Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/9YFs85YsKGTIVDBM56breEqVtxA.roa
File: 9YFs85YsKGTIVDBM56breEqVtxA.roa (raw, json)
Hash identifier: qqV3B5vzjjlBmuMS8CdNVBF1exlyNiMWJZdCD+80Tlg=
Subject key identifier: F5:81:6C:F3:96:2C:28:64:C8:54:30:4C:E7:A6:EB:78:4A:95:B7:10
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 0195441CF2EB3EA0156445126029A8042954
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/9YFs85YsKGTIVDBM56breEqVtxA.roa
Signing time: Wed 26 Feb 2025 21:15:02 +0000
ROA not before: Wed 26 Feb 2025 21:15:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208046
IP address blocks: 45.129.13.0/24 maxlen: 24
45.142.192.0/24 maxlen: 24
45.148.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:44:1c:f2:eb:3e:a0:15:64:45:12:60:29:a8:04:29:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Feb 26 21:15:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5816cf3962c2864c854304ce7a6eb784a95b710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:64:e4:ee:47:aa:e6:45:fa:f5:62:29:3d:9a:
f4:64:12:96:a7:bb:01:a7:cd:58:01:38:da:f8:3f:
8a:97:97:81:c1:5d:7e:7c:f7:a5:eb:c7:c4:6a:26:
e7:75:a6:94:06:e4:aa:8b:f7:b9:66:f5:54:86:50:
55:8f:64:16:d2:e2:af:5e:9b:5d:39:6d:94:ae:e5:
b2:62:3b:ed:c8:e9:b8:cc:ac:68:55:27:3a:7d:4f:
d9:92:de:05:c7:7e:1a:9f:66:60:9c:0d:44:33:c8:
e5:c2:f7:d2:16:35:7c:32:61:36:aa:45:68:32:fc:
08:b8:2d:f8:6d:97:c2:ca:8f:cc:81:3b:ea:bb:e6:
ef:6b:1a:fa:24:e4:f6:b4:f6:a4:e2:5c:d4:18:84:
de:0b:27:63:a7:70:54:c4:bb:20:7d:f2:64:51:83:
ac:ff:b8:e8:82:88:6a:a2:67:dc:d5:97:1b:28:0d:
43:b7:ba:d1:cf:75:89:b6:62:85:f6:73:cb:b1:af:
2d:15:4d:ea:fe:61:41:c3:40:fd:8d:e2:90:45:e6:
a0:53:71:f5:ee:a5:dc:c0:e5:ae:6d:48:fc:a4:8c:
33:70:c2:a8:e4:11:37:d5:67:6c:cb:7f:2f:0c:9b:
63:84:b9:48:a8:8e:5a:4d:de:ff:ac:30:a4:23:fd:
14:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:81:6C:F3:96:2C:28:64:C8:54:30:4C:E7:A6:EB:78:4A:95:B7:10
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/9YFs85YsKGTIVDBM56breEqVtxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.13.0/24
45.142.192.0/24
45.148.11.0/24
Signature Algorithm: sha256WithRSAEncryption
00:5d:29:18:e4:57:3a:e9:c1:0b:df:15:17:ba:64:a4:af:5b:
c5:58:89:da:1c:84:d2:a9:18:00:1d:f0:34:e9:6f:04:79:ba:
36:a8:ea:17:c3:48:e6:9f:13:f3:5a:71:94:4c:e9:92:eb:4e:
e0:e4:90:1b:fb:8a:70:7f:a6:6a:03:63:0a:73:8e:82:7e:a3:
f6:40:ba:93:07:1c:73:9b:d2:2f:11:1c:85:59:4e:2b:22:8d:
c4:ca:88:cd:20:02:7f:e5:73:ef:57:85:ed:1b:23:8c:dd:c3:
5d:20:8e:48:2e:2b:20:4a:78:d7:df:e4:59:4a:a6:21:e3:d9:
f6:e1:f1:b6:99:e4:f7:e0:98:d3:07:bc:30:96:04:2f:01:0a:
8b:8b:47:b5:b0:53:22:b4:5b:fb:61:4c:1f:0d:91:15:a2:b2:
dd:19:27:16:ee:73:39:1e:af:df:1f:62:03:5c:1e:44:e6:08:
bd:6e:d1:06:50:5a:af:d2:d6:16:31:9d:8d:a3:d3:8e:c1:8d:
0e:33:fc:5c:e2:49:6d:15:06:a2:a2:b3:0e:05:76:19:08:f0:
21:23:41:a7:7f:c9:90:26:06:33:0a:cb:61:81:9e:fb:bf:dd:
62:bf:26:32:c1:26:b1:f1:d0:6a:24:5c:94:fe:3b:ba:42:b3:
91:af:83:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:03 2025 by rpki-client