Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/9qr8r8xTppJSHLya24yoc85Hk7U.roa
File: 9qr8r8xTppJSHLya24yoc85Hk7U.roa (raw, json)
Hash identifier: lgokGB6Ll002voLL4TcV40sMF+WO24Rj8TUlgWDpzXo=
Subject key identifier: F6:AA:FC:AF:CC:53:A6:92:52:1C:BC:9A:DB:8C:A8:73:CE:47:93:B5
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 019424B40561B04AFB779AC09C5004A4FC00
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/9qr8r8xTppJSHLya24yoc85Hk7U.roa
Signing time: Thu 02 Jan 2025 01:49:25 +0000
ROA not before: Thu 02 Jan 2025 01:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 27323
IP address blocks: 45.14.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:05:61:b0:4a:fb:77:9a:c0:9c:50:04:a4:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 2 01:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6aafcafcc53a692521cbc9adb8ca873ce4793b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1e:bc:31:29:e1:8b:f0:74:7a:5f:5c:a5:f9:
95:65:3a:2e:1b:78:08:08:a7:80:f0:e4:3f:1f:0a:
1d:6d:58:39:5d:54:97:00:09:78:a2:78:9a:e8:84:
e2:b7:66:a9:22:d1:2f:a1:4d:19:39:b1:f4:a1:ab:
8b:b8:8e:27:55:db:55:47:e3:9d:4d:a4:30:34:08:
f9:21:87:6b:cd:b7:be:86:f7:84:c3:05:56:cc:7b:
84:21:77:5e:b7:ed:da:f6:46:0d:b5:de:a0:9e:ad:
2c:62:60:85:de:9a:53:33:8e:53:61:b8:1f:82:b9:
2c:b5:85:bc:98:f3:d5:92:a9:1a:ff:4f:67:d9:d3:
b0:6f:ec:08:01:12:e9:95:4d:02:71:0e:f5:33:de:
f1:d8:95:a4:06:7b:8b:f5:7a:0b:5b:56:84:58:bc:
4e:2f:90:8d:28:d8:85:f7:ec:28:5b:aa:34:f9:b6:
25:a1:0d:75:62:0b:8c:3a:f2:a3:30:a9:03:b5:30:
83:63:77:e9:54:92:cd:e4:a0:52:99:65:15:34:17:
d7:ba:28:a0:b8:72:2c:e7:2f:38:ea:2a:2b:22:60:
dd:a2:c6:59:9a:cd:a9:69:da:88:b3:4b:9e:65:3b:
32:af:e1:6b:d1:3e:c6:2a:38:1e:8c:35:df:d1:f9:
e4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AA:FC:AF:CC:53:A6:92:52:1C:BC:9A:DB:8C:A8:73:CE:47:93:B5
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/9qr8r8xTppJSHLya24yoc85Hk7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.115.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:34:01:28:66:7c:27:2f:5d:f8:99:ce:05:ba:98:e3:63:67:
35:c5:dc:1d:69:4a:54:15:d6:51:df:df:01:b3:17:64:0a:a2:
8f:ec:67:fd:ca:2e:c8:22:b9:93:98:eb:dc:96:85:4d:75:73:
6f:7b:f5:97:90:4a:bb:15:d4:db:3d:00:aa:84:d5:53:b3:67:
03:78:82:62:d4:25:13:c2:e3:62:b3:40:40:03:31:69:4b:6c:
13:ff:46:f1:e9:f3:25:a2:70:04:d1:6b:7f:c8:d4:89:92:1b:
1f:ab:61:d3:7e:42:8b:9a:1c:93:17:8d:87:e4:28:26:3e:6e:
7c:34:bf:0d:de:f2:ae:dd:c4:db:38:0c:a3:55:2e:94:2e:d3:
1a:f4:e8:2d:32:62:ee:2a:e8:4d:1d:21:b6:be:71:03:48:36:
bf:b5:d2:08:42:8c:9e:c5:2b:3d:e9:fc:f4:bf:9b:f6:f2:6b:
93:14:a2:45:59:ea:09:a0:89:36:b4:2d:14:13:d8:8d:01:e6:
ce:e0:f7:6b:c2:e7:13:60:43:71:e1:9b:7e:6a:d0:a5:16:c8:
42:98:85:d8:54:ca:d3:f4:29:bc:ce:6d:ca:5b:6c:9b:1c:82:
3e:68:bb:f0:7b:2f:63:58:f5:ae:68:6f:a0:a2:db:9b:5b:19:
02:a1:c0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:57:36 2025 by rpki-client