Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/V4iFmGmpuX9vmwKfCIL4MHq3iJo.roa
File: V4iFmGmpuX9vmwKfCIL4MHq3iJo.roa (raw, json)
Hash identifier: I7wr4UYfNx1god3F0V72adpmlcw8clHUqo883JUOo54=
Subject key identifier: 57:88:85:98:69:A9:B9:7F:6F:9B:02:9F:08:82:F8:30:7A:B7:88:9A
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0194222006BACC764432DB915733DA5D75BC
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/V4iFmGmpuX9vmwKfCIL4MHq3iJo.roa
Signing time: Wed 01 Jan 2025 13:48:31 +0000
ROA not before: Wed 01 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56729
IP address blocks: 45.91.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:06:ba:cc:76:44:32:db:91:57:33:da:5d:75:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 1 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5788859869a9b97f6f9b029f0882f8307ab7889a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0b:b4:5d:59:e1:db:8b:1f:af:cc:b4:be:d6:
cc:5a:d8:1a:4e:fe:10:58:13:3f:0e:51:b2:9b:27:
4f:ba:ae:94:c1:c6:f1:63:4f:17:e8:4d:f9:a3:5c:
2c:92:05:31:c7:44:39:e0:a2:ad:dc:98:bb:c7:62:
c0:a3:5f:51:03:08:bb:ec:0b:f0:aa:09:8c:b4:46:
92:6c:67:5b:73:4f:9a:18:b0:83:4e:fe:98:35:fd:
51:c8:13:31:b2:5f:81:ef:ab:5d:b5:d9:2d:41:21:
9f:37:73:09:98:53:2e:65:7b:fe:3f:44:26:40:d5:
25:c8:37:5c:8a:ea:44:1e:7a:c5:58:fd:ce:bc:ba:
00:f9:f8:9d:07:a3:51:d3:64:18:f2:7f:95:b8:a4:
ff:4d:a8:55:e0:de:d8:fb:4a:57:3f:ad:09:90:03:
d2:fe:5b:a3:db:f9:95:f4:29:9a:bb:8f:1c:35:d1:
d5:a9:ca:3c:3e:68:18:0a:7a:da:2f:11:10:b6:f7:
12:94:fd:fd:50:d3:88:9c:da:0f:f4:d5:9f:72:05:
b8:15:ea:ae:3e:e1:e4:e8:57:a4:bc:b3:89:a4:41:
05:d8:17:0c:b3:d9:be:eb:74:ee:6e:ad:1c:96:7d:
c2:31:13:33:5d:b5:d6:ec:44:b7:fa:6b:f5:3a:84:
38:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:88:85:98:69:A9:B9:7F:6F:9B:02:9F:08:82:F8:30:7A:B7:88:9A
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/V4iFmGmpuX9vmwKfCIL4MHq3iJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.5.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:15:00:4a:e5:3a:f3:45:85:45:85:f9:22:1c:4f:10:ff:7d:
b8:21:e8:09:0a:5c:c7:19:55:fd:25:34:b2:60:c1:c8:9a:d6:
38:61:81:ad:d3:d7:42:1e:b5:fa:51:1e:96:0a:6f:6d:04:56:
fa:e5:e9:a5:90:1e:50:e7:09:a0:8b:59:6e:73:b3:c0:c2:64:
b6:b3:ab:ec:4b:2b:1d:ad:dc:3d:3c:9d:cf:82:4b:24:c4:9c:
79:e8:24:4b:3e:78:4e:a8:88:c2:c8:bb:55:77:15:79:f0:ff:
7a:5e:aa:14:1a:53:aa:86:b0:2f:98:37:d5:06:e7:f9:b6:f0:
2e:cf:a6:a1:a7:9c:53:02:da:11:a6:d8:b7:72:53:20:b2:61:
e7:e2:df:e6:4c:32:f5:b3:4b:1d:8e:2a:42:6a:c5:67:08:a6:
c6:93:7c:a2:9d:d2:09:83:0a:d8:53:86:e9:6c:25:c2:15:76:
03:df:6c:f5:89:1b:63:1e:33:3f:18:1c:b2:ab:f4:4b:b1:6a:
38:f3:54:a3:8a:fb:aa:6c:48:69:fb:37:b0:8f:61:3f:8c:b7:
b1:23:37:0b:ec:d1:6d:1b:56:35:29:1b:9a:60:5b:61:bb:cd:
a4:2d:c9:85:3f:39:e6:c4:07:4e:d4:31:f0:21:91:3f:c1:cf:
46:c7:59:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:00 2025 by rpki-client