Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/O12INLiNztXvoDV4T-1o5vHU2ms.roa
File: O12INLiNztXvoDV4T-1o5vHU2ms.roa (raw, json)
Hash identifier: o8ErsYBeBV94K2dW/WAHliiXtNdIqzvPkuS0YuwKzFg=
Subject key identifier: 3B:5D:88:34:B8:8D:CE:D5:EF:A0:35:78:4F:ED:68:E6:F1:D4:DA:6B
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424452A314660D77B05557B54992F9150
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/O12INLiNztXvoDV4T-1o5vHU2ms.roa
Signing time: Wed 01 Jan 2025 23:48:20 +0000
ROA not before: Wed 01 Jan 2025 23:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 45.142.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:2a:31:46:60:d7:7b:05:55:7b:54:99:2f:91:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b5d8834b88dced5efa035784fed68e6f1d4da6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5a:89:a5:a3:9d:9f:ce:18:98:99:69:27:93:
51:e7:80:20:f2:ad:10:8a:c2:83:0d:ba:be:6d:6c:
2b:e6:32:c2:fc:95:2f:66:fa:52:c1:b3:78:32:f5:
bd:ba:ba:16:e0:b0:bc:cd:05:97:18:d7:8b:42:59:
c1:f0:ed:fd:c4:aa:73:c2:09:f6:5a:43:5d:fe:60:
3d:9c:ce:89:78:14:f5:4d:6b:a7:81:3f:5f:fc:99:
f2:bd:1d:dd:46:9c:c8:86:30:26:cf:a8:83:5d:ea:
90:d2:2c:44:3e:0d:88:d9:04:4c:4c:56:26:5f:2d:
f5:9e:92:32:18:55:a0:69:be:81:ed:21:09:b7:1d:
37:84:a1:62:72:7d:4a:2d:23:a9:ce:be:4e:75:f6:
6b:bb:dd:7b:d1:a6:a5:95:fb:bf:8c:d9:e6:f7:02:
85:7c:9b:0e:0f:7b:09:4f:90:69:a6:26:11:1b:f6:
7e:dc:b5:3a:25:b6:f5:47:f7:cc:b8:18:91:40:03:
fe:1f:85:f0:5e:9e:9c:e1:f5:ee:a8:e1:fe:e1:05:
01:a4:bc:9d:f2:4f:6a:b9:4f:4e:63:7a:0a:45:d0:
3e:67:60:b1:c8:fa:1d:53:89:e9:6e:46:5e:72:13:
21:46:8c:c3:4a:5f:13:15:38:6d:74:b2:e4:58:5e:
c6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5D:88:34:B8:8D:CE:D5:EF:A0:35:78:4F:ED:68:E6:F1:D4:DA:6B
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/O12INLiNztXvoDV4T-1o5vHU2ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.216.0/22
Signature Algorithm: sha256WithRSAEncryption
58:58:51:3c:e7:64:86:d3:58:8c:97:a9:22:15:a9:c7:ea:de:
e1:1c:81:6b:c9:84:25:49:f5:94:15:ad:27:31:f6:51:43:4f:
a1:78:f6:2e:de:17:fb:f6:58:30:a5:05:f7:59:91:ac:74:d6:
69:db:1d:a8:96:a6:88:1d:fe:76:3e:da:ef:a9:dd:95:23:49:
b6:54:7e:d8:73:b7:6a:08:5b:61:b0:2e:6e:5f:ec:cd:30:52:
47:15:ea:1a:40:94:ae:e7:67:8d:cf:47:f8:94:2c:07:37:54:
39:91:31:39:a2:54:5f:08:2c:d2:d7:6f:9a:2b:97:8a:3c:18:
37:6d:6c:be:e9:13:f7:4d:a6:83:c5:4b:26:7d:95:ee:46:27:
49:6e:30:e8:f1:c2:3e:ec:f4:36:6c:15:07:a6:3c:bc:9d:e6:
05:04:bc:97:db:8d:43:7f:05:5b:7c:f6:c8:b6:d6:9d:62:fa:
a1:ce:1b:44:55:ca:78:ff:36:b2:18:87:cf:63:80:c3:4d:1b:
38:02:38:2b:27:6c:f0:44:5d:64:7b:eb:43:23:ce:94:45:94:
52:a0:e7:e8:eb:14:1c:4d:8b:e7:e0:6a:3e:c8:6a:85:a0:42:
73:24:de:2d:ab:50:ee:07:d7:31:49:7a:4c:f9:f7:88:c0:be:
38:0e:1c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:37:54 2025 by rpki-client