Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/IaJWwry61YD9Mf1_BYUlS40t1sU.roa
File: IaJWwry61YD9Mf1_BYUlS40t1sU.roa (raw, json)
Hash identifier: 53vBwMw6zrNcLn2Azc0dY5jiAOn5YwtMj0v9pEwAjko=
Subject key identifier: 21:A2:56:C2:BC:BA:D5:80:FD:31:FD:7F:05:85:25:4B:8D:2D:D6:C5
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01942823981A19E0A6E312B8CEEDE81CBF24
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/IaJWwry61YD9Mf1_BYUlS40t1sU.roa
Signing time: Thu 02 Jan 2025 17:50:08 +0000
ROA not before: Thu 02 Jan 2025 17:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212384
IP address blocks: 45.11.188.0/24 maxlen: 24
188.209.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:98:1a:19:e0:a6:e3:12:b8:ce:ed:e8:1c:bf:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 2 17:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21a256c2bcbad580fd31fd7f0585254b8d2dd6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d3:a7:66:f6:fd:4f:aa:6d:c8:47:76:60:b5:
8a:bf:79:76:e6:15:9f:54:2e:a7:75:30:a5:65:39:
dd:b7:a0:cf:51:66:c3:f1:6d:3e:0c:ea:a7:78:03:
87:87:7c:01:8f:c3:e4:1f:f3:3e:3c:21:c2:3f:ae:
1e:e8:cf:52:54:c1:71:32:0d:7b:b1:97:5f:62:d3:
ca:6b:40:d6:bc:53:52:cf:f7:29:9a:13:a0:19:01:
05:37:f0:d8:56:d6:89:85:33:63:2d:cb:ac:c0:4d:
21:e3:de:28:57:7f:07:cc:20:cb:98:6e:63:d1:51:
96:7a:be:d8:1b:b6:76:1e:59:74:08:6b:9a:6b:96:
aa:70:ce:c8:79:63:5f:c8:90:50:14:19:2d:55:62:
8c:6b:59:75:da:2f:0c:e0:2d:f8:96:6c:c1:5a:39:
fe:dc:27:f6:62:b3:d5:3b:23:e3:e2:5d:ab:44:71:
be:94:70:c9:10:63:96:6f:92:aa:16:f3:2a:39:eb:
1f:22:27:7a:1e:1f:78:b8:7f:41:d4:da:75:be:6b:
b0:93:4b:e4:3e:75:9c:b3:61:2d:a8:d5:de:f2:92:
3c:4c:b1:75:ea:a4:fa:8d:0f:60:ff:51:0b:65:a8:
47:3e:eb:94:bd:0b:cf:75:ab:5b:68:20:65:c2:eb:
0b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A2:56:C2:BC:BA:D5:80:FD:31:FD:7F:05:85:25:4B:8D:2D:D6:C5
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/IaJWwry61YD9Mf1_BYUlS40t1sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.188.0/24
188.209.138.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e3:32:ba:29:ab:34:b0:42:08:a8:7c:02:43:ff:55:ef:ba:
de:14:3a:89:bd:e9:f1:c1:28:6a:50:3f:fb:c1:f5:1a:1d:4c:
80:a2:27:b3:51:3a:84:4a:c7:75:9e:dc:60:63:af:ac:ac:a7:
e8:00:ca:6e:8f:51:bf:a8:82:94:60:36:a1:c3:62:42:b0:a2:
40:7d:f9:c1:e4:00:38:ea:8d:eb:f9:74:29:d1:eb:f7:1e:34:
b4:ea:71:70:a5:68:c3:c9:00:58:96:db:b5:83:8f:70:3c:15:
b8:a8:7b:ea:15:18:d8:7e:c3:f2:f6:a9:c0:de:fe:21:2f:e5:
f9:96:d1:36:d8:d2:74:21:df:b1:a8:4d:b3:a9:35:a6:53:82:
9a:ed:10:f8:e1:5e:d4:c6:80:bc:1a:0a:9b:ea:35:78:bd:44:
c7:16:9f:a2:b3:db:d0:0a:26:83:47:62:8d:4a:ef:9c:17:93:
cc:01:9b:3d:b5:60:07:21:50:63:39:48:67:37:52:c7:c0:23:
99:6b:ab:42:d0:15:23:37:f5:1b:c1:78:6d:a3:84:65:d0:4b:
b0:62:b4:0d:79:91:d8:fb:b3:98:c3:b4:44:12:56:4b:72:30:
ec:d4:f0:e0:d2:e1:8f:6c:99:a8:fe:eb:18:8a:a3:6c:3b:d5:
c5:61:43:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:47 2025 by rpki-client