Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/DXFa04XkR8ChfH_xwX1BmgeTb_A.roa
File: DXFa04XkR8ChfH_xwX1BmgeTb_A.roa (raw, json)
Hash identifier: 1WqZ6YkVB4BBGv3WyiSyog9ZpZ/+LBnEHtOiijLFH+M=
Subject key identifier: 0D:71:5A:D3:85:E4:47:C0:A1:7C:7F:F1:C1:7D:41:9A:07:93:6F:F0
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019423D763A5B6E097191D50E7445DEBFAEE
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/DXFa04XkR8ChfH_xwX1BmgeTb_A.roa
Signing time: Wed 01 Jan 2025 21:48:25 +0000
ROA not before: Wed 01 Jan 2025 21:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56382
IP address blocks: 5.1.94.0/24 maxlen: 24
45.155.249.0/24 maxlen: 24
45.155.250.0/24 maxlen: 24
45.155.251.0/24 maxlen: 24
178.251.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:63:a5:b6:e0:97:19:1d:50:e7:44:5d:eb:fa:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 21:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d715ad385e447c0a17c7ff1c17d419a07936ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:b4:e2:32:3c:bf:5b:39:75:79:64:3a:d7:
26:61:38:58:68:db:6f:3c:19:0a:0f:4f:91:e7:25:
a6:d8:68:4d:1d:ed:4d:24:a8:4d:d1:1d:df:27:06:
30:c6:89:cf:7b:ca:ed:9a:30:01:a2:48:c5:f1:d6:
d3:9e:e3:68:a4:6c:43:54:87:f8:31:5e:a8:fa:1d:
1e:a9:3d:f3:9c:1c:d5:59:d3:95:56:8b:df:7d:30:
87:c2:5a:64:33:4c:6e:8d:d3:9b:56:5c:65:2d:fb:
6a:4c:f0:83:84:51:b6:97:dc:97:09:8d:5f:76:79:
8f:a0:9e:fd:71:78:5b:5f:41:ea:7a:41:07:fb:11:
fd:c0:fd:c4:09:50:36:3c:4f:07:0b:2f:31:36:9f:
f9:74:85:be:de:f3:e3:cb:de:39:c5:9b:da:67:d2:
f4:72:1a:5c:56:d5:82:12:55:40:b7:10:e4:e3:86:
c5:8b:4e:da:17:d6:75:7c:26:13:c8:84:e5:16:50:
d6:97:cf:21:62:08:4b:83:c0:16:6f:85:94:45:91:
c6:86:61:9e:1d:c4:d4:88:61:30:e4:63:86:52:2b:
3b:5e:68:f1:74:e4:cf:74:f5:f7:e8:90:30:f9:b0:
ce:6a:ba:38:67:04:03:de:01:30:6b:3e:32:83:97:
da:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:71:5A:D3:85:E4:47:C0:A1:7C:7F:F1:C1:7D:41:9A:07:93:6F:F0
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/DXFa04XkR8ChfH_xwX1BmgeTb_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.94.0/24
45.155.249.0-45.155.251.255
178.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
af:18:e6:2f:45:20:c3:ac:5d:e8:19:bb:df:80:b7:f6:a7:8b:
e5:4b:dd:6d:78:61:74:8d:c1:cc:73:8f:84:89:b3:84:d9:28:
12:60:2d:71:b9:7f:07:ae:28:b3:b2:ba:c5:04:15:94:46:2e:
d5:65:3f:9e:c4:94:04:1b:38:a9:15:25:4c:c8:83:e4:87:48:
b7:4f:c5:35:d6:ab:9a:16:cc:50:1a:05:b8:e4:b2:24:27:8e:
9a:b0:5d:47:cb:18:ee:1f:66:fd:5c:74:52:65:6f:f1:63:53:
92:b2:3c:50:5a:e7:d6:b7:65:2a:35:2f:00:e9:b0:5c:52:d2:
d3:3a:ff:6e:c4:11:ec:84:ac:25:93:20:d9:7a:81:d7:78:d1:
ad:d0:91:94:a8:a4:1f:d9:1b:8e:e4:e1:b9:11:7e:31:23:64:
21:b1:67:fd:8c:37:d4:06:e7:c9:84:f4:22:e3:4f:de:4e:0d:
9c:33:4e:08:21:25:5f:e3:d0:bf:e7:aa:72:96:31:b8:bb:74:
3e:7b:f6:c4:b9:9f:44:04:05:c5:7d:8c:02:8d:d4:e3:0b:97:
02:09:d7:8a:8f:ae:fe:f7:1f:b8:80:1a:e4:4f:7f:02:b5:26:
fd:c5:13:61:5d:82:f9:29:48:60:d0:a0:77:a4:c5:69:ae:b7:
cf:e7:c6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:49 2025 by rpki-client