Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pPVDDAqhq0dc-rNGyTQ0ymoXW-k.roa
File: pPVDDAqhq0dc-rNGyTQ0ymoXW-k.roa (raw, json)
Hash identifier: 7rSf1Na9x3nXZyeZ0NG6OCUPfXRA9pGA3XvKAuYROUo=
Subject key identifier: A4:F5:43:0C:0A:A1:AB:47:5C:FA:B3:46:C9:34:34:CA:6A:17:5B:E9
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01942444957C616155B71AA3D323C0C83501
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pPVDDAqhq0dc-rNGyTQ0ymoXW-k.roa
Signing time: Wed 01 Jan 2025 23:47:41 +0000
ROA not before: Wed 01 Jan 2025 23:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62805
IP address blocks: 45.87.165.0/24 maxlen: 24
45.87.166.0/24 maxlen: 24
45.87.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:95:7c:61:61:55:b7:1a:a3:d3:23:c0:c8:35:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4f5430c0aa1ab475cfab346c93434ca6a175be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8e:aa:2a:2e:cd:36:fe:2b:2e:21:82:49:e8:
10:55:85:ba:ee:bb:cf:ad:b9:cd:fc:2b:3c:9b:8f:
d7:24:c6:66:d8:38:29:76:dc:71:fa:3c:ee:c0:9b:
d4:11:83:e1:23:6d:2e:be:62:80:47:4e:cd:77:0b:
2a:7a:31:c1:32:93:16:ac:04:f4:de:83:e0:9e:c9:
ed:79:12:fc:fe:5c:f4:f4:5f:eb:7c:8a:ff:c1:2f:
87:8f:e8:a0:a5:dc:d2:67:3d:b2:7d:3f:3c:b1:12:
ce:27:14:fc:e5:4c:f1:74:0a:b9:38:fc:62:04:9b:
a3:fa:cc:a3:37:fc:52:1c:db:1c:8a:06:be:49:b5:
9b:66:25:3d:6e:44:32:ee:2c:2e:65:ad:79:c6:81:
f2:6a:9a:f9:49:76:08:ba:03:bc:5e:88:0c:e1:b4:
4e:ee:16:c1:78:c1:c3:40:57:a1:6b:ed:6d:5d:30:
02:e5:a0:33:f4:d9:3b:a7:b2:68:4c:fb:99:be:99:
5b:22:07:66:3a:88:28:42:ce:4f:d5:6f:5d:4d:02:
a5:45:86:5c:8c:c5:ec:44:71:c6:a4:c3:09:f9:1e:
0e:81:e7:76:37:fd:52:30:c7:19:85:d1:9d:46:34:
73:e8:4d:b8:89:ad:eb:a2:03:fc:5f:37:e2:66:dd:
73:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F5:43:0C:0A:A1:AB:47:5C:FA:B3:46:C9:34:34:CA:6A:17:5B:E9
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pPVDDAqhq0dc-rNGyTQ0ymoXW-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.165.0-45.87.167.255
Signature Algorithm: sha256WithRSAEncryption
1a:e6:e2:7d:ec:82:27:c6:26:68:af:27:55:34:06:c0:8d:ed:
2f:3e:f1:49:0e:6f:de:0b:ef:ca:7d:93:16:61:1f:39:32:3e:
dc:8e:b0:35:68:13:08:99:53:19:03:69:fa:c4:2b:d0:c4:ea:
2e:37:e2:63:19:b1:82:01:32:d2:b9:e4:3f:5f:1f:fe:aa:ae:
ae:7e:c9:e6:24:5d:f5:97:60:da:73:71:4f:25:cc:66:b9:24:
bf:d6:d8:a2:aa:3e:82:c8:2d:91:6c:8b:da:45:fa:11:ff:91:
c9:ec:ec:30:96:ff:3d:43:7d:0c:e6:d4:8a:9e:84:03:5a:4b:
27:2f:7a:47:fa:ed:36:e9:d4:89:e5:49:e0:81:d3:c5:78:9a:
07:81:62:05:e0:07:96:e7:43:59:a9:ad:22:6a:0c:32:cf:f1:
f9:aa:e4:32:f4:26:c8:5d:3e:49:3d:e8:a8:86:13:58:fe:66:
33:d2:de:1d:1b:38:df:74:93:45:02:a5:0e:84:e2:2e:ad:af:
e5:6f:c9:25:df:c6:df:20:69:c4:c6:69:26:3a:3c:df:75:a4:
9f:a7:4e:6e:74:6c:cd:0e:84:bb:83:8a:7e:07:35:ed:9b:9a:
d7:3e:75:11:82:06:26:ca:8c:37:e2:30:90:65:28:3a:c8:02:
fa:b1:a6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:17 2025 by rpki-client