Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Q5ZejpP0JRQ-Ko8DP6Dd5vT7MF8.roa
File: Q5ZejpP0JRQ-Ko8DP6Dd5vT7MF8.roa (raw, json)
Hash identifier: X6QeYeRl3xWQD414DdvCr6venOIndeYitHk2VeQ8E0U=
Subject key identifier: 43:96:5E:8E:93:F4:25:14:3E:2A:8F:03:3F:A0:DD:E6:F4:FB:30:5F
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5DAB00503E882EC7297BFCBB29F52
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Q5ZejpP0JRQ-Ko8DP6Dd5vT7MF8.roa
Signing time: Wed 01 Jan 2025 07:47:53 +0000
ROA not before: Wed 01 Jan 2025 07:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201211
IP address blocks: 45.147.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:da:b0:05:03:e8:82:ec:72:97:bf:cb:b2:9f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43965e8e93f425143e2a8f033fa0dde6f4fb305f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8f:33:63:c7:68:73:bf:1c:74:60:ac:05:0f:
37:ec:13:78:4d:6d:1d:01:5b:98:dd:49:36:4b:7b:
4f:df:43:38:1f:89:6b:7b:52:c5:22:cd:26:1d:8a:
1f:31:6d:8d:0a:61:c7:b9:8b:2a:cc:d7:61:ce:d3:
b8:1f:cd:e4:1f:a8:21:01:c5:18:40:72:bb:73:0b:
db:4d:53:08:c5:94:81:6c:ed:1a:e5:58:bb:d2:1e:
c3:97:97:02:4f:b2:50:ae:d8:2e:10:fe:28:15:5c:
8b:3c:11:4d:d5:d8:9e:f9:84:02:c5:55:ac:70:cc:
41:9a:56:88:fa:a4:84:85:d1:1f:a5:ba:ed:68:4d:
44:04:3e:4d:cb:ff:99:0b:ab:71:81:c5:66:47:9c:
59:13:e4:07:95:8e:25:39:28:84:bc:58:36:1a:d0:
1d:0a:07:07:ff:05:fe:74:bd:61:a6:cc:f8:39:61:
39:e7:f1:18:26:0f:5d:1f:7f:94:0d:56:e2:41:41:
f0:b8:af:48:da:4a:6b:5a:9f:5f:95:8a:1b:99:76:
86:f9:4b:9f:57:2c:f5:bb:40:1b:76:f5:ef:68:ea:
8e:65:b5:e7:49:72:3d:ff:c2:93:08:47:2c:e7:6d:
f2:35:64:2b:9e:92:eb:fb:e7:cd:20:7e:ac:4c:79:
46:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:96:5E:8E:93:F4:25:14:3E:2A:8F:03:3F:A0:DD:E6:F4:FB:30:5F
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Q5ZejpP0JRQ-Ko8DP6Dd5vT7MF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.2.0/24
Signature Algorithm: sha256WithRSAEncryption
81:40:0b:9d:cd:e1:48:58:65:c1:13:10:fb:e0:3f:25:71:15:
0b:7a:6e:62:3c:78:4a:be:15:65:3a:5c:4b:f7:69:b1:1a:38:
e2:f5:fe:fe:17:32:02:f9:34:ac:59:be:ab:f3:63:03:f7:d7:
c4:ed:72:10:6a:48:99:80:33:17:31:18:83:e0:04:d4:82:56:
07:ad:16:4d:fe:0e:f0:16:4e:e4:04:a6:f9:bb:90:6e:c2:44:
d8:66:2f:ca:5f:f7:dc:0a:1e:1b:fe:50:30:2d:39:fa:75:99:
13:cd:d6:c8:96:c8:cc:ce:a7:76:09:e3:ba:fd:72:08:cb:2d:
76:c4:d9:39:8e:49:eb:0b:4c:a1:5a:7c:0a:f8:db:98:ad:48:
a3:c7:5f:5a:00:98:88:c6:ed:36:f7:12:d2:2c:d9:15:04:dd:
f1:68:40:27:4d:38:08:fb:0f:0e:4d:03:46:db:c9:26:b5:e3:
63:a1:28:a3:5c:fb:11:cb:33:2c:51:83:63:50:3d:d4:9d:2a:
29:e4:1e:68:68:94:6c:24:38:47:2b:ca:20:26:23:d1:6e:30:
c0:04:6d:d8:88:43:b1:de:7e:43:35:39:a2:0c:db:92:07:37:
38:04:57:33:14:dc:0d:d0:54:eb:f0:28:ef:7c:8c:d3:e7:cb:
67:6c:fc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:53:18 2025 by rpki-client