
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/vG7IqBR6mOg-uBOkyC4NuXuE-oU.roa
File: vG7IqBR6mOg-uBOkyC4NuXuE-oU.roa (raw, json)
Hash identifier: FcifxZKaLaj+zYPf8uRmVdxTjjrSLXukIUCG3S6YYo0=
Subject key identifier: BC:6E:C8:A8:14:7A:98:E8:3E:B8:13:A4:C8:2E:0D:B9:7B:84:FA:85
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 019427B63BBC4CAC3AA36545B2CFAF5FAAAB
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/vG7IqBR6mOg-uBOkyC4NuXuE-oU.roa
Signing time: Thu 02 Jan 2025 15:50:41 +0000
ROA not before: Thu 02 Jan 2025 15:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212335
IP address blocks: 45.11.154.0/24 maxlen: 24
45.147.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:3b:bc:4c:ac:3a:a3:65:45:b2:cf:af:5f:aa:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Jan 2 15:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc6ec8a8147a98e83eb813a4c82e0db97b84fa85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:57:4c:84:84:85:53:97:0c:f1:73:6b:c1:2d:
03:74:92:3e:bc:e3:85:a6:01:7d:aa:19:89:1c:72:
1b:64:35:e2:5e:1f:3e:38:08:49:8c:e8:b7:3a:0f:
29:59:f0:47:11:41:7c:fd:1d:e2:3a:26:78:92:4e:
1e:53:8f:fb:73:bb:b0:00:d6:32:38:3f:e7:a4:5f:
97:08:5c:ad:a3:28:d1:78:ff:22:5a:a8:9c:da:12:
18:b2:63:07:03:89:de:45:72:64:e0:47:78:5d:c7:
a0:80:b2:90:3b:98:5e:75:ad:9e:b7:3e:ae:e1:39:
6d:8c:9c:ba:c3:00:20:28:c7:f4:67:e5:9c:c3:e1:
65:f6:27:c1:ff:93:22:9d:18:45:fa:1e:bc:e7:cf:
99:bc:fa:93:f6:bd:11:9c:48:bc:53:cc:9e:62:71:
85:21:43:c5:cc:f1:ac:1a:b5:72:da:c1:63:8d:47:
c8:8e:ec:cf:1d:ee:30:e4:fe:ef:0f:72:1c:47:d3:
43:47:83:53:07:e3:83:55:4b:46:cd:a7:e1:6e:53:
92:22:22:d6:ed:15:75:6d:fb:cc:69:9f:8e:42:51:
50:fd:ad:c3:e2:31:e2:9c:14:96:99:90:18:db:26:
b5:67:da:69:19:77:e9:1b:a4:b8:a2:27:28:fd:71:
54:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6E:C8:A8:14:7A:98:E8:3E:B8:13:A4:C8:2E:0D:B9:7B:84:FA:85
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/vG7IqBR6mOg-uBOkyC4NuXuE-oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.154.0/24
45.147.152.0/24
Signature Algorithm: sha256WithRSAEncryption
36:fb:aa:5b:ae:52:f5:70:79:6d:fd:de:52:aa:5c:74:c5:11:
d0:05:c2:73:5c:64:d7:a9:a6:15:64:52:58:cf:2c:b7:2f:91:
25:80:6c:7b:0e:7c:47:fb:f6:4f:dc:e4:0c:34:ab:c3:4a:3d:
9c:54:e3:bb:84:d6:be:08:9b:77:8a:b0:3b:75:16:b4:d0:9c:
f3:9a:bb:35:ed:00:83:da:57:7d:bf:6c:18:b1:b4:d3:07:47:
7c:38:96:e4:db:2a:cb:c2:ab:71:42:3f:5d:14:f2:35:58:1e:
01:e1:d9:de:aa:31:c0:83:9a:6a:b8:04:df:af:ff:f7:87:e1:
4e:83:1e:de:38:74:f8:0b:f6:7d:97:27:1d:62:81:53:3c:f1:
64:87:5e:85:c0:56:79:43:37:ed:29:c2:1c:ca:42:dc:d4:91:
32:bc:01:86:c4:1f:6f:b9:b8:84:fa:5a:45:03:45:0a:bb:d4:
99:59:d5:e0:61:49:2c:e5:15:11:98:c7:17:b9:d1:d3:45:fc:
68:36:fa:4c:4f:7a:8c:f7:db:13:aa:42:3c:f2:15:7e:e2:a1:
be:84:11:77:65:ef:ba:ee:4e:f5:1f:a4:9a:70:5d:73:14:35:
0f:94:79:0b:80:87:4b:0f:5a:80:71:f7:cd:94:3a:c7:06:4f:
ae:30:ce:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:15 2025 by rpki-client