Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/0YAlpXVId3LHx7bUr5xQcDkFv50.roa
File: 0YAlpXVId3LHx7bUr5xQcDkFv50.roa (raw, json)
Hash identifier: TFSQN0O8fIRBDFY4jZJFLp3OndkfiZIj1gXdcop7ZBU=
Subject key identifier: D1:80:25:A5:75:48:77:72:C7:C7:B6:D4:AF:9C:50:70:39:05:BF:9D
Certificate issuer: /CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Certificate serial: 019420D599C7F281593D0F98DFCA39FB0FD0
Authority key identifier: C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/0YAlpXVId3LHx7bUr5xQcDkFv50.roa
Signing time: Wed 01 Jan 2025 07:47:36 +0000
ROA not before: Wed 01 Jan 2025 07:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 45.82.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:99:c7:f2:81:59:3d:0f:98:df:ca:39:fb:0f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Validity
Not Before: Jan 1 07:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d18025a575487772c7c7b6d4af9c50703905bf9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:59:a4:e8:cf:46:49:1e:4a:67:e9:63:1d:
20:ab:c3:1c:eb:48:57:25:02:d1:5d:36:1a:e0:ec:
76:d0:ec:c4:af:72:06:28:43:91:7b:aa:90:f1:e4:
86:8a:ce:46:d2:14:c2:c2:59:89:6f:47:17:7d:52:
89:38:95:bb:99:9e:33:4e:2e:0a:fb:d0:56:86:cf:
57:3d:7a:24:c5:66:de:f2:f5:13:99:22:01:02:b4:
7b:44:7e:68:64:34:9e:da:00:37:b9:1d:df:8b:34:
33:30:bb:f6:c8:d6:98:e6:44:4d:f5:d1:b2:dd:1a:
8f:b2:04:05:bb:af:32:a2:fe:64:f9:50:4e:51:14:
8d:48:2b:7a:17:fd:d7:22:44:3c:11:d3:77:18:77:
fa:88:cb:76:e7:37:07:ee:5b:8e:d1:34:9d:4d:7f:
e4:39:4e:a4:a2:b9:1a:28:65:91:9a:ac:b0:81:27:
f3:8e:a3:89:79:50:26:1b:91:f2:38:ff:4d:7d:6a:
f3:48:79:1a:d5:8d:43:d3:cd:03:80:af:cd:8d:63:
48:e7:9d:69:10:c4:31:79:49:36:31:71:5c:0e:b2:
12:60:a1:2b:f9:53:aa:b3:a3:70:6c:29:a4:0c:aa:
7d:40:a6:10:2f:56:68:62:29:9c:71:5f:f9:59:62:
81:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:80:25:A5:75:48:77:72:C7:C7:B6:D4:AF:9C:50:70:39:05:BF:9D
X509v3 Authority Key Identifier:
keyid:C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/0YAlpXVId3LHx7bUr5xQcDkFv50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.119.0/24
Signature Algorithm: sha256WithRSAEncryption
00:7a:f7:f8:ab:93:a2:01:81:4b:cf:e4:46:21:c2:30:6d:4d:
57:ff:05:b1:36:63:56:48:1b:b0:f7:f6:76:f4:10:bc:9a:ef:
9d:2a:ae:84:e3:ff:2a:b5:67:23:ff:27:ff:94:3d:ad:1f:ee:
70:6c:6c:06:cd:f7:8f:3b:94:fe:c7:1b:12:41:96:8b:0d:d9:
2b:b6:88:77:23:a8:99:7a:0d:3b:20:3d:0e:00:bd:7b:b1:aa:
26:fc:aa:cd:de:a5:ee:c5:73:53:0b:0a:91:13:f1:e9:83:17:
12:fc:15:e6:0d:40:ea:86:a4:39:2f:09:f9:dc:75:59:aa:2c:
21:dd:a9:81:9c:ae:94:e7:9f:8a:c9:5c:db:8b:86:36:85:5a:
96:8d:4d:92:aa:f7:4f:3b:29:29:6f:71:08:86:43:bd:b2:3f:
5b:bd:60:af:40:c2:0b:ea:cb:36:1a:47:89:3a:75:e8:14:70:
b0:f5:da:a2:a7:b7:e2:fb:dd:86:90:e0:20:5b:c5:5d:d3:eb:
4c:c7:27:9f:a2:6a:d2:8a:bb:0c:07:02:9d:e3:f6:67:95:6a:
41:d1:58:6b:73:eb:f7:53:09:e1:ea:c2:2a:d7:ef:e3:99:56:
09:5d:8d:4d:59:17:f3:01:5f:a3:e6:dc:e3:36:38:88:3a:81:
68:05:c9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:29:08 2025 by rpki-client