Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3bd00f-6dfe-4d78-8d87-10a37f8d9606/1/TI5UIbxO2ysWALs0frq1IVCZ-e8.roa
File: TI5UIbxO2ysWALs0frq1IVCZ-e8.roa (raw, json)
Hash identifier: UQsVeZAiv8UPX8wRE4ochHR73GOLxhkVOiFbhh+1UCg=
Subject key identifier: 4C:8E:54:21:BC:4E:DB:2B:16:00:BB:34:7E:BA:B5:21:50:99:F9:EF
Certificate issuer: /CN=3904942cffb3c55607c96bd3c7d77aac2e243657
Certificate serial: 018BD3CBE8C05B9699691468CFFF6AA21370
Authority key identifier: 39:04:94:2C:FF:B3:C5:56:07:C9:6B:D3:C7:D7:7A:AC:2E:24:36:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQSULP-zxVYHyWvTx9d6rC4kNlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3bd00f-6dfe-4d78-8d87-10a37f8d9606/1/TI5UIbxO2ysWALs0frq1IVCZ-e8.roa
Signing time: Wed 15 Nov 2023 16:23:57 +0000
ROA not before: Wed 15 Nov 2023 16:23:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 45.95.11.0/24 maxlen: 24
2a0b:cf42::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:cb:e8:c0:5b:96:99:69:14:68:cf:ff:6a:a2:13:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3904942cffb3c55607c96bd3c7d77aac2e243657
Validity
Not Before: Nov 15 16:23:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c8e5421bc4edb2b1600bb347ebab5215099f9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:45:65:b1:fc:dc:68:79:42:d2:da:28:23:8e:
79:5a:ec:29:c6:f7:54:f5:4c:cf:4d:18:8c:aa:17:
03:fb:f9:ca:74:09:86:1d:dc:98:a8:0c:7c:a3:9b:
f9:41:14:ab:34:d9:2b:46:40:7d:e9:8e:52:fa:3b:
0d:ca:9f:9f:a8:4f:4d:12:d0:9b:14:2c:f0:72:b5:
56:ff:9c:f0:06:66:f8:99:d4:83:fb:ce:ef:ea:31:
e5:63:d6:e0:24:e2:67:35:29:ee:34:58:67:88:c8:
cc:8b:35:54:b8:9f:0d:51:34:86:cd:d1:38:a4:ee:
0c:1b:84:05:e0:3a:52:9d:10:d3:5d:dc:ff:2a:57:
3c:49:f7:01:fe:eb:1f:24:3d:8c:02:50:01:96:df:
f0:23:16:24:60:f7:2e:95:2e:c7:b3:db:ee:0e:2e:
6f:14:2e:63:51:55:6c:7c:bc:56:71:7a:c2:96:17:
3f:fb:1b:09:55:bf:c5:37:cc:14:3f:bb:7e:fc:0c:
e1:70:c8:71:02:1c:3b:15:51:db:9e:51:e4:55:6c:
44:b6:f6:60:31:2f:13:00:e3:f5:d4:e4:fa:97:05:
94:73:ea:a2:36:49:16:e1:d4:8d:9a:3b:b7:b4:ab:
cd:2c:2c:c1:8a:f2:2a:4b:7b:e2:7f:68:eb:6e:e1:
e7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8E:54:21:BC:4E:DB:2B:16:00:BB:34:7E:BA:B5:21:50:99:F9:EF
X509v3 Authority Key Identifier:
keyid:39:04:94:2C:FF:B3:C5:56:07:C9:6B:D3:C7:D7:7A:AC:2E:24:36:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQSULP-zxVYHyWvTx9d6rC4kNlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3bd00f-6dfe-4d78-8d87-10a37f8d9606/1/TI5UIbxO2ysWALs0frq1IVCZ-e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3bd00f-6dfe-4d78-8d87-10a37f8d9606/1/OQSULP-zxVYHyWvTx9d6rC4kNlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.11.0/24
IPv6:
2a0b:cf42::/32
Signature Algorithm: sha256WithRSAEncryption
c7:10:b4:eb:8f:6b:95:25:f4:19:ec:ae:e0:2e:1e:a7:bf:e1:
af:d9:37:a0:b1:96:05:8f:19:c6:25:ad:33:c2:67:be:ca:bb:
f7:18:4a:be:92:38:8f:99:ee:b5:e1:db:40:01:ce:b9:b4:d1:
dc:90:ad:60:b7:1c:aa:51:2d:4b:62:d2:1a:27:39:25:e6:77:
78:2d:05:18:42:fa:2d:8a:92:5e:ae:d1:98:05:6d:0f:f3:c1:
3d:8a:dd:66:cf:be:6d:d5:d2:44:e1:35:3f:09:4f:27:f9:8f:
b4:75:57:ac:ec:e6:f7:70:20:1f:66:89:92:36:a5:a4:05:dc:
5e:ed:4a:8a:80:f0:79:23:95:fc:c6:5c:4e:20:7a:28:ca:87:
3d:be:24:72:fd:29:55:f8:f8:b6:1a:19:6c:c2:7b:44:30:f6:
bb:cb:fe:aa:62:18:4c:b6:45:9d:02:d3:0a:27:58:42:40:2b:
7a:0b:b8:c6:20:3b:f0:a9:3e:96:3f:50:14:93:bd:37:bb:85:
36:bd:ac:95:aa:6b:52:15:fa:27:43:e8:c3:70:b6:f9:c9:23:
72:03:01:e1:3b:e8:70:0f:01:9b:b2:d2:a4:92:62:a0:51:48:
fc:e1:94:79:f1:b1:68:48:f2:30:cd:a5:e1:72:0b:92:d3:33:
e4:ad:c0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:35 2025 by rpki-client