Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/oICpP-Q_PLyVnvdAV2VhmetD0KU.roa
File: oICpP-Q_PLyVnvdAV2VhmetD0KU.roa (raw, json)
Hash identifier: m1kg9eS0Gm6DACbj0bQUXbsWOvls/kNIhGkM6VQRNuo=
Subject key identifier: A0:80:A9:3F:E4:3F:3C:BC:95:9E:F7:40:57:65:61:99:EB:43:D0:A5
Certificate issuer: /CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Certificate serial: 0194236905C698BB68A1BE227AC4A2737CFD
Authority key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/oICpP-Q_PLyVnvdAV2VhmetD0KU.roa
Signing time: Wed 01 Jan 2025 19:47:52 +0000
ROA not before: Wed 01 Jan 2025 19:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8412
IP address blocks: 45.12.96.0/23 maxlen: 24
45.12.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:05:c6:98:bb:68:a1:be:22:7a:c4:a2:73:7c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Validity
Not Before: Jan 1 19:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a080a93fe43f3cbc959ef74057656199eb43d0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3d:28:c3:85:36:2a:db:60:63:19:60:c7:ea:
28:5a:5d:18:d5:94:8d:91:32:e0:91:fd:6a:09:83:
af:e7:64:1b:6a:81:c9:18:a9:52:35:87:7b:8f:3d:
f9:f7:c2:e8:cb:89:e6:1a:e4:90:3f:33:da:45:84:
71:cb:8b:d7:88:2a:96:54:bf:52:e1:33:3b:51:24:
f7:d8:04:fc:17:ff:6c:47:02:af:ec:d3:eb:c4:e5:
97:7c:0d:ff:88:cb:f3:d2:93:b1:6b:75:48:17:b3:
0d:4f:b9:48:ff:f4:75:67:e6:64:e0:b2:1f:7f:bc:
71:ac:08:5c:70:de:96:d7:41:15:ac:1f:c1:6a:10:
0f:09:5e:d7:8e:9a:33:5d:4c:38:22:a2:9c:18:b5:
46:95:c4:f5:c9:49:6c:15:9b:d6:7f:19:12:a8:11:
0e:c9:3e:b7:3d:f5:77:b6:ca:b6:a9:6b:d2:d7:d9:
ca:84:6e:f8:3d:d0:fd:07:18:a3:7c:08:65:1f:e0:
06:56:f4:cb:76:6c:08:83:d8:08:ae:fe:61:cc:18:
ac:b9:f5:72:4b:be:53:70:be:23:1e:2c:84:1e:9a:
87:77:a4:0d:20:79:35:73:8f:d5:1a:02:eb:4d:20:
7f:dd:28:46:a5:1a:6c:d6:fc:7a:a3:4f:b2:32:89:
da:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:80:A9:3F:E4:3F:3C:BC:95:9E:F7:40:57:65:61:99:EB:43:D0:A5
X509v3 Authority Key Identifier:
keyid:81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/oICpP-Q_PLyVnvdAV2VhmetD0KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.96.0-45.12.98.255
Signature Algorithm: sha256WithRSAEncryption
9c:2b:9c:f2:74:04:00:b7:f6:11:45:19:70:5d:b0:a6:bc:ce:
b2:cf:b4:31:2c:34:3b:7e:ed:c9:3b:81:73:24:7a:bd:b8:4b:
4c:ea:ae:7a:5f:38:e6:11:8f:d2:12:21:2f:ef:22:61:88:b8:
0e:7a:09:84:60:d0:99:bf:7f:02:d4:ac:8e:c0:05:18:db:3b:
89:75:47:49:81:5c:30:14:a3:77:b4:87:62:71:ae:13:8a:39:
55:bb:2f:e5:c5:14:80:58:88:1a:0e:7f:12:ef:d7:d4:81:ff:
a3:67:c0:fd:45:d2:35:79:3b:81:3d:85:13:64:cb:fc:c2:5b:
e9:e1:22:cb:c7:d8:89:05:52:d9:ed:36:a1:12:a2:4b:9a:a2:
39:9d:7d:36:bf:1d:f8:2d:fc:f0:5d:a4:20:9f:79:90:6c:ee:
00:87:dc:49:b2:1c:2d:3e:93:df:bc:cb:18:ef:50:d2:46:c1:
30:82:39:22:cd:c2:c7:08:a6:b6:4d:d3:b8:8a:d2:d0:29:9c:
12:86:40:ae:b2:5a:8b:eb:0a:57:63:3f:13:53:2c:27:d2:84:
b2:a3:61:8f:b9:6f:e6:04:25:5d:49:a2:cb:d7:fb:21:5d:2b:
1f:ce:0f:fc:af:14:5d:63:ef:15:32:71:9b:75:06:d0:a4:55:
23:7a:a3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:46 2025 by rpki-client