Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/sGdpJ3MGc2JYHlPiUM-Ur_MYt80.roa
File: sGdpJ3MGc2JYHlPiUM-Ur_MYt80.roa (raw, json)
Hash identifier: Mg+YYDsRO2iqoqy0HjPvZxJm7jFKR4if92J93XJagMw=
Subject key identifier: B0:67:69:27:73:06:73:62:58:1E:53:E2:50:CF:94:AF:F3:18:B7:CD
Certificate issuer: /CN=9a6e147448289634b98688ee5a5af447d42cbb07
Certificate serial: 0194228D6AF711CD58EA747A0DE5D3C5EDD8
Authority key identifier: 9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/sGdpJ3MGc2JYHlPiUM-Ur_MYt80.roa
Signing time: Wed 01 Jan 2025 15:48:00 +0000
ROA not before: Wed 01 Jan 2025 15:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 45.12.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:6a:f7:11:cd:58:ea:74:7a:0d:e5:d3:c5:ed:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6e147448289634b98688ee5a5af447d42cbb07
Validity
Not Before: Jan 1 15:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b067692773067362581e53e250cf94aff318b7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b6:9a:ae:cc:db:4a:1b:f6:3d:37:c5:3a:ef:
c7:8d:a4:ba:a5:bd:3b:1b:89:c4:df:c5:71:f2:15:
81:f1:69:39:dc:ef:10:ec:43:7c:6a:b6:91:28:51:
e7:28:08:4b:7b:d0:65:fa:90:42:ae:88:47:de:18:
da:1c:f8:cd:36:30:89:3e:15:03:2a:44:01:fc:0d:
d1:b4:9d:91:42:98:20:15:cd:f1:b0:d4:73:bc:6e:
f5:41:f6:3c:86:9f:9e:4c:ca:c5:5c:8f:39:87:c7:
4d:02:8f:4e:d0:81:ed:a4:87:02:16:70:17:8f:b8:
c6:cc:bd:2f:8a:97:5d:27:51:6a:20:92:87:f0:64:
d0:00:0c:79:0f:51:fd:4b:47:52:3c:6d:08:55:19:
19:aa:f7:e4:d2:61:b3:2b:90:f5:7f:98:e1:a8:8e:
a7:7d:7a:49:7a:c2:f1:b3:61:b5:b2:2a:0f:97:ad:
53:7a:ff:6e:3b:57:38:5b:f1:06:d8:a8:7e:b0:99:
cd:be:27:7e:ba:df:e3:71:29:91:2b:92:96:b2:d2:
a2:88:a7:d0:af:26:44:94:3f:62:ad:68:fa:da:38:
b8:ae:2a:00:c5:5c:4c:bd:83:42:42:6d:b4:cf:b5:
3b:e4:66:7f:16:ed:17:1d:56:e2:7f:65:c9:5e:a4:
1b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:67:69:27:73:06:73:62:58:1E:53:E2:50:CF:94:AF:F3:18:B7:CD
X509v3 Authority Key Identifier:
keyid:9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/sGdpJ3MGc2JYHlPiUM-Ur_MYt80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.196.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:d2:3c:9d:25:ac:b7:d9:e1:1f:49:a5:ff:27:20:54:14:f0:
10:ce:67:68:a6:28:6c:16:8b:62:3f:07:8e:77:98:23:c7:2d:
75:34:59:28:52:df:f9:7a:3a:7c:a6:59:ce:00:28:3d:f8:b5:
8f:c0:86:81:14:28:1c:da:06:8c:c9:e0:32:42:3e:c8:8d:27:
72:3b:68:76:d9:c1:42:6e:57:7a:bb:ff:e7:51:ba:fe:b3:cd:
eb:58:28:57:c1:df:09:5b:6d:f8:e9:86:88:5f:b8:a7:a1:da:
6a:28:55:5c:ce:7d:62:f0:35:eb:d8:29:27:30:69:a1:bf:3d:
90:0b:ac:70:cd:e0:16:f0:04:f7:11:c8:e7:03:c6:d3:b8:46:
84:7f:9b:2e:36:39:fd:bf:af:be:d7:c3:81:00:39:ab:9d:fa:
ec:7a:2f:8d:37:45:40:4a:b2:ac:ab:1b:34:79:f7:8f:7a:a4:
f9:50:f9:c2:30:52:67:a1:31:a6:d7:e9:02:a9:f9:55:85:f5:
6a:f0:06:fa:22:b0:c1:5b:a5:fd:07:15:e1:78:a7:21:fd:2e:
f7:be:e5:e2:69:da:9d:36:08:be:5a:09:f5:2e:65:35:c7:cc:
ef:44:56:68:93:2e:36:a4:32:2d:b1:4a:cb:01:3a:6a:e0:61:
71:40:83:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:28:14 2025 by rpki-client