Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/1-YvBQ0BXrsF-NI7ubQxbzvPVuzg.roa
File: 1-YvBQ0BXrsF-NI7ubQxbzvPVuzg.roa (raw, json)
Hash identifier: eYRmazTnlT6QkpTc8BcLL4cZu0o6zfLVuHBleuRca74=
Subject key identifier: F9:8B:C1:43:40:57:AE:C1:7E:34:8E:EE:6D:0C:5B:CE:F3:D5:BB:38
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 0194371791A3D8316E15303A647E66E04E7F
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/1-YvBQ0BXrsF-NI7ubQxbzvPVuzg.roa
Signing time: Sun 05 Jan 2025 15:31:18 +0000
ROA not before: Sun 05 Jan 2025 15:31:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 262287
IP address blocks: 45.11.233.0/24 maxlen: 24
45.11.234.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:37:17:91:a3:d8:31:6e:15:30:3a:64:7e:66:e0:4e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Jan 5 15:31:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f98bc1434057aec17e348eee6d0c5bcef3d5bb38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:54:c2:b4:94:4b:1c:02:cf:7a:57:c1:4c:64:
52:4f:9c:0e:60:57:92:a7:84:05:8f:b8:5c:ac:40:
61:a9:af:69:37:71:f8:99:e3:8c:50:2b:82:60:0e:
d2:cf:d3:6b:9d:6b:ab:66:0d:fc:18:f3:48:0d:fa:
7f:31:93:3c:a9:c8:86:5e:3c:cf:33:6e:20:db:52:
be:3b:12:e0:71:ff:46:27:5d:c3:20:3d:d2:e0:9f:
d5:b3:fa:1a:fa:22:74:cd:f7:5c:c2:e9:10:79:3c:
28:db:61:0f:1b:57:ec:9d:ad:52:01:00:f6:9e:e5:
c4:5c:ad:ef:7f:b1:1b:88:5d:75:90:57:c2:14:67:
f7:35:00:22:77:0b:86:17:4e:9b:7b:b0:eb:5a:33:
af:42:79:74:4d:87:14:1c:5d:af:87:41:11:da:3f:
0d:38:a3:6d:db:22:c1:6e:de:51:30:77:c0:42:1c:
f0:89:2b:1f:cc:4d:26:5d:7c:c3:83:90:68:7b:67:
2c:85:91:26:49:25:d6:a4:1e:a0:06:1c:dd:fe:00:
14:c0:9a:e2:62:53:d2:cc:62:0c:2c:b5:4a:58:62:
11:61:cc:82:97:bd:13:34:bf:f4:0c:82:58:6f:f9:
c1:81:ba:ee:43:0e:69:be:ce:cb:e3:0f:fb:8d:77:
3b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8B:C1:43:40:57:AE:C1:7E:34:8E:EE:6D:0C:5B:CE:F3:D5:BB:38
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/1-YvBQ0BXrsF-NI7ubQxbzvPVuzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.233.0-45.11.235.255
Signature Algorithm: sha256WithRSAEncryption
46:23:5f:c8:f0:e4:e3:e6:6c:92:12:53:9d:39:98:16:f2:6a:
58:57:ef:e7:1b:d6:2e:03:7d:65:71:2b:ed:3c:ed:87:41:9f:
fb:2a:66:af:14:5b:4a:df:69:6e:1a:fc:64:75:2a:27:d2:a2:
73:69:05:b8:e2:46:0c:f3:23:93:8c:7b:43:73:6f:c2:32:e4:
42:bb:37:83:9c:11:97:ce:3a:a5:62:81:b2:d0:55:1d:6e:9a:
61:a6:6b:94:d2:a5:cf:df:ea:1b:82:5a:ba:19:0d:13:b6:30:
1f:e7:aa:f2:25:f8:26:61:fc:a5:a5:96:c1:a9:3a:71:77:dd:
42:09:5a:b8:97:b4:65:53:b6:02:84:0a:5e:84:07:03:b5:59:
f0:18:3e:cc:44:ca:07:38:5f:fa:57:77:bd:5d:8b:18:bf:ff:
f3:83:70:21:e5:cb:46:86:92:91:07:ec:69:41:88:86:99:90:
0f:ec:9e:66:5d:2d:ed:b1:43:c7:9c:a8:09:7a:57:e5:ec:7c:
2a:aa:ec:ac:e8:4f:8b:0b:59:36:64:09:86:94:d1:fc:ee:54:
c5:b8:31:1a:25:78:7f:ad:eb:7d:72:90:c5:7d:74:f9:4b:76:
08:0d:18:b3:16:0f:33:78:75:f2:ff:64:06:13:93:cd:3f:c6:
d1:26:4e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:41:20 2025 by rpki-client