Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/U5txbLmFPtaoMKOU1TbkV_FaGV8.roa
File: U5txbLmFPtaoMKOU1TbkV_FaGV8.roa (raw, json)
Hash identifier: z+0QM51o7tqW6/RjLGXF1BwNrcfJdd2i6D7WxQKXfAc=
Subject key identifier: 53:9B:71:6C:B9:85:3E:D6:A8:30:A3:94:D5:36:E4:57:F1:5A:19:5F
Certificate issuer: /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Certificate serial: 01942521A11574796E65A6E6232A6A7DA626
Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/U5txbLmFPtaoMKOU1TbkV_FaGV8.roa
Signing time: Thu 02 Jan 2025 03:49:08 +0000
ROA not before: Thu 02 Jan 2025 03:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13127
IP address blocks: 145.83.1.0/24 maxlen: 24
145.83.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a1:15:74:79:6e:65:a6:e6:23:2a:6a:7d:a6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Validity
Not Before: Jan 2 03:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=539b716cb9853ed6a830a394d536e457f15a195f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0f:be:ca:76:de:c6:32:44:6a:4f:69:00:e1:
c4:0d:2a:de:9b:e6:81:ed:83:4a:39:8e:e2:43:77:
fe:a9:74:13:1c:28:0b:bd:e4:a7:64:6e:a6:10:cc:
0e:90:bd:9c:01:c5:85:d3:1f:68:c3:33:ef:61:66:
cb:eb:f0:3f:b9:19:a4:3f:57:5d:df:2e:8d:a2:db:
1a:0b:c7:ae:3d:48:7a:a2:d3:68:ce:04:58:28:57:
e7:9e:fb:22:7c:60:bf:61:04:24:64:8c:63:1d:9b:
9b:c9:19:42:94:d5:42:0d:5c:ec:c1:73:7c:a0:d2:
55:75:7c:e8:b6:e9:9f:29:e8:93:f1:2c:17:83:6d:
04:bf:19:3b:00:c7:ab:1c:1a:60:2e:88:a5:b9:43:
fe:d1:58:df:b0:dd:6a:77:56:82:b0:43:20:f2:47:
0b:81:94:c5:a7:00:00:1b:c2:ff:22:c7:95:fa:22:
d0:d4:db:bc:34:02:82:8b:54:6e:06:fe:4d:2f:5f:
6a:28:2f:c2:3f:94:36:08:df:5d:1b:13:0c:ea:aa:
28:d2:c4:80:e7:af:2a:79:f7:5e:a4:38:0b:f3:1e:
8d:6a:56:49:e7:52:d3:38:39:26:3f:0a:3e:90:33:
c7:af:15:8a:40:e8:92:8f:05:59:07:dd:51:32:ba:
34:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9B:71:6C:B9:85:3E:D6:A8:30:A3:94:D5:36:E4:57:F1:5A:19:5F
X509v3 Authority Key Identifier:
keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/U5txbLmFPtaoMKOU1TbkV_FaGV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.83.1.0-145.83.2.255
Signature Algorithm: sha256WithRSAEncryption
54:3c:92:b2:61:6a:49:13:46:13:82:61:03:f7:bc:74:41:5a:
be:da:39:88:fc:84:e7:0b:3a:90:43:7d:65:0f:1a:08:7d:c2:
73:a6:5b:76:89:2b:aa:5d:c0:a5:d9:7b:0e:be:f5:b2:91:25:
86:57:bc:7f:2b:b1:b7:2f:0f:1d:6f:31:62:18:a9:0d:e1:7a:
cf:f8:7c:a1:98:b3:f2:a1:44:6e:22:62:bb:47:11:9e:80:3e:
ff:fa:f2:33:a7:c4:d8:66:d5:d0:77:ac:0a:76:e2:ef:7f:e8:
13:ea:de:e5:fd:b9:8f:c2:30:1b:1e:db:c8:f3:b2:1d:a3:61:
6e:6e:b6:e5:4d:e1:f4:a0:37:dd:db:ab:ed:48:61:02:bf:45:
a6:03:b9:ed:8c:bd:f0:f6:2b:a2:19:9b:fc:ed:51:75:34:ab:
ec:bb:39:66:35:1b:39:d6:05:18:84:8d:19:01:1f:78:12:1d:
a5:68:6b:b5:8a:04:c0:4b:e8:86:a6:8d:b6:85:6c:57:c0:88:
7e:7d:bd:71:06:3c:fe:d3:8b:90:38:6b:c2:3b:6e:b2:cd:61:
ff:b1:25:bf:d7:fb:4f:fc:89:22:0a:04:d2:c0:03:f6:ad:96:
26:ec:a3:0d:1c:04:59:ac:a0:66:fb:dc:e6:93:25:92:ee:2e:
70:d7:f0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:59 2025 by rpki-client