Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/t1LshJm8xEx-87XbFhNq7UZM0do.roa
File: t1LshJm8xEx-87XbFhNq7UZM0do.roa (raw, json)
Hash identifier: qxpyfe2Q7y0I+2bbmEdIUUqvN7x6u3MnxvZPf3Uv5NQ=
Subject key identifier: B7:52:EC:84:99:BC:C4:4C:7E:F3:B5:DB:16:13:6A:ED:46:4C:D1:DA
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 01941FFA652A535E192A23DCC9EFD9138861
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/t1LshJm8xEx-87XbFhNq7UZM0do.roa
Signing time: Wed 01 Jan 2025 03:48:11 +0000
ROA not before: Wed 01 Jan 2025 03:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47583
IP address blocks: 45.145.184.0/22 maxlen: 24
193.202.44.0/23 maxlen: 24
194.55.132.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:65:2a:53:5e:19:2a:23:dc:c9:ef:d9:13:88:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jan 1 03:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b752ec8499bcc44c7ef3b5db16136aed464cd1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:8a:33:cf:84:ce:bb:72:3e:2b:95:a9:9c:
ab:91:01:eb:d7:be:b7:92:6e:b7:e6:73:0e:a7:7a:
a4:88:05:f2:75:a6:83:1a:2a:f4:f0:80:3e:b2:9b:
05:9d:b3:d9:93:2a:bd:50:04:e2:c8:b9:77:5b:d5:
ff:6d:10:b4:f5:f7:c5:bb:91:99:10:6a:b5:7c:9c:
3f:e0:fa:f5:68:26:8d:46:ba:16:3a:4f:d4:23:57:
4e:1d:9b:75:c0:4b:63:d9:d3:4c:87:b5:40:34:ce:
5d:42:07:f8:18:29:d2:36:76:8f:24:06:f6:d1:e7:
41:9c:e4:0f:1d:70:18:62:5c:0c:82:ea:7e:1a:20:
bf:8a:69:44:cd:ea:36:c1:aa:3f:98:63:a6:5d:5b:
97:73:bf:3c:65:e9:58:9a:fa:c5:53:05:83:d1:b2:
fc:e1:c5:4f:e1:c0:80:54:31:c3:d8:8f:f4:da:6b:
ce:90:ed:dc:24:ac:1e:52:a8:c7:a4:a2:06:db:16:
24:6c:97:07:03:05:ca:5a:e8:44:44:f7:6c:3c:a6:
6e:c7:53:98:ff:99:7f:d4:78:77:c6:62:25:96:bb:
4a:b8:27:1c:ed:fb:1a:2a:55:6c:75:81:65:95:51:
66:f5:15:95:2b:7a:93:47:88:59:fb:cf:a5:36:b3:
89:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:52:EC:84:99:BC:C4:4C:7E:F3:B5:DB:16:13:6A:ED:46:4C:D1:DA
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/t1LshJm8xEx-87XbFhNq7UZM0do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.184.0/22
193.202.44.0/23
194.55.132.0/23
Signature Algorithm: sha256WithRSAEncryption
32:eb:62:a4:0d:e0:bd:1f:d6:5e:87:d8:85:22:4e:27:00:b0:
2f:e3:73:67:e0:90:7b:8d:1f:cd:f9:55:2c:1a:14:d3:88:ea:
b6:ce:c1:c0:a0:56:39:5e:b1:f5:97:74:8f:4c:47:8d:d9:b1:
c3:45:1a:9f:47:94:86:83:08:48:f5:dc:57:42:31:b9:3f:18:
53:8d:37:d6:6b:87:c3:45:09:83:2c:32:06:62:59:a3:13:b5:
90:68:a0:be:8a:18:72:6f:1f:2c:7d:15:2e:a2:16:3a:28:43:
33:4a:cf:9a:fb:22:fd:0e:1d:06:e8:98:74:7e:26:9b:f0:78:
1a:8c:98:f9:18:89:60:1c:14:db:86:73:c4:79:05:e3:82:57:
8b:fc:b3:93:f2:79:e3:50:bc:9d:7a:59:14:e6:25:e7:ae:26:
3a:23:57:d6:ae:54:99:73:ac:77:47:65:e3:1d:68:27:1e:62:
a4:fc:50:0f:f6:c5:08:2f:e8:ea:bc:43:78:23:69:28:1e:7c:
2e:06:87:07:43:ea:68:f7:60:bf:68:b8:51:7e:b1:1d:14:01:
9c:7d:9f:d3:30:1e:86:4d:9b:31:b2:fc:b3:45:e7:67:85:ab:
c9:b2:c7:29:1e:05:e7:d4:63:75:a5:95:1a:37:c7:e6:a2:b1:
76:44:d1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:21 2025 by rpki-client