Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/dQWEtMXACcbFK-O5sfKYo_f8Y4o.roa
File: dQWEtMXACcbFK-O5sfKYo_f8Y4o.roa (raw, json)
Hash identifier: vHyoYTb8eVOfU/syk4YrhtN9pnkC2H/rIICxrgnsNBI=
Subject key identifier: 75:05:84:B4:C5:C0:09:C6:C5:2B:E3:B9:B1:F2:98:A3:F7:FC:63:8A
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 019424B3F4215355F3325072F63328820385
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/dQWEtMXACcbFK-O5sfKYo_f8Y4o.roa
Signing time: Thu 02 Jan 2025 01:49:20 +0000
ROA not before: Thu 02 Jan 2025 01:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51167
IP address blocks: 45.92.30.0/23 maxlen: 24
45.92.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f4:21:53:55:f3:32:50:72:f6:33:28:82:03:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 2 01:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=750584b4c5c009c6c52be3b9b1f298a3f7fc638a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ed:a7:67:e6:82:21:a4:7a:20:87:12:bc:4a:
c1:b2:f7:ed:54:32:6b:1b:5f:8f:85:f9:c2:52:97:
06:df:45:8d:3f:29:fc:cd:52:5e:e9:eb:8d:50:1a:
ca:9b:23:c4:8d:6a:a5:fc:99:7f:a6:4c:48:f9:5b:
87:74:8e:b1:d3:87:7f:18:7d:2e:01:cd:08:98:c3:
05:c5:2b:f8:40:cf:1e:11:57:61:7d:36:38:94:1d:
fb:b2:58:fc:94:5e:15:ab:4f:b5:57:b2:14:db:c4:
73:7f:5d:cc:f9:02:e4:30:e0:ca:60:6a:e8:a8:d3:
30:8e:77:f6:d3:41:af:c8:c7:11:53:d4:6a:5a:2e:
8e:da:d0:33:c1:25:1c:a6:c5:1d:20:f7:a5:af:dc:
4f:86:a2:10:c8:c2:07:c1:d0:f1:4f:32:5a:89:17:
c1:a8:99:0e:c1:62:80:80:7a:96:c2:a3:90:ec:06:
63:c0:92:13:20:9b:6e:42:a7:23:b3:e3:79:00:ef:
ef:a1:77:12:36:95:16:8e:be:bf:cf:4a:a3:18:45:
18:2e:84:2b:54:56:68:4b:3c:1f:53:ba:70:55:f5:
f5:35:55:e1:7c:2a:b2:7f:b6:32:bb:0e:ab:e1:4c:
05:65:c4:21:e4:98:fd:a8:4d:d5:ee:a2:be:50:f5:
69:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:05:84:B4:C5:C0:09:C6:C5:2B:E3:B9:B1:F2:98:A3:F7:FC:63:8A
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/dQWEtMXACcbFK-O5sfKYo_f8Y4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.30.0/23
Signature Algorithm: sha256WithRSAEncryption
17:86:6d:44:0b:57:98:71:7f:e4:ae:ce:4f:35:19:a0:e0:ad:
df:20:4e:58:4d:eb:db:c7:8b:c1:f7:19:0e:ab:a6:1c:63:3a:
ee:54:75:23:7e:aa:b0:31:1a:f6:71:32:6f:58:36:a0:bb:05:
3c:19:07:6b:3f:94:51:fd:fe:84:0c:2d:ba:8b:1a:8f:5e:1f:
0b:8b:a8:f9:89:f8:bd:11:a4:25:fb:47:a1:74:1d:e0:3e:e8:
bd:67:ca:7f:cc:7c:7a:4b:68:04:70:b6:10:b7:0f:c3:01:5c:
4f:83:5e:8f:80:7c:b2:f2:2e:4e:95:73:d3:58:45:55:bd:42:
81:4a:05:1b:4d:87:37:5d:ef:55:86:16:b7:3c:c6:42:1e:f7:
d9:2c:e9:b8:3e:dd:2a:4a:b3:98:6e:c2:fa:ea:ad:d8:61:8a:
5d:11:34:e5:3d:f6:e7:ce:d9:22:da:ff:72:ed:d2:c2:22:dc:
8d:42:07:06:8b:f7:5e:ee:10:98:a8:86:4b:a8:fd:68:81:b8:
52:38:06:4c:10:a2:24:bc:86:f2:43:49:cc:79:23:5f:d0:1c:
ed:d4:11:4a:fe:16:2c:f3:46:2b:8f:94:02:7b:33:b5:d7:c8:
22:3b:8b:24:df:2c:4b:14:59:c7:b9:79:62:d5:12:56:f9:31:
63:c4:78:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:28:41 2025 by rpki-client