Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/hvDxWczJSCD1N66X4dBRt3gG1t8.roa
File: hvDxWczJSCD1N66X4dBRt3gG1t8.roa (raw, json)
Hash identifier: MPSonopmIFoV4IaEMBT6BZbRxseta+ksAG7ucEI2WUU=
Subject key identifier: 86:F0:F1:59:CC:C9:48:20:F5:37:AE:97:E1:D0:51:B7:78:06:D6:DF
Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial: 019423D728D1E61D9E210A25A06EBD54F26A
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/hvDxWczJSCD1N66X4dBRt3gG1t8.roa
Signing time: Wed 01 Jan 2025 21:48:10 +0000
ROA not before: Wed 01 Jan 2025 21:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203105
IP address blocks: 45.92.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:28:d1:e6:1d:9e:21:0a:25:a0:6e:bd:54:f2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
Validity
Not Before: Jan 1 21:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86f0f159ccc94820f537ae97e1d051b77806d6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b9:18:df:51:57:b7:56:fc:85:bb:b9:4b:68:
bf:8b:21:79:8a:c0:f1:2f:f7:a7:a6:b3:3b:95:30:
13:77:5a:61:70:af:56:d3:d8:b8:5a:71:ef:6e:86:
48:d7:51:90:c3:24:6f:61:9a:19:57:90:d1:15:d5:
b0:86:e1:f6:ca:48:74:3a:19:65:37:5a:4a:b6:86:
36:39:28:15:4e:94:60:82:9e:c7:e2:1d:b2:98:40:
80:c4:84:87:4e:19:71:ec:6a:a4:ac:c6:21:5e:8f:
04:98:e8:52:c5:f8:97:dd:ae:b0:4c:f7:34:0b:45:
b8:56:0b:f8:c3:b9:53:60:d1:eb:5a:c7:04:48:cc:
a7:28:62:e6:db:ce:f3:5f:ef:e9:42:a6:4c:4e:9e:
26:82:c5:f7:24:82:30:01:16:c7:51:19:ed:a8:ce:
55:b1:d9:2c:d0:98:77:fa:ff:3a:b8:42:3d:ef:18:
57:3e:3e:22:e4:21:37:e7:ff:96:47:d0:bc:2d:34:
a1:bb:2b:56:68:a0:ac:e7:3a:cc:23:af:b5:3e:c8:
17:ab:ae:83:f1:02:6b:35:8e:b3:bd:f2:97:8c:32:
8c:18:1b:13:d4:30:24:e9:a4:9a:33:93:df:97:29:
73:52:4a:04:10:e5:75:18:c7:92:34:85:b4:35:17:
4b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F0:F1:59:CC:C9:48:20:F5:37:AE:97:E1:D0:51:B7:78:06:D6:DF
X509v3 Authority Key Identifier:
keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/hvDxWczJSCD1N66X4dBRt3gG1t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.42.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:e2:c9:ab:5e:dd:51:91:c1:de:d7:5e:ff:93:35:76:82:d6:
8b:28:e2:cc:b3:9a:83:01:74:b7:67:d9:c7:b5:70:da:34:18:
71:86:3c:0c:8f:bb:14:10:a6:1e:0f:28:a1:33:a3:2c:5d:ce:
48:00:e0:ee:0a:2f:31:6f:d0:47:df:e1:c1:cd:23:7e:1c:25:
c0:0e:1e:d7:3b:b8:e5:d2:fb:dd:46:f6:7a:2c:3a:8e:4e:f4:
1d:e4:27:38:45:12:62:d7:9e:fd:1a:54:df:90:a6:3b:09:bc:
79:50:c6:7a:47:f4:a4:d1:7f:e3:82:d7:7d:b3:5a:db:47:3a:
d1:ec:7e:ea:fd:a8:bb:54:89:e3:89:8b:e1:11:b4:43:fe:61:
8a:91:44:8f:67:3d:88:15:66:3e:fe:4a:2b:8e:50:db:81:38:
a3:9f:a0:d5:82:50:94:e3:16:d2:70:f3:43:12:23:65:c4:a5:
42:1d:29:04:ca:72:8c:4e:f8:94:43:be:15:16:cb:2b:40:05:
e0:a9:02:c8:b3:fb:9c:df:5a:14:2f:e3:8d:26:fe:7d:2a:3c:
a0:13:58:c3:bd:5a:78:c6:e0:11:6a:81:aa:3e:a2:91:6b:2c:
18:b4:f5:00:2a:81:06:9d:02:3e:bf:49:10:8b:23:1f:34:92:
c2:da:b0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:40:18 2025 by rpki-client