Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/iJgFNTZ7IhnRGcD9bd_FqPtqDEU.roa
File: iJgFNTZ7IhnRGcD9bd_FqPtqDEU.roa (raw, json)
Hash identifier: IcZI5thj3Qr91vjQiVj5vIexM3iUd5S8V76AbgBrsvg=
Subject key identifier: 88:98:05:35:36:7B:22:19:D1:19:C0:FD:6D:DF:C5:A8:FB:6A:0C:45
Certificate issuer: /CN=b56fa2bcfb1ba199d0a6597fb88954c0a6c512d5
Certificate serial: 01942143B884FCDFF7E16641B0BAA3A31E85
Authority key identifier: B5:6F:A2:BC:FB:1B:A1:99:D0:A6:59:7F:B8:89:54:C0:A6:C5:12:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/iJgFNTZ7IhnRGcD9bd_FqPtqDEU.roa
Signing time: Wed 01 Jan 2025 09:47:53 +0000
ROA not before: Wed 01 Jan 2025 09:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21769
IP address blocks: 45.11.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b8:84:fc:df:f7:e1:66:41:b0:ba:a3:a3:1e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56fa2bcfb1ba199d0a6597fb88954c0a6c512d5
Validity
Not Before: Jan 1 09:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88980535367b2219d119c0fd6ddfc5a8fb6a0c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ea:b7:e1:8f:55:d0:57:d8:ef:ad:66:12:72:
61:e7:b7:ec:07:5b:1f:13:34:d9:db:71:b3:d0:b4:
a7:8a:e5:8d:79:1d:97:15:ac:80:bd:d8:19:b7:6e:
6b:09:46:4f:a4:55:d1:d7:ae:7a:b6:44:ba:ff:e5:
54:6b:a8:b8:bd:7d:bc:15:72:b7:2d:5d:56:9c:96:
56:e3:6a:18:e6:6d:83:f3:ee:ae:d1:10:be:07:52:
e8:ae:20:7d:24:63:9f:ca:d8:c8:96:07:4a:37:aa:
59:f6:45:3b:4e:b3:9a:1f:08:a8:b1:48:de:0c:7e:
96:74:b6:80:db:f2:e6:89:9a:a2:40:0a:98:00:71:
3f:e1:1d:a3:c6:82:e1:87:d3:ef:1f:91:09:05:28:
e3:af:f2:d0:6a:a7:3b:b6:ec:a7:29:1d:97:d1:2c:
e5:52:f5:31:71:87:d5:84:50:49:3e:c1:80:86:b8:
b4:fa:63:ac:31:4c:2f:bb:cb:d2:37:56:bc:b0:10:
52:2f:a6:2f:17:33:a4:3f:18:ff:bc:05:78:31:bf:
97:04:7b:df:74:0e:48:f3:b8:60:57:06:01:7d:3d:
84:6d:c0:a4:28:39:0b:0f:f6:42:b6:e9:7f:2d:52:
01:be:cd:95:b7:eb:50:90:89:7f:48:41:c3:02:2d:
56:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:98:05:35:36:7B:22:19:D1:19:C0:FD:6D:DF:C5:A8:FB:6A:0C:45
X509v3 Authority Key Identifier:
keyid:B5:6F:A2:BC:FB:1B:A1:99:D0:A6:59:7F:B8:89:54:C0:A6:C5:12:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/iJgFNTZ7IhnRGcD9bd_FqPtqDEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.32.0/22
Signature Algorithm: sha256WithRSAEncryption
24:08:a4:6a:41:58:68:ee:34:5a:7b:0d:09:62:64:8f:c2:9e:
d0:9e:30:20:f6:cf:5e:6d:b7:78:bf:b7:19:64:ea:2e:2f:ed:
7d:5e:68:b5:09:a8:e6:99:06:5e:1d:e1:4d:49:84:52:9a:e6:
bb:be:e4:5b:a9:b3:f4:b8:b9:b9:52:1f:3f:ec:79:fe:bb:fe:
1a:30:50:bf:3a:a2:27:d5:3e:34:50:d9:f0:ae:5d:99:a4:df:
25:f1:02:f3:fe:5c:8d:84:ae:59:78:45:8f:52:91:29:bb:53:
43:45:21:c5:18:a5:49:c9:6a:c2:f8:00:40:97:2c:59:b5:e0:
19:49:3c:3d:d0:27:c2:4f:70:5e:57:72:c1:70:09:27:d8:8e:
f4:5b:54:b1:69:c2:df:10:84:cf:9b:ca:2e:5f:dd:4b:c7:c2:
7b:b5:c3:cf:4f:9b:fb:c0:e5:43:f5:cc:40:78:ad:80:3f:44:
b0:e6:b4:a5:16:37:25:06:af:db:50:8e:24:bc:f3:d5:f8:6d:
46:5b:2e:65:b7:3a:9a:1b:e3:32:30:c0:71:c2:ec:be:d5:5a:
47:f9:7b:33:ba:54:41:5b:dc:66:51:3f:8f:7b:bb:42:bd:30:
a8:2a:e0:d1:5d:6d:3d:0c:80:f6:c4:56:57:27:80:f2:b6:fb:
ef:2c:f0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:36:53 2025 by rpki-client