Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/sqPaYd8ZHAXyW490mVVm00nRhjM.roa
File: sqPaYd8ZHAXyW490mVVm00nRhjM.roa (raw, json)
Hash identifier: B59sXAQHYFdnMP4tg+Aax8a1ClQzdkr8CfdzYJxRdIM=
Subject key identifier: B2:A3:DA:61:DF:19:1C:05:F2:5B:8F:74:99:55:66:D3:49:D1:86:33
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01942827EDFD1B79C65BF161AF903E34E06E
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/sqPaYd8ZHAXyW490mVVm00nRhjM.roa
Signing time: Thu 02 Jan 2025 17:54:52 +0000
ROA not before: Thu 02 Jan 2025 17:54:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55154
IP address blocks: 45.67.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:ed:fd:1b:79:c6:5b:f1:61:af:90:3e:34:e0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 2 17:54:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2a3da61df191c05f25b8f74995566d349d18633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:58:e1:e9:d2:bc:fc:d3:bd:10:5d:6b:ca:
d0:9a:11:5d:5a:18:4e:eb:98:94:9d:98:ba:db:38:
f7:f1:27:48:b6:25:03:9d:be:ed:d2:57:87:71:88:
c3:7d:35:69:1e:d3:7b:d4:de:a6:67:15:6f:f6:ef:
f1:84:40:43:a8:22:fe:40:d7:c1:2b:e6:de:be:1d:
4b:e0:ef:48:c5:86:7d:0b:c2:cc:5f:75:b6:d3:38:
6c:80:2e:cc:39:6c:26:ed:bd:69:41:34:b3:6e:eb:
b2:87:dd:73:10:44:7a:a0:9b:91:5a:f1:38:27:0c:
a1:6a:f5:e8:56:80:30:c6:ce:0e:ae:33:a3:9c:4e:
49:2f:77:0b:56:bb:6b:cd:70:11:61:88:09:87:3c:
0c:de:2a:b6:b7:8a:b5:84:98:24:bb:a9:91:c8:07:
33:67:07:dd:9b:76:df:26:2f:83:ca:2d:fb:17:1e:
e8:7e:61:c2:79:56:4d:47:56:77:6f:b3:80:79:8f:
fc:14:cf:76:7a:56:9d:c6:ea:53:10:4c:80:e1:c7:
9d:bb:ee:fd:3d:a3:20:ff:47:1a:9f:ee:09:53:ea:
56:c5:b1:42:cb:84:6c:53:b0:9f:4d:af:34:f4:d9:
dd:d6:60:b4:7c:b0:3f:c4:c9:d1:25:92:fd:a5:19:
c1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A3:DA:61:DF:19:1C:05:F2:5B:8F:74:99:55:66:D3:49:D1:86:33
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/sqPaYd8ZHAXyW490mVVm00nRhjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.202.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d2:23:d0:f2:c9:ff:fc:62:05:29:bc:97:70:27:f9:a3:1a:
c9:f9:03:fb:1e:2b:b6:ea:59:5e:b2:e3:cb:5e:fa:98:1a:15:
92:58:7c:cc:de:e8:a3:3d:e9:8c:11:13:51:70:82:ff:07:33:
cc:31:fe:e8:46:9b:bb:91:da:0f:a4:70:16:5a:b0:b4:ad:88:
57:5b:a4:dd:ea:9f:ba:b6:49:18:b4:1f:73:8a:3b:ab:18:9b:
a9:d2:4c:e0:db:8d:7d:55:3b:98:4b:61:ce:95:c2:0e:c4:da:
91:b1:6b:1d:73:22:c9:a9:9c:f0:af:99:d7:57:c7:95:53:c0:
4f:df:36:32:db:12:50:ec:b4:fd:a6:fa:b2:00:0b:2e:86:7f:
c1:a1:a6:9d:56:c1:94:90:69:59:43:aa:7e:12:a0:94:7b:22:
67:6d:5a:7c:e3:99:05:e1:8b:89:77:15:ff:20:9a:0e:b1:73:
a9:4d:8d:cf:e7:62:a3:ff:af:fd:1f:ea:44:ee:fd:1b:7c:54:
ac:d8:c0:63:5b:2a:0e:0e:fe:70:ab:cc:0c:56:b4:3a:e6:ae:
a2:48:44:e7:da:86:a0:06:6d:76:c8:d2:a1:ea:04:5f:d5:88:
65:a1:03:ce:3a:d0:de:73:49:17:84:cc:28:f8:08:83:92:1e:
00:7e:cd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:54 2025 by rpki-client