Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/loSoFq1q5_1adTUvN0TRn2_jatA.roa
File: loSoFq1q5_1adTUvN0TRn2_jatA.roa (raw, json)
Hash identifier: S5bT6zDEXA713cPOtdI6nV6biiEa1EfieRQsdbrbv38=
Subject key identifier: 96:84:A8:16:AD:6A:E7:FD:5A:75:35:2F:37:44:D1:9F:6F:E3:6A:D0
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019459E7333FDB2F3C77045287E136BDB971
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/loSoFq1q5_1adTUvN0TRn2_jatA.roa
Signing time: Sun 12 Jan 2025 09:45:11 +0000
ROA not before: Sun 12 Jan 2025 09:45:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214024
IP address blocks: 45.92.218.0/23 maxlen: 23
45.134.38.0/24 maxlen: 24
45.152.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:59:e7:33:3f:db:2f:3c:77:04:52:87:e1:36:bd:b9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 12 09:45:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9684a816ad6ae7fd5a75352f3744d19f6fe36ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fb:2e:3a:a9:57:92:e0:db:0a:2b:c1:77:4b:
d5:fd:99:b8:f5:78:53:50:ff:ec:c7:83:f5:d5:af:
94:b0:1f:6f:d7:28:ad:c9:7f:87:0b:12:73:bb:64:
25:5f:17:c7:29:41:ae:7f:2c:4d:e1:87:f2:0c:dd:
b1:da:6f:a7:5d:59:e5:6f:30:44:83:8d:16:fc:2e:
cb:dd:bc:8e:ce:7f:40:37:9a:a5:e1:48:0a:0d:19:
b5:01:12:6c:7d:36:ad:f3:73:a6:1f:b0:65:7f:aa:
f2:90:df:32:32:f0:2b:8f:59:3f:a2:43:9c:96:7c:
91:ae:16:c8:1e:62:85:30:44:2d:09:91:27:42:76:
d8:31:3a:a7:77:00:ea:90:c0:af:2c:51:3a:36:a1:
1d:c5:4f:8e:42:e1:2f:81:0b:29:db:4f:46:dd:0f:
6f:06:31:85:dd:25:b5:0d:ca:88:f5:56:03:ee:03:
e7:2e:52:ac:98:15:75:41:d4:d1:27:2f:36:38:8d:
74:1a:57:89:0d:e2:5a:2a:76:8b:72:d4:c5:f1:e8:
39:f5:89:b9:8b:54:21:c8:42:a0:ce:f6:ad:4f:71:
a9:ad:11:38:87:d6:e0:0d:56:7d:fe:2e:8d:11:05:
75:55:30:ff:c2:64:c2:b1:88:d3:54:68:b1:15:6d:
0c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:84:A8:16:AD:6A:E7:FD:5A:75:35:2F:37:44:D1:9F:6F:E3:6A:D0
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/loSoFq1q5_1adTUvN0TRn2_jatA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.218.0/23
45.134.38.0/24
45.152.162.0/23
Signature Algorithm: sha256WithRSAEncryption
68:58:c6:67:52:99:0e:bc:87:fc:64:6c:41:b1:b8:9e:b4:14:
b7:f9:4a:44:63:83:12:6f:b7:92:47:a0:b8:c4:9d:6e:1f:15:
8d:63:2b:87:c3:f5:d6:dd:6b:cb:1d:1b:58:fa:e8:2e:13:a7:
a0:5a:d7:09:f6:83:02:1c:54:b4:41:52:0a:01:8b:0a:f0:e6:
11:29:b2:11:90:17:d9:81:0e:d6:85:d7:d3:33:1c:60:25:5b:
ac:1b:82:61:06:5e:ec:0f:89:a6:a1:76:21:91:8b:11:59:83:
87:4b:21:26:1c:d9:40:24:89:80:f9:b2:f1:9b:4d:95:6c:e7:
28:5d:07:02:4b:c4:89:a3:2e:86:39:ec:d5:51:78:e5:95:26:
a5:05:e2:99:cf:9c:b1:ce:c3:e5:a1:f8:ec:49:69:4f:5b:59:
ca:2d:80:37:5f:ae:c8:c6:9d:d7:af:aa:55:b0:cf:bc:f3:bf:
b9:a7:f9:a2:f6:e4:3b:01:67:17:43:98:5c:77:22:81:61:81:
ba:e8:4d:9c:b7:2c:b1:78:db:d3:b2:2d:b3:21:5a:47:d4:34:
18:9f:02:a1:c5:aa:c1:01:1b:0d:8b:cb:f4:57:ef:4b:48:92:
42:82:2c:c6:59:de:59:f7:b6:e5:90:53:65:c5:65:df:ec:7f:
4a:56:a2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:40:37 2025 by rpki-client