Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/Uexs1zzgiaghvn8QlRp2fS-muxo.roa
File: Uexs1zzgiaghvn8QlRp2fS-muxo.roa (raw, json)
Hash identifier: eUzdkFvHRg3RG7+EtLkiJ81FTX2Atw9YRMjQwx4FwHg=
Subject key identifier: 51:EC:6C:D7:3C:E0:89:A8:21:BE:7F:10:95:1A:76:7D:2F:A6:BB:1A
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0194CF61475647C00AA63CB0407FB95B7E7D
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/Uexs1zzgiaghvn8QlRp2fS-muxo.roa
Signing time: Tue 04 Feb 2025 05:14:06 +0000
ROA not before: Tue 04 Feb 2025 05:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212384
IP address blocks: 45.11.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cf:61:47:56:47:c0:0a:a6:3c:b0:40:7f:b9:5b:7e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Feb 4 05:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51ec6cd73ce089a821be7f10951a767d2fa6bb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:e6:32:ea:63:ee:3e:c7:8f:61:c1:88:88:
ea:07:8a:79:9d:5d:e5:2f:e4:b6:bb:e7:a8:3e:43:
e7:c8:8f:99:f3:55:cb:ce:25:9e:a6:b6:dd:a3:c3:
ce:9b:35:2d:48:00:87:fa:1d:d9:2a:e0:3c:82:a1:
11:64:cf:91:91:d8:8c:f6:40:63:0a:07:ec:c1:21:
ff:1f:86:0e:aa:b8:19:b6:77:cf:99:14:f6:cf:fc:
9c:a4:bf:ff:d8:e8:a6:95:7f:6d:91:85:81:82:b3:
3a:1a:4c:d8:73:6c:a5:d3:25:6f:1a:3a:45:fe:1c:
c3:7d:8a:f4:c3:db:25:c4:49:0e:dc:1f:de:e2:50:
1e:30:3e:6a:f8:46:34:2a:e1:a5:9e:6e:ec:fa:af:
95:de:4f:dc:9c:22:70:2e:00:fd:f1:2a:c7:b6:67:
92:47:f4:63:90:18:94:8c:98:b7:55:a5:f2:10:9c:
2c:9b:d0:2d:bd:f3:7d:35:c0:15:29:aa:bc:e5:e4:
47:28:88:d6:7e:71:d5:26:68:59:9d:9a:7f:aa:e4:
53:7c:ee:67:5c:8e:d1:91:84:ec:1b:96:ec:84:99:
7a:b2:d5:3e:05:a6:4f:d3:86:6b:f3:fd:08:79:d2:
00:46:67:b5:85:75:13:0a:49:79:49:5e:13:0d:a8:
89:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EC:6C:D7:3C:E0:89:A8:21:BE:7F:10:95:1A:76:7D:2F:A6:BB:1A
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/Uexs1zzgiaghvn8QlRp2fS-muxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.188.0/24
Signature Algorithm: sha256WithRSAEncryption
57:d3:5a:ff:5e:a7:f4:c6:00:d6:93:ce:aa:f3:4e:80:21:b1:
13:52:c0:42:ea:a8:07:20:88:34:30:48:60:02:29:5c:5a:8d:
dd:96:50:5d:1b:79:45:21:47:77:e0:63:f1:2c:48:48:8e:d5:
77:70:c6:76:06:eb:82:d3:29:1e:ba:3c:f3:38:ac:42:5e:98:
ca:3c:2d:88:47:94:55:89:3f:6e:89:0f:3a:89:3a:b7:e0:c6:
a6:c9:bf:f9:8c:4b:f7:d9:b4:98:77:22:54:31:71:6d:e3:6a:
37:2b:12:73:f6:7e:64:7d:3e:20:09:b0:cd:50:13:44:ee:12:
12:dc:f4:e9:7a:f9:99:df:61:7d:15:f6:3e:d2:f8:10:30:20:
f0:92:bf:51:cd:9b:7c:63:07:1f:e6:1f:5d:d7:bb:19:15:8e:
c1:be:0c:dc:7f:60:4a:5d:d7:9d:62:8c:8b:d3:e9:14:78:c9:
71:3a:94:ba:69:a5:bd:4a:fe:8f:76:58:9d:ec:24:51:05:c4:
e1:a2:33:e2:ef:be:d8:eb:4a:41:18:17:78:1c:7a:64:25:48:
21:4a:ea:fe:ed:43:d6:0a:e1:2c:cd:7d:9f:c9:89:66:18:70:
04:c4:70:19:d7:f2:9c:74:dd:60:ed:11:9a:4e:d8:45:6a:0d:
9c:c0:30:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:56:15 2025 by rpki-client