Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/gr0cSL9Z20uNppJqsYayd8a1gu4.roa
File: gr0cSL9Z20uNppJqsYayd8a1gu4.roa (raw, json)
Hash identifier: wqIhk/QGRclb/eyqHZ1XVvBzFk7hoCkYPXEVOlH8doQ=
Subject key identifier: 82:BD:1C:48:BF:59:DB:4B:8D:A6:92:6A:B1:86:B2:77:C6:B5:82:EE
Certificate issuer: /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial: 019423D71F38C408AF76BA9A057C9D77D787
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/gr0cSL9Z20uNppJqsYayd8a1gu4.roa
Signing time: Wed 01 Jan 2025 21:48:08 +0000
ROA not before: Wed 01 Jan 2025 21:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208456
IP address blocks: 45.95.56.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1f:38:c4:08:af:76:ba:9a:05:7c:9d:77:d7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Validity
Not Before: Jan 1 21:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82bd1c48bf59db4b8da6926ab186b277c6b582ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:1c:05:73:8e:6c:ad:5b:1d:be:21:0a:5a:
b6:fb:ba:4a:c6:5c:02:d6:56:78:86:1e:ad:ec:73:
93:ee:da:2e:2b:b3:df:fe:8a:13:5a:a9:ac:7e:41:
b0:1a:c6:a3:f6:7f:ef:7b:81:09:09:1f:8c:ba:21:
39:2b:6d:f6:fd:5c:98:d9:00:b2:8b:e6:69:6a:8e:
f3:da:22:29:96:ac:02:fd:e8:1d:5f:20:d0:fb:f1:
2d:78:a0:23:19:84:ef:ba:3f:13:80:74:96:29:79:
94:1c:11:20:9d:45:b8:ce:4f:97:98:54:41:e1:f6:
75:79:6f:dd:e1:71:18:00:62:ae:f6:a2:f0:a4:be:
97:fd:ce:21:dc:ca:5c:e4:35:ed:17:27:5c:11:01:
bc:c6:5e:b0:86:87:65:54:3c:6c:44:22:27:d9:63:
05:1e:1f:5d:dc:4a:ee:2d:e3:c5:b5:5d:d3:cb:aa:
95:85:e4:6f:4a:43:46:5b:2d:b9:24:4d:f8:f3:0c:
bc:d4:39:90:4e:cd:03:db:8d:c4:a3:de:63:ed:fa:
11:70:d6:0c:73:c0:4b:77:ed:39:b3:90:b6:41:f1:
43:2e:e7:c2:28:67:19:40:7a:75:d5:1e:04:fb:d9:
86:c6:11:3c:1d:69:5b:1f:cd:b7:e2:45:68:1b:f8:
e9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BD:1C:48:BF:59:DB:4B:8D:A6:92:6A:B1:86:B2:77:C6:B5:82:EE
X509v3 Authority Key Identifier:
keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/gr0cSL9Z20uNppJqsYayd8a1gu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.56.0/23
Signature Algorithm: sha256WithRSAEncryption
13:fa:71:d3:bb:64:76:c8:31:6c:13:a2:b3:13:37:2e:86:7e:
18:76:d5:15:da:ce:db:fe:a6:80:45:42:bd:33:56:0a:bb:73:
14:ef:a1:0a:b9:b0:51:dc:e2:cb:86:b7:6d:44:2a:1e:ae:b7:
ed:54:be:2f:7d:8b:4d:4d:04:25:63:05:d1:53:da:fc:03:76:
fa:40:3e:3f:34:7a:12:bd:96:42:2a:d7:1c:49:a0:be:ea:5a:
c9:f5:ea:8a:dc:c9:0c:53:21:8a:45:a2:3e:8b:c7:d4:8f:cc:
17:41:0f:b9:67:ed:ca:74:aa:13:f2:d2:79:b0:15:70:ad:ee:
50:a0:60:f4:19:95:17:42:11:f7:37:c9:45:6e:bb:97:db:7b:
11:1a:1d:71:48:e6:2c:95:73:8d:51:77:33:0d:b4:39:3e:f6:
9e:c8:92:4b:71:c9:87:05:c9:a2:39:e1:4e:fb:07:63:34:9e:
59:6f:37:ca:db:23:df:dd:4a:69:f7:52:1a:b4:b0:83:4d:22:
b9:fd:84:21:b2:7d:d3:f5:61:b3:11:1b:a2:13:31:cd:3c:be:
c2:bd:10:03:42:73:b8:f3:e7:2c:e5:65:26:6f:72:e9:df:61:
13:31:37:a3:92:d7:ca:ff:a6:81:a9:dc:41:ac:cd:e2:64:e2:
3a:eb:a5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:56:39 2025 by rpki-client