Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/4NZOxxQpw9-vftAouE5-WZVy-wE.roa
File: 4NZOxxQpw9-vftAouE5-WZVy-wE.roa (raw, json)
Hash identifier: 9mNdwkdj9WNmU7mdu/ic5ZW1LzZMwlo3m9ggGCIfqhc=
Subject key identifier: E0:D6:4E:C7:14:29:C3:DF:AF:7E:D0:28:B8:4E:7E:59:95:72:FB:01
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0194222026377C05315EF4E73B595A0E1867
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/4NZOxxQpw9-vftAouE5-WZVy-wE.roa
Signing time: Wed 01 Jan 2025 13:48:39 +0000
ROA not before: Wed 01 Jan 2025 13:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58299
IP address blocks: 45.11.248.0/24 maxlen: 24
45.11.249.0/24 maxlen: 24
45.11.250.0/24 maxlen: 24
45.11.251.0/24 maxlen: 24
2a0e:8f04::/32 maxlen: 48
2a0e:8f05::/32 maxlen: 48
2a0e:8f06::/32 maxlen: 48
2a0e:8f07::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:26:37:7c:05:31:5e:f4:e7:3b:59:5a:0e:18:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0d64ec71429c3dfaf7ed028b84e7e599572fb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:97:e1:03:9a:0e:d6:03:73:c9:11:ff:de:32:
fa:99:ff:63:46:79:10:2a:f5:da:21:07:0f:f7:9a:
b1:8a:da:2c:b3:0d:3f:84:36:3e:58:fd:3f:3f:97:
56:b2:7b:9b:61:a0:6b:8d:d5:bf:22:13:97:11:17:
6a:99:c3:b3:d8:db:4f:c6:e8:21:37:67:87:b2:22:
26:01:83:33:5c:d5:4b:8e:9d:4d:99:e7:bf:dd:37:
f1:c7:db:56:64:da:2d:c3:64:71:bd:dd:0f:ba:f8:
2d:ae:78:7a:2c:1b:61:b1:67:87:a7:be:d6:b8:78:
b7:59:83:5c:f0:81:2c:ac:d2:a9:53:56:dd:d8:72:
cd:73:e9:24:cb:d5:8b:2c:a9:2e:c1:1a:75:6a:00:
c6:97:a0:fb:d9:87:ed:b8:d8:38:4b:ac:1e:c8:35:
c1:15:fe:12:8d:9c:07:5d:fa:88:28:c4:38:3c:ab:
2c:04:31:d5:32:8f:c5:76:ca:f3:2f:1d:ea:93:11:
e0:c5:f9:0f:ee:c0:8f:9e:bc:8c:e3:ea:ba:75:da:
ec:85:1a:50:9f:70:3d:de:67:63:58:8d:54:2c:cb:
8a:8b:72:66:08:0c:e9:a5:ce:f2:20:99:9a:bf:08:
1f:0a:c5:9b:f5:88:96:dd:44:03:07:68:51:17:e4:
1e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D6:4E:C7:14:29:C3:DF:AF:7E:D0:28:B8:4E:7E:59:95:72:FB:01
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/4NZOxxQpw9-vftAouE5-WZVy-wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.248.0/22
IPv6:
2a0e:8f04::/30
Signature Algorithm: sha256WithRSAEncryption
87:dd:8a:0e:14:0b:f8:b6:0f:f1:2d:54:02:80:eb:ff:a7:2b:
aa:f7:3e:d4:32:f8:bb:1b:05:e9:d2:94:2b:9d:30:3d:fe:da:
f6:c5:ce:a1:6c:05:80:df:f7:e1:26:94:49:91:6f:44:9a:17:
91:33:e8:0a:55:63:a8:96:fc:c9:6e:e9:c5:35:9c:56:3b:0d:
db:35:c5:3b:b0:32:9e:a6:2a:52:88:b2:12:31:b0:8d:97:3d:
09:f1:62:67:83:4c:cc:34:6b:f5:5a:a1:56:44:4b:97:ec:d1:
37:f1:4d:c9:1f:72:79:4c:65:f3:f6:53:79:61:ef:96:61:a8:
a1:88:6e:67:79:e0:b5:33:cf:a2:f0:ea:24:e2:de:d4:bd:cc:
7b:71:c1:82:b7:c8:9e:03:0a:07:23:c5:b4:82:94:68:5e:de:
1c:18:64:b7:a6:03:0a:1b:7f:da:74:ce:d5:c2:e3:3e:de:e3:
44:d6:ef:a6:94:87:3c:79:8a:6c:ae:fe:b0:57:d3:49:2b:12:
fe:5c:63:4c:d0:91:69:08:72:e1:1f:87:e9:32:ba:d0:4c:e1:
1f:e5:70:3f:ad:8e:87:00:f6:83:a4:c3:0b:f1:8c:dc:54:fc:
c6:c2:e5:fd:08:9f:0d:c9:21:c3:f0:8f:49:e8:c3:d2:26:66:
67:5f:42:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:33 2025 by rpki-client