Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/pdTNXVpNql2x4BTpV1iLKkVmv9M.roa
File: pdTNXVpNql2x4BTpV1iLKkVmv9M.roa (raw, json)
Hash identifier: ru7i7qU8H/L3MiK6vyRr3K3dujYh9s5VXuiQpYl5mzc=
Subject key identifier: A5:D4:CD:5D:5A:4D:AA:5D:B1:E0:14:E9:57:58:8B:2A:45:66:BF:D3
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 0194C3E2C5ABBA32A583050166C29676946C
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/pdTNXVpNql2x4BTpV1iLKkVmv9M.roa
Signing time: Sat 01 Feb 2025 23:40:06 +0000
ROA not before: Sat 01 Feb 2025 23:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.159.13.0/24 maxlen: 24
45.159.15.0/24 maxlen: 24
91.246.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:e2:c5:ab:ba:32:a5:83:05:01:66:c2:96:76:94:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Feb 1 23:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5d4cd5d5a4daa5db1e014e957588b2a4566bfd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:24:12:47:8a:d3:02:ab:bf:8e:f9:4f:1d:65:
3b:28:5d:95:0b:dc:76:c0:2c:63:9b:8f:f5:3b:3f:
fe:c0:ca:39:d4:7b:9d:8d:08:0c:ab:80:17:31:20:
0b:85:fc:7d:f3:c9:71:6e:dd:77:34:d6:b9:b1:c8:
c0:11:c6:46:6e:17:64:06:b7:43:bd:5c:7d:99:e3:
90:2a:5a:af:84:59:de:45:9a:f7:cc:e4:dd:8e:11:
cd:59:cc:c0:d6:7c:f7:3c:7e:ed:a8:56:b9:2b:15:
c7:ba:5f:cf:90:34:28:08:5e:71:a3:16:cc:42:89:
31:2e:14:51:35:34:69:2a:35:1e:50:c7:5b:1a:3c:
22:7a:30:28:1a:49:16:90:b2:ea:2b:9d:88:f0:e3:
0e:32:2f:c3:5e:08:0d:0a:c6:fb:6a:0c:de:5f:5a:
48:09:f3:c9:30:5d:aa:96:50:2c:c9:64:58:53:78:
d5:93:d9:ac:aa:67:af:b5:76:a5:bd:5c:37:32:a3:
9d:67:37:fd:8d:d8:f1:3a:18:b8:27:a3:49:77:82:
e6:81:ec:5e:01:24:f9:73:73:d2:0b:1e:6d:29:ab:
67:2c:ea:8f:f2:c7:d6:9e:0e:f3:6d:6b:2f:e7:9b:
e9:6d:03:9e:b8:4f:97:e5:49:b9:7b:67:94:49:c3:
39:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D4:CD:5D:5A:4D:AA:5D:B1:E0:14:E9:57:58:8B:2A:45:66:BF:D3
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/pdTNXVpNql2x4BTpV1iLKkVmv9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.13.0/24
45.159.15.0/24
91.246.55.0/24
Signature Algorithm: sha256WithRSAEncryption
91:f6:95:3e:d1:6b:b5:e3:94:82:51:0c:a2:c5:49:ba:63:63:
b6:cc:35:68:a0:8a:a4:16:ea:e0:de:bc:fd:90:86:cc:18:e2:
0a:e0:e7:7d:b5:6a:f8:63:b1:2c:b7:9a:6e:cc:d2:90:3d:31:
2d:60:b6:e2:38:54:d9:45:8e:0f:39:04:a1:77:22:f4:72:15:
d7:09:fc:7c:0d:9b:f0:82:38:7c:a1:97:60:5b:be:e3:69:99:
97:2c:18:49:e2:e8:c4:69:f1:cd:b8:88:4b:f9:7c:91:c9:6d:
b3:ec:bc:30:d9:91:bd:65:83:70:a0:2c:64:3d:09:64:67:fe:
71:1a:eb:c5:9b:fc:77:23:4e:a1:22:a4:87:d5:3b:ef:39:5c:
39:be:be:d6:2b:d4:52:15:9b:8b:80:4c:d1:ac:c9:8e:ad:4a:
4a:e9:0c:9a:5e:c6:f5:e9:d1:4c:f6:c7:f2:10:cb:90:28:52:
3b:0c:17:51:7b:5e:21:7b:74:e5:6e:89:3e:03:5a:0a:3c:5a:
2d:fd:ce:fe:18:7f:f8:fd:8a:59:f2:cf:df:f9:b5:75:f9:e6:
7f:6c:93:4d:ee:f6:8d:2a:67:84:8d:17:0f:59:49:4c:64:e0:
8c:64:1f:20:a1:68:16:cb:27:1d:b6:af:3d:21:36:52:1a:35:
02:d1:f3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:01:09 2025 by rpki-client