Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/snLBQzXncuCutjB-6mlkbK17Uy8.roa
File: snLBQzXncuCutjB-6mlkbK17Uy8.roa (raw, json)
Hash identifier: Cw28lHOUeHUJQIAt/a1n6lZjE3/YqZwG3kLD22GHFE8=
Subject key identifier: B2:72:C1:43:35:E7:72:E0:AE:B6:30:7E:EA:69:64:6C:AD:7B:53:2F
Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial: 01942368D2765AFC577657EC07C7F5F2DB6E
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/snLBQzXncuCutjB-6mlkbK17Uy8.roa
Signing time: Wed 01 Jan 2025 19:47:39 +0000
ROA not before: Wed 01 Jan 2025 19:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52000
IP address blocks: 45.81.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:d2:76:5a:fc:57:76:57:ec:07:c7:f5:f2:db:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
Validity
Not Before: Jan 1 19:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b272c14335e772e0aeb6307eea69646cad7b532f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:82:45:08:f3:3f:1e:82:61:5c:9b:8d:3d:0e:
2c:82:52:20:50:a3:a3:99:59:77:0d:72:f5:a4:b1:
cd:2f:eb:bf:97:35:2a:a0:23:4b:13:c3:eb:7e:9d:
1c:2d:cc:be:c4:62:d5:dc:cc:c9:3f:d3:34:61:87:
90:0c:29:55:5e:eb:69:3b:48:14:3f:70:57:01:1c:
63:87:6a:d4:ee:f4:e7:55:d8:03:1a:a0:45:b7:75:
a5:2a:11:af:1a:bc:40:df:77:87:66:27:3c:88:55:
80:8d:1e:d7:7d:de:d1:d2:ae:61:f4:87:04:d1:81:
62:d8:a9:4a:27:2c:54:06:4b:65:2d:6b:36:f0:d3:
e5:08:8c:fd:6d:2c:3a:94:cf:d4:3d:64:dc:51:0f:
ac:3f:5b:ad:8e:61:6a:92:4c:b7:88:c1:a1:2d:c7:
09:e5:b6:0f:4b:34:79:7c:5d:9b:5f:c8:6c:bd:49:
a7:6d:01:45:fc:c6:d7:83:ef:b3:55:56:9e:1d:5b:
06:21:87:f0:2c:77:be:0e:ff:ce:c5:6b:66:2b:17:
f2:e2:0f:63:79:36:e9:f8:19:86:d4:81:24:19:66:
96:c3:46:8e:b8:a1:79:24:b4:a6:f0:31:48:c6:40:
99:06:2a:ff:d8:48:fc:10:5f:a7:dc:75:11:b8:fa:
12:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:72:C1:43:35:E7:72:E0:AE:B6:30:7E:EA:69:64:6C:AD:7B:53:2F
X509v3 Authority Key Identifier:
keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/snLBQzXncuCutjB-6mlkbK17Uy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.35.0/24
Signature Algorithm: sha256WithRSAEncryption
78:89:f5:b7:a0:09:43:d0:84:cb:92:8e:3e:d8:6b:ab:d0:0b:
90:14:ab:5e:6a:98:7a:f0:be:a9:8f:39:8f:b5:e6:93:3d:68:
3b:73:97:bc:b1:19:82:9d:0c:de:97:3d:5e:85:d4:a6:e0:3d:
da:c3:54:8a:f7:24:7d:30:06:1a:de:57:cd:0e:ee:b2:dd:66:
e1:69:a9:28:9f:75:8d:19:09:18:cc:70:30:83:26:49:0e:fb:
18:da:9b:f9:b8:df:1c:c3:d8:e8:b6:b4:7a:ed:a3:2c:b9:9f:
84:94:a6:22:25:9c:62:f4:2e:fb:ad:a4:b5:d5:a9:b5:01:88:
f5:53:b8:b0:8e:aa:b3:a5:40:36:c8:f4:84:70:0d:ad:e4:76:
90:cc:6e:be:7f:87:da:43:45:c7:47:8c:6e:99:2a:80:6e:fe:
f3:d3:79:46:8d:d7:50:bd:c6:ab:f7:6c:cb:ea:b8:8a:c2:8a:
36:ba:cb:64:28:5d:5b:4f:db:6c:94:69:b3:81:8a:d8:25:a9:
a7:2d:0a:84:b8:24:a6:af:79:5f:50:02:54:4e:54:af:66:40:
ce:d5:45:c8:0c:53:a1:f9:0c:3b:39:73:23:3e:20:2e:5b:52:
0e:66:8e:45:bf:2e:b7:30:65:52:4a:06:5f:c5:40:78:25:60:
77:ae:d4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:07 2025 by rpki-client