Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/EYoIq0Wt430az3AlS8MVE1MgPwI.roa
File: EYoIq0Wt430az3AlS8MVE1MgPwI.roa (raw, json)
Hash identifier: girvFzcl2yCrVAnZBleKuj4kfeD2mcUCqN3leKrV0RQ=
Subject key identifier: 11:8A:08:AB:45:AD:E3:7D:1A:CF:70:25:4B:C3:15:13:53:20:3F:02
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01942827F5C174491B541AD00749BF78F814
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/EYoIq0Wt430az3AlS8MVE1MgPwI.roa
Signing time: Thu 02 Jan 2025 17:54:54 +0000
ROA not before: Thu 02 Jan 2025 17:54:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215411
IP address blocks: 45.67.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:f5:c1:74:49:1b:54:1a:d0:07:49:bf:78:f8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 2 17:54:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=118a08ab45ade37d1acf70254bc3151353203f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:48:ed:cd:4e:87:f0:f9:a4:7f:97:bc:7f:
d9:f4:f0:5d:5d:1b:3d:5a:cf:b5:63:3f:17:b5:d9:
ee:a5:7c:a6:6e:b3:ec:73:fa:49:a5:a6:a0:f9:35:
5c:7d:1c:a8:c7:bf:63:d1:5c:47:5b:ed:d4:9d:f6:
6c:bc:f5:41:c1:c1:76:4d:08:aa:93:03:14:1e:52:
4e:8f:89:2b:00:b4:09:9f:07:58:0a:42:e6:73:e5:
b0:af:1f:77:fa:c8:f0:98:0f:ff:cd:6a:ac:54:d1:
56:cc:18:e1:a5:98:a4:43:15:da:5d:24:ba:bc:56:
dd:d7:4d:ce:a5:c6:47:b3:a3:ef:c6:4d:e0:46:47:
89:92:b3:61:ad:fa:21:d7:67:b9:3e:9c:7f:c2:03:
36:f7:6b:99:5f:28:dc:02:d9:29:f2:d5:62:37:fb:
71:c6:f3:4f:1e:df:75:1d:74:a7:f6:dd:9c:26:a2:
21:15:69:6e:09:9f:9d:5c:67:f5:58:fd:c3:8b:60:
d5:94:ce:6d:5d:67:a4:44:a1:53:76:16:62:27:f9:
fb:b5:63:dd:0c:be:17:4d:73:eb:1a:33:d5:df:90:
61:fb:9d:e2:4f:ee:c6:8b:77:d3:62:80:48:01:76:
a3:70:71:ef:89:2f:1b:53:6d:b4:46:5f:bb:7b:e1:
0b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8A:08:AB:45:AD:E3:7D:1A:CF:70:25:4B:C3:15:13:53:20:3F:02
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/EYoIq0Wt430az3AlS8MVE1MgPwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.203.0/24
Signature Algorithm: sha256WithRSAEncryption
26:8e:71:b1:16:0d:54:10:38:b8:60:30:53:d2:23:a7:b5:e1:
47:81:63:2a:4f:4e:cf:c4:aa:fa:ff:13:fd:35:58:b9:18:11:
18:b3:ec:0b:57:9b:38:ad:e1:c9:36:47:b4:c7:84:38:dd:47:
bc:89:5f:ce:b1:c5:3f:43:3d:78:37:46:84:0c:33:3d:d8:75:
fc:a7:94:c3:b3:80:f1:cc:d0:bd:86:61:4c:58:2a:3e:37:00:
5b:21:e6:42:16:50:61:a8:59:2e:dd:e5:7c:af:52:d6:8c:11:
6e:ee:32:65:9a:4e:d5:fd:91:d3:16:35:40:97:31:05:2b:b1:
af:5a:16:88:d2:c8:91:e0:18:dc:a3:86:39:0f:f4:2b:a6:2e:
2e:69:41:c4:01:c0:fc:d1:c7:05:00:3e:1a:07:18:19:b2:5a:
5e:19:86:99:09:c8:7e:c1:5f:87:ca:1d:03:d0:b4:94:d1:4c:
51:01:fe:27:d3:ba:74:73:4e:df:5e:98:69:45:9f:54:3c:cc:
79:a4:c0:fa:44:66:83:35:02:ce:e1:20:ee:aa:51:be:eb:dc:
e5:51:ec:79:02:7e:97:03:11:d4:75:d2:0b:35:da:66:86:e8:
8a:d1:1c:76:ef:6b:b1:d2:b3:15:5a:98:31:55:61:e9:a6:8d:
58:6d:93:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:09 2025 by rpki-client