Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/XOgRPDn4EAwuDOtKWrXwVLKxYbQ.roa
File: XOgRPDn4EAwuDOtKWrXwVLKxYbQ.roa (raw, json)
Hash identifier: 49AORPQzSmZAZLgFWXR4a6bM5aE+rKu1rS5QrLIREg4=
Subject key identifier: 5C:E8:11:3C:39:F8:10:0C:2E:0C:EB:4A:5A:B5:F0:54:B2:B1:61:B4
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 0194228E0794A9A97BBC69C6499EFB354ACF
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/XOgRPDn4EAwuDOtKWrXwVLKxYbQ.roa
Signing time: Wed 01 Jan 2025 15:48:40 +0000
ROA not before: Wed 01 Jan 2025 15:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44766
IP address blocks: 92.45.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:07:94:a9:a9:7b:bc:69:c6:49:9e:fb:35:4a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 15:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ce8113c39f8100c2e0ceb4a5ab5f054b2b161b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:de:a8:f9:53:20:3e:81:80:ce:b2:db:af:1d:
e9:7a:07:ab:62:33:88:0d:0f:ac:e8:5d:53:f5:3b:
2d:f4:e5:d2:89:bc:8a:49:84:85:c9:57:d8:e7:20:
00:9c:18:f6:15:55:ac:fe:e4:ff:13:ca:73:b6:ee:
1f:50:77:c8:6b:33:c0:a4:4f:06:19:e4:71:d0:db:
45:50:2f:a4:81:2b:0a:e0:8e:53:45:2c:ab:f9:0b:
f2:74:16:3d:4c:01:46:7d:2f:b1:6f:18:5c:22:35:
4a:d7:48:36:eb:b1:8f:5e:82:fd:dc:69:7a:47:09:
70:d9:fc:74:6a:96:53:a1:30:df:92:65:26:53:36:
75:7c:00:4c:9e:79:91:28:35:19:59:45:50:3a:2f:
8e:2c:73:3a:e5:d4:e9:99:33:d6:fb:3c:63:82:34:
ad:e2:bf:70:7c:19:74:c2:71:ee:8a:a8:a7:47:72:
da:8b:49:bb:5c:25:65:cd:64:f7:69:2e:83:7d:ae:
87:c5:cc:11:f6:5c:53:76:9a:ff:cf:4a:7c:03:7b:
ad:fd:0e:0a:63:dc:d8:52:e8:0e:cb:af:59:af:b2:
32:6d:f0:4f:c9:c9:7a:e9:6c:c2:fe:6b:e4:ac:0f:
41:7a:84:00:73:90:b4:76:2f:03:83:d7:40:4a:4d:
9e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E8:11:3C:39:F8:10:0C:2E:0C:EB:4A:5A:B5:F0:54:B2:B1:61:B4
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/XOgRPDn4EAwuDOtKWrXwVLKxYbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.45.1.0/24
Signature Algorithm: sha256WithRSAEncryption
72:96:51:6f:33:14:de:18:85:e4:10:e5:3f:2a:7c:62:7d:c4:
34:c9:f8:82:4b:de:df:18:56:ed:9a:2f:64:f3:a2:52:25:31:
b2:29:84:a8:5f:9c:09:10:4d:67:1b:e5:d3:ce:bb:bf:96:9e:
fc:d4:6d:a2:65:52:77:83:c1:ee:31:30:36:39:1e:70:f6:5d:
9c:3e:2d:da:09:2a:d5:32:7d:3f:80:33:e6:a4:07:fb:2e:91:
da:33:68:bd:bc:b6:55:63:ed:2b:23:be:75:38:05:9f:81:b0:
04:43:b3:a7:dd:c9:ba:92:5a:e0:fe:ba:a4:0e:a7:81:0f:5e:
71:23:d4:d7:6c:74:7f:e3:96:51:2d:6b:b4:a5:c2:09:68:1f:
4f:80:83:68:4f:57:95:b5:4e:dd:f5:c5:20:60:52:54:fb:c3:
5a:aa:af:38:cd:c4:6a:dd:8a:b6:39:07:84:50:b1:77:fe:92:
23:b6:85:46:da:f3:90:0a:3d:94:32:13:41:04:83:67:72:91:
ac:8c:ba:48:00:d6:dc:50:a9:4f:38:9d:ef:02:00:b1:b1:8f:
9c:48:5f:94:25:99:38:2f:5b:cb:d7:a0:9b:ef:2b:9e:b7:5a:
c7:4a:9b:30:6a:6d:57:dc:f1:cf:7f:c2:88:ab:88:9c:24:59:
b3:1e:57:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:43:44 2025 by rpki-client