Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/iKChlgke0qaYozBSamlgrEMyE5c.roa
File: iKChlgke0qaYozBSamlgrEMyE5c.roa (raw, json)
Hash identifier: s7CnX7IsmQ1q2iRKvuL5ji1vRiEy3XqWtAuATOdNJgE=
Subject key identifier: 88:A0:A1:96:09:1E:D2:A6:98:A3:30:52:6A:69:60:AC:43:32:13:97
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01942748896F302FC9069E3B00296E657DE9
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/iKChlgke0qaYozBSamlgrEMyE5c.roa
Signing time: Thu 02 Jan 2025 13:50:52 +0000
ROA not before: Thu 02 Jan 2025 13:50:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49697
IP address blocks: 45.11.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:89:6f:30:2f:c9:06:9e:3b:00:29:6e:65:7d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88a0a196091ed2a698a330526a6960ac43321397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ab:0c:60:91:a8:82:95:a4:45:aa:2a:5c:98:
1a:cc:cd:cc:d8:92:58:f6:13:79:d0:b5:83:85:ba:
fe:6e:c5:f7:dc:68:75:6e:f4:15:c4:e9:fd:64:52:
96:a2:58:06:62:88:87:c9:fb:a4:6f:dd:cb:87:54:
9d:73:00:07:30:33:6c:1c:2c:41:76:75:89:05:00:
e5:6a:5a:2b:fe:4d:81:b3:f7:dd:09:3b:20:09:7d:
b9:d1:d2:bb:d3:6e:db:ff:78:fd:e1:04:9d:30:ae:
cf:3a:aa:a6:44:6f:d7:6c:5e:98:3c:30:af:02:fa:
4c:b2:1e:d1:5f:b1:dd:b2:e0:79:97:c7:c9:9d:cf:
ed:b1:df:dd:8a:7f:42:ce:f2:b4:e1:ab:ed:9a:33:
6f:a6:fe:d9:40:bc:32:e7:85:f1:1d:7d:42:24:6a:
6e:7b:0b:99:3c:6e:95:77:b6:31:25:2d:83:ab:1c:
26:db:5b:9f:f0:25:eb:cf:70:3d:52:d1:79:4d:c3:
35:6f:be:a2:5a:fa:e8:2e:7f:dd:62:58:c4:7e:4d:
79:ad:05:12:59:da:97:d9:43:f7:ab:37:f7:75:2c:
b3:85:a3:07:42:80:e5:f3:54:fd:c9:08:20:85:30:
de:05:47:11:98:9e:8a:80:ee:2e:67:8f:6d:c0:ca:
c2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A0:A1:96:09:1E:D2:A6:98:A3:30:52:6A:69:60:AC:43:32:13:97
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/iKChlgke0qaYozBSamlgrEMyE5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.231.0/24
Signature Algorithm: sha256WithRSAEncryption
67:5b:6f:b4:b1:60:43:b4:5e:7b:64:62:2c:1a:ac:b3:c6:65:
4d:9f:ae:58:e8:f5:8a:de:ed:7a:b1:f4:6b:0a:cf:19:91:b2:
d9:38:ec:45:e5:77:9d:23:8b:70:82:b4:f9:8b:02:f9:68:53:
ba:91:ba:17:d1:21:c9:dd:bd:4d:7c:c0:bf:52:e0:58:f1:ef:
a9:e8:ce:12:f8:6a:f2:34:27:29:2b:23:3d:e1:c0:c3:e6:f3:
27:c0:91:4c:97:84:f6:90:0e:2a:f9:8d:3d:f6:1b:27:4a:87:
f1:67:bd:77:91:f8:ac:f4:f5:99:e0:f0:3d:15:a0:87:54:aa:
f4:b3:4d:7c:dc:36:f1:d1:84:49:b1:14:dd:ec:9f:89:d2:bf:
c3:0f:92:dc:84:56:e1:bb:a3:4c:5e:8e:e6:73:66:6c:12:6b:
9c:b7:95:56:73:a9:7d:c2:c5:ee:2a:72:66:76:7c:7d:25:17:
c0:b0:93:d7:e9:74:bc:ef:7c:63:9e:b8:c4:38:8d:2d:ed:77:
ab:bb:f0:27:ff:18:f2:92:42:ef:96:c1:23:f8:56:57:34:d7:
42:0f:b7:d6:04:3e:83:4d:49:c3:b0:7c:45:b4:f1:2a:97:13:
a1:66:e5:3a:ed:2c:a4:48:2a:8d:6c:18:9c:6d:14:06:bc:e5:
aa:9e:f2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:34:27 2025 by rpki-client