Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/l-3uYfhx9BmwykU1uIY6Tqs7OJ4.roa
File: l-3uYfhx9BmwykU1uIY6Tqs7OJ4.roa (raw, json)
Hash identifier: C4koxa5FZhZcxiBqcwXcE5OqEfD0Qas5uHXCce8tcsY=
Subject key identifier: 97:ED:EE:61:F8:71:F4:19:B0:CA:45:35:B8:86:3A:4E:AB:3B:38:9E
Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial: 01856FA718AA1936D6D501ECA57EFCBBE074
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/l-3uYfhx9BmwykU1uIY6Tqs7OJ4.roa
Signing time: Sun 01 Jan 2023 23:24:59 +0000
ROA not before: Sun 01 Jan 2023 23:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200325
IP address blocks: 45.92.42.0/24 maxlen: 24
2a0e:1cc0:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:18:aa:19:36:d6:d5:01:ec:a5:7e:fc:bb:e0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
Validity
Not Before: Jan 1 23:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97edee61f871f419b0ca4535b8863a4eab3b389e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0b:b2:78:e8:f4:d6:e4:14:7e:76:a7:27:73:
d8:90:b3:d0:f6:ff:0c:cf:dd:eb:35:48:66:e0:da:
75:ee:95:ce:3f:4f:5f:ca:83:04:2b:84:f4:b0:88:
13:c9:7e:6f:49:0d:cd:58:1e:26:28:82:19:87:0b:
f4:6d:22:3c:d3:56:66:8c:66:23:41:16:da:77:f4:
5d:77:09:7b:e1:fd:07:6b:7b:22:e9:7d:86:6f:fd:
4b:d1:af:0f:46:75:9e:03:25:0f:de:7c:66:1d:fd:
5b:fa:75:ec:1e:1e:56:28:5e:a5:84:9d:d4:b5:20:
cd:50:0a:a0:40:b5:2d:b0:3a:c7:6f:47:35:4d:b8:
98:20:d9:53:1c:31:68:48:50:26:ce:0f:79:9b:71:
68:ee:0f:cb:68:6f:83:5f:55:d0:1c:1d:5f:43:ce:
62:c7:38:f0:24:05:67:63:7c:fa:33:49:aa:62:c2:
b4:09:f9:21:0d:d0:9f:02:7a:c2:c0:e2:31:95:b3:
63:d5:c7:d6:e1:b8:4c:26:aa:a9:83:26:30:c4:55:
22:a9:a1:5c:6b:be:fe:2e:3b:0f:5b:66:29:c2:5f:
db:f0:46:6d:59:5e:1d:88:7d:0b:1d:17:f3:fa:68:
c7:18:68:4d:7e:c3:07:a5:0e:db:3c:60:6c:a8:35:
33:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:ED:EE:61:F8:71:F4:19:B0:CA:45:35:B8:86:3A:4E:AB:3B:38:9E
X509v3 Authority Key Identifier:
keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/l-3uYfhx9BmwykU1uIY6Tqs7OJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.42.0/24
IPv6:
2a0e:1cc0:4::/48
Signature Algorithm: sha256WithRSAEncryption
05:ea:19:28:08:22:6e:14:05:f5:a5:ea:aa:97:36:de:6c:58:
63:65:08:d9:8e:98:a3:c8:b2:d9:90:67:b7:f4:bb:fb:05:0a:
8e:ae:5f:26:e8:bb:36:bf:e5:25:65:b8:e7:e3:0f:d3:c2:f2:
48:fc:45:d0:ec:ce:74:1a:1c:72:0c:ce:09:df:e6:c7:7d:cb:
0e:13:1e:83:ba:29:61:cd:b7:90:65:63:83:7a:8d:cd:cb:72:
76:be:32:f8:be:c4:e5:40:ac:ba:36:4a:a0:26:78:5b:2a:d6:
08:90:17:38:e6:45:d8:52:d5:8d:e9:0a:bc:43:fa:cd:c0:b0:
6e:38:a6:a3:34:b4:6b:4e:89:da:1d:53:c0:95:45:75:28:a3:
ce:3d:1c:8c:03:c2:86:3c:80:ec:77:ce:08:fc:78:7c:45:a0:
80:e5:5b:85:be:12:81:f6:9e:29:eb:b5:ac:88:c8:5b:8f:7c:
62:e8:fe:21:f3:55:85:53:f8:da:c6:fb:a8:54:42:4a:59:17:
a5:a5:0c:10:3f:1b:71:a0:61:83:fa:1c:7f:69:b6:24:c4:d4:
f6:52:3a:87:4e:18:b2:f4:86:8f:98:a5:87:dd:f2:77:6d:2c:
5f:9e:3b:1f:08:3a:c2:16:b3:4e:6c:7c:7f:c2:1f:5d:2d:bf:
26:a3:25:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:44:44 2025 by rpki-client