Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/653fc6-6f78-45f4-a4dc-f04dd817cbf9/1/si5v-0IpPdDov5cDNtRJiV616_Y.roa
File: si5v-0IpPdDov5cDNtRJiV616_Y.roa (raw, json)
Hash identifier: DGCdknIJtsShLbGtErd2Gyf+7uZBYy3Kj1ErdnqNtl4=
Subject key identifier: B2:2E:6F:FB:42:29:3D:D0:E8:BF:97:03:36:D4:49:89:5E:B5:EB:F6
Certificate issuer: /CN=33f35fc2b5d49828c26e07ca629c012cc1120ab6
Certificate serial: 019428279BA1AC2F6C6B347BD2E4006D43EB
Authority key identifier: 33:F3:5F:C2:B5:D4:98:28:C2:6E:07:CA:62:9C:01:2C:C1:12:0A:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_NfwrXUmCjCbgfKYpwBLMESCrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/653fc6-6f78-45f4-a4dc-f04dd817cbf9/1/si5v-0IpPdDov5cDNtRJiV616_Y.roa
Signing time: Thu 02 Jan 2025 17:54:31 +0000
ROA not before: Thu 02 Jan 2025 17:54:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200845
IP address blocks: 45.93.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:9b:a1:ac:2f:6c:6b:34:7b:d2:e4:00:6d:43:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f35fc2b5d49828c26e07ca629c012cc1120ab6
Validity
Not Before: Jan 2 17:54:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b22e6ffb42293dd0e8bf970336d449895eb5ebf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:bb:45:eb:bd:8d:70:8b:86:f9:a3:85:81:e0:
06:47:c1:cb:c1:67:07:e0:96:6c:39:fd:d2:c8:78:
21:01:e5:7f:97:4e:49:8f:91:28:ae:20:cc:85:ac:
da:65:de:bf:67:48:17:59:77:8a:75:a7:fd:54:2f:
34:9c:5c:48:09:09:0b:d0:d9:ec:10:55:de:62:de:
ff:5d:85:35:a4:1b:9e:f5:85:80:33:9e:e7:f7:a8:
3d:d8:a2:c3:aa:33:1f:1e:c9:39:3f:6b:68:e3:29:
37:cb:b3:4f:e9:b0:89:ba:74:7c:fd:da:b3:b5:ff:
0b:54:90:6b:a7:7c:63:37:df:07:b4:b9:ff:42:21:
27:4c:7d:c3:1b:5d:32:d1:79:cf:0c:b2:3d:7d:5e:
1c:bb:5f:98:8d:51:00:72:c7:4a:31:02:6c:0e:c7:
a7:f1:03:ad:dd:9a:7e:cb:40:a4:89:32:5c:bf:5b:
d0:cc:6c:91:36:26:c3:97:f4:90:eb:0f:34:b2:3a:
57:bd:b2:b0:96:c8:8b:45:5d:14:c2:be:f7:4c:1b:
3c:73:4c:2a:f7:ab:cd:2d:7e:74:b1:c5:0f:76:84:
14:25:16:68:f3:ff:02:84:3c:87:f6:23:fc:eb:86:
84:f2:b1:9f:18:e5:be:3f:97:df:d3:ee:19:ad:3e:
2a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2E:6F:FB:42:29:3D:D0:E8:BF:97:03:36:D4:49:89:5E:B5:EB:F6
X509v3 Authority Key Identifier:
keyid:33:F3:5F:C2:B5:D4:98:28:C2:6E:07:CA:62:9C:01:2C:C1:12:0A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_NfwrXUmCjCbgfKYpwBLMESCrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/653fc6-6f78-45f4-a4dc-f04dd817cbf9/1/si5v-0IpPdDov5cDNtRJiV616_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/653fc6-6f78-45f4-a4dc-f04dd817cbf9/1/M_NfwrXUmCjCbgfKYpwBLMESCrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.180.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:d0:e4:70:64:75:df:74:59:ca:60:5e:28:26:a7:7f:77:a2:
60:4e:b0:f5:26:a3:c7:0a:76:d9:6c:7b:cf:ee:c3:04:42:55:
e4:62:76:39:50:91:de:2f:cc:53:02:28:eb:13:df:61:b8:fb:
92:dd:39:5d:c0:69:d0:d0:03:9f:b4:e8:5b:5f:50:93:56:c1:
61:3e:da:7e:89:9f:7a:53:76:e5:63:d4:3a:a1:d2:d7:33:6f:
1c:d1:50:99:87:1c:5f:f0:b9:1c:e9:c5:3d:08:b8:94:b4:ee:
98:84:92:ac:35:8a:2b:88:42:48:cd:74:1e:19:02:16:d5:4b:
3c:a6:22:03:6c:75:b0:ea:ef:21:05:73:52:17:4b:dd:47:e6:
b1:12:08:95:a6:a4:93:36:02:8b:00:77:1c:15:49:9c:9c:51:
ad:6d:dd:32:86:b7:51:03:0c:26:6c:9c:03:d6:2c:2b:d0:53:
2b:9a:ca:a8:a4:b4:5a:2e:d9:e0:bb:ca:83:cf:a2:6d:b0:b9:
23:55:31:67:0e:c7:4f:e6:29:5c:0b:95:2f:40:d7:63:b3:93:
14:f9:af:83:67:b2:dd:2f:3a:cc:9c:e5:5b:4d:9d:76:56:a9:
1b:8f:c4:59:4b:54:ec:fd:bd:67:10:73:b9:f4:3a:a3:94:7e:
b8:6a:86:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:44:13 2025 by rpki-client