Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2a5623-f5c6-4315-8b7b-25f9336f9c77/1/R56HJpdVI1gy17C3u5y3vgc0buI.roa
File: R56HJpdVI1gy17C3u5y3vgc0buI.roa (raw, json)
Hash identifier: idIhRYmlwQ1Xd4JmOFplOlaXwbjX5KEHMik6IXXCHDM=
Subject key identifier: 47:9E:87:26:97:55:23:58:32:D7:B0:B7:BB:9C:B7:BE:07:34:6E:E2
Certificate issuer: /CN=119109f0ef595ea8b68586483dbc6fb3cfe56f2b
Certificate serial: 018964C05E14F263B6DB2F1DF203A2547AD1
Authority key identifier: 11:91:09:F0:EF:59:5E:A8:B6:85:86:48:3D:BC:6F:B3:CF:E5:6F:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EZEJ8O9ZXqi2hYZIPbxvs8_lbys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2a5623-f5c6-4315-8b7b-25f9336f9c77/1/R56HJpdVI1gy17C3u5y3vgc0buI.roa
Signing time: Mon 17 Jul 2023 16:47:55 +0000
ROA not before: Mon 17 Jul 2023 16:47:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 45.11.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:5e:14:f2:63:b6:db:2f:1d:f2:03:a2:54:7a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=119109f0ef595ea8b68586483dbc6fb3cfe56f2b
Validity
Not Before: Jul 17 16:47:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=479e87269755235832d7b0b7bb9cb7be07346ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d2:95:7f:3c:12:f0:13:e5:e7:97:d2:77:c1:
4f:a7:9b:b3:92:fd:78:52:4e:86:59:82:9a:d3:78:
cf:57:6f:a9:a6:81:95:04:a7:b4:2d:9c:11:4d:ed:
87:60:97:9e:ec:db:80:fb:b4:5d:ae:56:a8:d9:35:
0c:a7:e6:c9:98:58:4c:fe:51:60:0c:6a:70:e4:5e:
43:60:b1:00:b6:91:25:90:69:1e:ca:5c:63:01:77:
d6:21:4c:83:64:e6:59:3b:bc:19:b8:57:34:e4:c3:
45:a6:29:a5:63:14:19:73:ef:cf:9f:c8:b7:49:f2:
42:9f:75:7c:e9:8a:b0:23:f0:1a:4b:d0:bb:62:be:
8d:b6:6e:cc:ec:5d:30:8b:b5:21:77:f3:ef:ca:2e:
73:64:15:30:b2:83:8f:b4:ef:ad:37:bf:9b:51:d6:
fc:f6:09:c0:d2:2e:71:16:c9:d6:a8:cf:a8:a2:1d:
17:8b:ee:f5:5c:f7:42:f7:4d:19:20:c5:d7:68:64:
40:bf:32:05:ba:4c:66:1f:36:b6:b6:c6:ca:31:0e:
19:8a:8d:db:94:e8:1f:90:21:1c:43:45:ba:46:d7:
72:5c:e8:7b:78:02:9b:14:9b:c5:70:4f:c4:42:35:
dd:cd:4f:32:3c:fe:f5:9e:bf:b9:17:44:ae:a7:b3:
60:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9E:87:26:97:55:23:58:32:D7:B0:B7:BB:9C:B7:BE:07:34:6E:E2
X509v3 Authority Key Identifier:
keyid:11:91:09:F0:EF:59:5E:A8:B6:85:86:48:3D:BC:6F:B3:CF:E5:6F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EZEJ8O9ZXqi2hYZIPbxvs8_lbys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2a5623-f5c6-4315-8b7b-25f9336f9c77/1/R56HJpdVI1gy17C3u5y3vgc0buI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2a5623-f5c6-4315-8b7b-25f9336f9c77/1/EZEJ8O9ZXqi2hYZIPbxvs8_lbys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.196.0/24
Signature Algorithm: sha256WithRSAEncryption
90:20:b0:0b:a5:2e:27:16:24:ae:74:c9:fc:32:ae:76:31:02:
69:a4:2b:d1:24:95:6a:60:6f:06:85:89:2a:3a:1a:7b:1f:03:
39:a7:03:5a:32:98:95:29:19:d2:7c:0e:11:a3:74:a4:33:02:
0c:4f:13:0b:72:e2:72:f0:5f:6f:f2:a5:b0:6c:aa:95:ba:0b:
f6:44:19:95:55:2c:bc:d5:1b:26:62:d3:bd:8f:af:0c:58:90:
0f:76:51:4d:58:ad:63:74:5f:f0:1c:e0:8c:af:1a:43:c8:a6:
94:b3:fc:1c:63:36:c8:df:40:99:ac:b9:34:7e:1e:27:b7:73:
09:c5:9c:c6:3f:63:cb:8b:64:17:18:3d:7f:34:ec:7b:78:ce:
79:9b:50:41:a2:51:3a:c3:39:f4:49:1b:42:c7:58:18:89:98:
01:a3:b2:3a:46:53:e8:31:45:77:23:69:dd:12:c7:09:77:55:
bb:7a:df:3c:67:e3:df:ac:1d:05:53:72:36:83:14:ac:9e:d7:
85:e1:1f:e4:87:eb:f6:f5:2d:b1:4a:7b:37:93:46:d6:bf:20:
6a:a9:c9:be:bf:73:5e:a3:18:e3:98:16:32:c3:76:e4:64:40:
ff:17:98:ac:1b:56:df:f2:dd:2e:03:25:ff:8f:e5:85:9b:4f:
63:8f:61:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:32:04 2025 by rpki-client