Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/I_q4haHSQ5-iSHbhiDxn8LO10n0.roa
File: I_q4haHSQ5-iSHbhiDxn8LO10n0.roa (raw, json)
Hash identifier: rR8MdnfYv9DYhofCAQL44jv965jNwY7cLv2/tA4Lg2A=
Subject key identifier: 23:FA:B8:85:A1:D2:43:9F:A2:48:76:E1:88:3C:67:F0:B3:B5:D2:7D
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 019421B246BE7FD713E0945FDCE9EE9125F6
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/I_q4haHSQ5-iSHbhiDxn8LO10n0.roa
Signing time: Wed 01 Jan 2025 11:48:39 +0000
ROA not before: Wed 01 Jan 2025 11:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43967
IP address blocks: 45.159.100.0/22 maxlen: 24
195.158.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:46:be:7f:d7:13:e0:94:5f:dc:e9:ee:91:25:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Jan 1 11:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23fab885a1d2439fa24876e1883c67f0b3b5d27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:67:80:3a:f5:a9:eb:7c:0f:82:10:20:61:fd:
8b:c9:be:60:81:74:ca:69:f0:36:67:e0:1a:7d:c1:
c4:76:53:69:ec:b8:dc:7a:dc:e4:0d:3a:d1:54:ca:
39:86:d6:00:69:4b:c6:18:36:cf:47:0b:f8:a7:0a:
13:f5:5a:ab:70:9f:e9:a2:0f:99:a3:c8:57:24:28:
f8:08:de:ff:f9:b9:4f:cb:b3:df:8e:a5:52:1d:a5:
64:de:09:e5:83:70:69:cb:73:8f:58:e2:82:92:53:
1d:55:07:aa:3b:ab:38:49:42:73:0f:db:6f:f3:71:
8a:a9:94:21:c5:45:79:21:bf:45:87:73:a7:8b:bd:
de:0d:1e:55:53:be:5f:b8:80:41:6b:f7:e1:ec:3d:
22:64:fc:8b:6d:da:50:03:4a:55:8f:24:f6:a0:f9:
67:ec:23:05:cc:7a:c2:6e:4c:98:f9:e5:de:ca:6f:
e9:4a:2c:4f:61:15:9e:2a:26:18:7f:0e:7b:6e:53:
db:76:90:e7:b5:16:c0:5c:07:90:95:06:f9:57:6a:
bc:f1:69:37:af:c7:96:9d:1f:df:94:96:96:19:39:
1e:b9:9e:1c:7a:1e:d7:14:26:34:32:8f:ec:39:e7:
69:9d:ff:47:71:d5:b4:af:6e:ee:bf:a3:1d:3c:a7:
5f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FA:B8:85:A1:D2:43:9F:A2:48:76:E1:88:3C:67:F0:B3:B5:D2:7D
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/I_q4haHSQ5-iSHbhiDxn8LO10n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.100.0/22
195.158.196.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:36:cc:e1:fd:bd:9e:dd:cd:a9:a5:b5:9c:f6:6e:8d:19:ad:
19:98:f2:55:80:ef:d5:5e:25:d7:10:35:f9:63:d0:ed:13:23:
1b:23:87:14:ab:a9:d9:7c:08:b6:3d:dd:18:c4:ba:ac:90:c2:
87:26:a5:51:7d:52:a0:41:c8:e3:ea:42:fe:71:e6:1c:4f:ae:
d0:bc:34:90:5f:38:33:31:be:03:0c:a5:b2:63:0e:54:ae:e0:
8f:3e:e5:1a:dd:27:3f:45:2c:66:ae:c2:6d:f4:b3:e7:1f:17:
f9:a5:47:fd:b9:d6:61:06:49:49:4b:76:c0:37:32:ba:09:34:
1e:b7:4c:75:2d:44:bf:60:1b:c3:29:14:11:cc:1f:fd:43:5a:
83:52:21:4a:b9:af:47:f1:b7:d0:39:76:62:8f:c5:69:7a:31:
31:f9:4c:d9:39:9c:54:f4:4b:c5:fa:18:ae:24:32:8a:41:83:
43:1e:f5:58:27:4e:79:2a:b4:a3:50:00:55:13:72:39:a2:83:
34:24:69:27:d1:39:e6:7f:92:8d:cc:07:b7:62:fb:c7:60:4d:
44:d5:b4:4d:0c:4e:2b:a1:ef:65:3d:4e:0e:b9:1b:78:a5:20:
5b:76:6f:da:c4:03:c2:d8:c2:ef:8d:33:d5:2a:27:8b:c7:0e:
2f:e4:d4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:35 2025 by rpki-client