Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/pO3sjHr6a0aftr_c4hFnOCTpu-k.roa
File: pO3sjHr6a0aftr_c4hFnOCTpu-k.roa (raw, json)
Hash identifier: 0HEZ96PPuctS/ZloTVzx6CjdJPtvxwr82RYy3GTaOCE=
Subject key identifier: A4:ED:EC:8C:7A:FA:6B:46:9F:B6:BF:DC:E2:11:67:38:24:E9:BB:E9
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 0194221FA4073F06F7F8D31EA65F9F1170CD
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/pO3sjHr6a0aftr_c4hFnOCTpu-k.roa
Signing time: Wed 01 Jan 2025 13:48:06 +0000
ROA not before: Wed 01 Jan 2025 13:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396073
IP address blocks: 45.13.214.0/24 maxlen: 24
45.142.194.0/24 maxlen: 24
92.118.37.0/24 maxlen: 24
193.32.163.0/24 maxlen: 24
2a0c:9f00:a001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a4:07:3f:06:f7:f8:d3:1e:a6:5f:9f:11:70:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4edec8c7afa6b469fb6bfdce211673824e9bbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:30:e6:ba:b7:24:17:89:15:9a:c1:2c:a0:
b2:c7:57:92:37:fb:5e:ec:35:b1:75:86:e1:64:0d:
1c:e1:f0:c2:f4:d3:88:f1:cf:4d:41:7c:d7:ac:be:
a3:83:39:ee:7c:75:a2:f4:f6:db:5c:6c:31:23:75:
06:5c:15:2b:2f:ba:0d:10:a7:87:08:62:f2:4a:c6:
2b:b3:80:74:14:43:56:9c:a9:e4:1a:e5:2f:c9:31:
51:35:59:ed:3c:87:10:c8:ce:e3:a3:44:40:09:b7:
2d:ac:80:20:51:b2:55:51:71:c2:57:b7:4a:65:55:
aa:97:17:7f:2b:0f:3c:e8:cd:fe:8a:a1:18:fe:72:
4e:45:38:a5:32:f8:95:d5:90:06:96:67:91:46:49:
38:51:85:bd:76:74:c2:6b:91:23:08:50:c9:31:7f:
f3:d9:d7:b5:ef:59:de:71:4b:53:ef:1b:4c:2a:2c:
55:96:5f:95:9f:37:ff:13:de:78:d5:3a:45:f7:22:
45:af:c2:8e:be:86:b0:c9:48:82:58:51:4f:11:5c:
7c:ac:69:b7:bb:c7:93:33:86:74:40:d9:96:8e:70:
e3:45:e0:73:ad:ef:e0:51:67:67:ec:0a:64:e6:d0:
42:74:91:30:0d:92:12:4b:66:fd:ae:20:bb:a9:a4:
9f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:ED:EC:8C:7A:FA:6B:46:9F:B6:BF:DC:E2:11:67:38:24:E9:BB:E9
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/pO3sjHr6a0aftr_c4hFnOCTpu-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.214.0/24
45.142.194.0/24
92.118.37.0/24
193.32.163.0/24
IPv6:
2a0c:9f00:a001::/48
Signature Algorithm: sha256WithRSAEncryption
79:22:2d:27:a6:24:73:4d:f3:9b:2f:4a:4e:eb:88:4f:9e:c7:
3f:e8:49:64:33:09:b0:84:d5:1e:3f:d7:5a:de:7a:e8:38:fd:
1c:55:a6:59:8e:87:65:eb:4e:99:bf:c0:27:98:81:40:52:39:
d7:40:46:2b:15:f3:f1:ca:35:70:06:16:d0:bd:a6:bb:18:83:
2d:f9:9c:8b:b0:67:90:ff:1f:03:84:07:38:3d:d3:2c:e4:a6:
81:51:e8:0c:81:ef:53:76:86:94:77:25:1c:d1:f0:4c:8c:6c:
c5:b2:eb:be:cd:6c:66:7c:80:35:37:a5:e3:3f:44:36:68:e7:
36:80:49:81:88:e7:b8:40:ad:e6:41:93:84:25:11:9b:b1:11:
80:17:c8:db:c3:ef:6a:60:2f:88:bd:c2:04:f6:36:a0:ef:0b:
0e:d0:1a:21:b5:07:27:dc:cc:99:23:d5:d7:09:50:85:92:80:
dc:e9:94:d1:19:e6:05:da:21:dc:40:3d:bc:2f:9c:02:ef:81:
01:87:e0:d3:0c:3a:dd:8c:a6:64:7a:24:a9:13:e7:06:a5:2f:
e4:c0:d4:4c:a0:bd:83:42:80:95:b7:b3:ef:0c:10:d5:29:d0:
85:78:f4:16:53:7a:4d:8d:62:7d:a2:78:8d:4e:c8:1c:8b:04:
5f:b1:79:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:59 2025 by rpki-client