Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/SURf7PCqvWoIa7zkJQidqcRcECg.roa
File: SURf7PCqvWoIa7zkJQidqcRcECg.roa (raw, json)
Hash identifier: s3AKwYZwkDvcyHArrGNRqobsTcwBzjd0jER/XAbhZfQ=
Subject key identifier: 49:44:5F:EC:F0:AA:BD:6A:08:6B:BC:E4:25:08:9D:A9:C4:5C:10:28
Certificate issuer: /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Certificate serial: 01942826E42C060F14B803B5C417C3CB7648
Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/SURf7PCqvWoIa7zkJQidqcRcECg.roa
Signing time: Thu 02 Jan 2025 17:53:44 +0000
ROA not before: Thu 02 Jan 2025 17:53:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42651
IP address blocks: 45.88.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:e4:2c:06:0f:14:b8:03:b5:c4:17:c3:cb:76:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Validity
Not Before: Jan 2 17:53:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49445fecf0aabd6a086bbce425089da9c45c1028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:48:e5:7f:e6:9f:49:2b:8d:87:11:f9:0c:20:
3f:c3:2e:8f:6b:b3:5d:d4:31:fc:b9:17:98:cb:89:
2a:80:80:8c:23:34:82:32:d0:21:c4:86:5a:b0:42:
d9:39:56:ff:42:73:e6:8b:74:00:4e:64:da:79:3e:
83:f3:63:e0:d3:f5:72:72:73:5d:38:f2:7d:5b:e7:
61:85:9c:83:65:6d:4f:82:fc:53:d3:25:27:8c:2c:
e5:44:71:d1:f0:0d:ca:84:2e:50:66:45:2d:0c:e0:
62:0d:1f:08:69:eb:e4:81:2e:eb:5d:9d:71:3f:5e:
99:6e:8f:49:87:68:78:11:a3:e5:10:c7:a3:87:f1:
fa:9e:b2:a1:d8:49:b6:6d:2e:be:3c:bb:64:08:5d:
c2:de:6c:de:a7:03:8b:54:e7:b4:d3:ec:96:77:de:
f4:1d:7f:17:69:98:5c:b8:bf:7f:0e:dc:9f:20:d4:
f4:df:48:42:5d:0d:b6:8f:08:7f:af:b7:d2:45:45:
cd:d6:ca:8a:e8:72:16:5e:28:a1:a2:e4:cc:60:e3:
ba:55:e8:19:df:b1:30:11:4d:91:9b:67:a2:03:e0:
bf:29:fe:38:a9:2c:18:3f:27:78:b8:38:77:b7:9b:
90:16:75:a4:65:11:c6:3f:1c:c2:44:46:ce:5f:16:
4a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:44:5F:EC:F0:AA:BD:6A:08:6B:BC:E4:25:08:9D:A9:C4:5C:10:28
X509v3 Authority Key Identifier:
keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/SURf7PCqvWoIa7zkJQidqcRcECg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.203.0/24
Signature Algorithm: sha256WithRSAEncryption
56:6b:39:99:c1:c0:fd:dd:e2:c7:de:df:2a:7a:76:72:f5:4c:
90:f0:92:21:93:7e:67:91:cf:7d:a7:58:95:d5:d9:dd:5f:65:
38:c9:e1:58:6c:90:74:ab:e2:6f:a2:6a:e2:96:97:85:5e:bd:
b1:f7:4f:ac:a4:89:5e:56:b0:78:91:ee:21:05:d7:ef:a1:4e:
d6:f7:fc:dc:f7:c0:6b:61:46:f1:f0:d6:c9:5d:a9:82:fd:5c:
2a:dc:9d:26:87:e4:02:0d:4c:11:4e:90:25:d0:13:15:dd:88:
b3:86:07:32:b1:6a:ef:eb:00:cc:52:34:36:65:11:18:70:41:
7e:85:df:de:c5:2d:81:53:1f:64:2f:81:db:06:eb:db:2b:17:
6f:a6:df:14:56:e3:bd:09:27:e7:08:81:03:6b:39:06:be:bc:
ea:6f:f5:31:6c:f4:2b:89:aa:ef:74:8e:e4:6b:16:2e:76:d4:
1d:04:e0:bc:79:05:2f:30:78:a5:76:1a:1a:3b:82:11:39:32:
a2:c7:4a:9d:18:2f:d7:70:0f:86:7f:5c:c8:2f:ab:6c:88:f3:
8b:13:78:ab:5a:2b:a1:ea:73:c8:ff:4c:94:59:2b:d8:2b:3f:
a8:cd:ec:3c:60:c8:c0:6f:d8:d9:58:c1:67:c8:de:40:e2:7b:
31:91:c5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:52 2025 by rpki-client