9a:83:41:b2:43:8a:e2:13:8a:ae:
95:d5:f3:1e:9d:f8:78:b8:f5:c8:36:d6:be:54:27:
7a:ca:48:37:07:d7:d0:68:99:5d:91:81:04:a9:74:
9c:fc:42:1b:62:06:7a:2c:6f:0c:47:30:f9:99:93:
f7:bf:4d:e5:55:98:e9:d1:57:a8:e1:cd:e8:6a:b9:
f1:56:05:dd:ae:a4:a9:84:c6:4e:4b:07:5f:5e:4e:
0c:dc:45:f0:48:e9:b6:fe:18:06:b2:ed:c3:25:a2:
1e:cc:3e:0d:a5:be:73:09:08:f0:6c:8d:b8:4d:e0:
09:8f:8a:9c:2a:1d:9d:08:58:f3:b1:e3:32:c5:50:
e1:53:48:f5:a6:ee:b5:5e:68:54:4c:a9:38:c8:c7:
a1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:72:4B:CC:9F:0E:B2:17:1E:C7:7E:0F:99:58:EB:EC:FF:4C:72:5C
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/K3JLzJ8Oshcex34PmVjr7P9Mclw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.197.0/24
Signature Algorithm: sha256WithRSAEncryption
03:f4:7c:6d:a1:ca:de:f8:c9:17:58:96:67:51:ef:2f:fd:d0:
9c:fb:f8:03:56:b8:8c:9d:14:41:2c:2b:c1:65:83:3b:06:6d:
d4:67:34:b1:91:42:ee:2c:d7:11:31:a4:5f:5a:29:ac:3d:47:
fa:e0:c1:b6:47:c6:b4:5c:bf:a5:eb:5a:28:ef:99:65:0a:a9:
1d:22:bb:c1:02:c4:29:03:0e:60:79:b8:21:a4:1a:c6:9a:34:
42:d1:a1:42:ed:a3:aa:6f:0a:73:66:80:7d:7a:99:15:f8:9b:
c3:3a:3b:83:9a:a9:47:7b:ea:27:f6:96:db:42:19:a8:95:cd:
bc:30:9a:5b:ab:be:20:34:4c:72:07:55:fd:3d:04:20:e1:59:
1b:26:74:55:47:ee:88:3e:9d:2a:d8:54:f0:c4:02:0d:e4:9c:
2a:69:b9:da:83:63:14:2f:4f:2c:c6:6a:4d:93:12:52:68:4e:
e7:f2:4b:18:03:c6:94:8b:da:26:02:f4:42:98:1c:7d:aa:ae:
89:54:ef:78:79:ab:5e:f9:e2:07:7c:03:dc:ea:80:2f:c0:83:
c5:14:b5:c6:e4:bd:91:ca:fb:53:c7:6b:2d:49:ea:3e:9e:9c:
6c:32:40:69:f1:1e:3b:9c:8f:82:6f:bd:3c:1e:34:e8:6a:14:
63:b5:01:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:17:44 2025 by rpki-client