Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/rmMvcxvlKlL55AFeazDJr2PbrRU.roa
File: rmMvcxvlKlL55AFeazDJr2PbrRU.roa (raw, json)
Hash identifier: C6ALATp5jWfDJwskuRdAUXIGPOP3FPd/oIDg3cAxIb8=
Subject key identifier: AE:63:2F:73:1B:E5:2A:52:F9:E4:01:5E:6B:30:C9:AF:63:DB:AD:15
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019427487C542DC118D8EA1425D398E70B19
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/rmMvcxvlKlL55AFeazDJr2PbrRU.roa
Signing time: Thu 02 Jan 2025 13:50:49 +0000
ROA not before: Thu 02 Jan 2025 13:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 45.13.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7c:54:2d:c1:18:d8:ea:14:25:d3:98:e7:0b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae632f731be52a52f9e4015e6b30c9af63dbad15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:8c:f0:45:5b:67:8d:1c:8d:26:95:d2:04:
b9:ca:6c:98:f1:73:67:35:36:c1:f0:77:8d:53:30:
7d:1b:94:1e:d7:db:49:04:fa:cf:b3:b6:5e:a8:0b:
8b:31:93:50:3f:ec:e5:3d:a7:42:a1:46:44:cf:2d:
d7:78:2d:55:fa:fb:8e:fb:1f:32:46:da:c4:ab:00:
ac:76:5f:eb:8e:25:2c:65:f5:4e:f8:61:e4:4e:a9:
17:00:69:df:93:c6:42:3d:aa:32:bb:9d:7f:ed:49:
90:b0:d0:1d:a4:57:04:d9:a6:87:5b:7a:8c:4c:c9:
8c:83:5a:b3:56:d2:97:23:e6:cb:39:6b:05:f5:58:
63:3b:f1:25:a4:00:5e:c3:d9:a4:e4:3a:75:d2:13:
00:5d:51:da:68:85:0d:5b:56:0c:9a:93:fe:d5:09:
15:3f:e6:db:32:44:48:cf:d1:78:3c:47:71:83:00:
24:be:a7:64:60:1b:96:57:1a:3a:19:82:35:88:40:
47:bc:21:21:20:bd:ce:a9:94:2c:c5:60:39:bf:19:
0e:11:18:3e:93:e8:12:89:66:37:a6:71:ee:a5:27:
7b:95:2e:99:a8:dd:b9:82:d6:76:18:6e:98:3b:58:
a9:e8:b3:20:17:b5:6a:dd:18:e5:2b:14:f3:81:91:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:63:2F:73:1B:E5:2A:52:F9:E4:01:5E:6B:30:C9:AF:63:DB:AD:15
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/rmMvcxvlKlL55AFeazDJr2PbrRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.236.0/22
Signature Algorithm: sha256WithRSAEncryption
95:bc:3d:e5:98:ef:ee:2f:0a:98:b4:34:b1:e2:61:b6:26:91:
39:f0:56:16:20:a3:c5:9c:1e:ef:46:0a:ba:14:d4:7b:c7:37:
27:2c:f9:47:63:ee:9b:07:97:19:5f:b0:8d:53:6b:8f:ee:20:
c2:a0:56:16:93:ce:c2:1b:38:4a:50:cd:af:2d:da:9c:3d:08:
32:f5:ff:51:5f:66:44:f2:33:2f:f5:16:12:da:df:e7:ee:e7:
d9:ef:e8:c4:7e:ea:68:57:df:36:1e:c0:0b:1a:15:6f:1b:a3:
11:b6:60:7e:db:56:84:8a:59:89:b2:b7:51:b7:89:2e:4f:1b:
d6:0c:cd:7f:ed:71:c5:5e:38:c9:21:5f:93:94:9b:99:8d:f3:
19:72:20:90:67:bb:d1:26:4d:ee:6e:f8:fb:7d:cf:03:bb:03:
0b:45:a3:5b:83:ba:2f:3a:ae:0a:3c:86:48:79:73:e0:20:42:
73:d9:22:00:95:5e:b2:71:9a:6d:6a:0f:96:aa:a9:d8:0f:70:
1a:ec:e4:40:66:05:39:43:da:fb:99:af:32:af:75:5b:b9:84:
fe:3a:d7:b7:00:f0:19:30:28:0f:5a:64:4a:e0:50:05:0f:50:
f2:51:a1:81:63:21:2c:bc:b7:1e:78:5e:90:a7:5f:8f:38:d8:
92:16:86:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:08 2025 by rpki-client