Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/shIwBHPjiSd9hB0RTO1GDY18Afw.roa
File: shIwBHPjiSd9hB0RTO1GDY18Afw.roa (raw, json)
Hash identifier: htaJorP+k0VnVAEmtztQ1uwVDt2ecvjlXA3G3sKMyLo=
Subject key identifier: B2:12:30:04:73:E3:89:27:7D:84:1D:11:4C:ED:46:0D:8D:7C:01:FC
Certificate issuer: /CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Certificate serial: 0189654A8F7A23CBB886438454A5D4FAFC2F
Authority key identifier: F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/shIwBHPjiSd9hB0RTO1GDY18Afw.roa
Signing time: Mon 17 Jul 2023 19:18:52 +0000
ROA not before: Mon 17 Jul 2023 19:18:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 94.158.189.0/24 maxlen: 24
45.84.178.0/24 maxlen: 24
45.129.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:8f:7a:23:cb:b8:86:43:84:54:a5:d4:fa:fc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Validity
Not Before: Jul 17 19:18:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b212300473e389277d841d114ced460d8d7c01fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:25:d8:e9:3a:2f:0e:42:63:a9:1b:e5:e4:0e:
4e:2a:1a:dd:92:e8:03:09:2f:9a:b0:6c:59:c1:75:
be:95:b8:dd:04:0e:07:27:6d:84:44:02:fe:f3:93:
b0:41:38:26:16:0c:2c:1c:22:03:c6:d7:a2:a7:0d:
e2:e9:21:9c:98:02:f0:5b:95:4c:3b:42:7e:b5:df:
93:d4:e4:f8:99:63:e0:7b:b6:1e:1b:1a:ad:5b:8c:
65:04:35:a1:a3:70:10:fa:a9:8a:11:e5:02:c7:ca:
74:64:49:34:8f:99:6f:f4:c6:89:d6:82:13:a3:5d:
65:dd:b2:16:85:55:bf:fc:de:70:1f:25:92:16:77:
d1:0b:a4:6e:47:5c:8a:f7:54:49:fa:8e:1d:00:db:
0b:7e:51:b7:78:d1:cb:26:14:49:c2:10:d7:b5:cb:
5c:8e:b4:b2:45:b3:75:dd:29:12:34:1b:f9:fa:2f:
50:58:f7:0e:a7:00:51:09:50:49:10:8f:50:3a:36:
14:f1:44:fe:3e:01:6b:5b:0b:77:49:a0:9b:f3:4a:
79:cb:56:13:80:88:61:c3:0b:bd:46:d1:36:99:88:
80:4b:d7:58:97:3b:ff:cb:50:f8:17:52:94:79:58:
2a:05:8e:c7:ed:26:ac:f2:68:60:25:37:f6:c9:25:
8c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:12:30:04:73:E3:89:27:7D:84:1D:11:4C:ED:46:0D:8D:7C:01:FC
X509v3 Authority Key Identifier:
keyid:F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/shIwBHPjiSd9hB0RTO1GDY18Afw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/9NuV-dG1w-yTT_hNb_fwEkLahCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.178.0/24
45.129.1.0/24
94.158.189.0/24
Signature Algorithm: sha256WithRSAEncryption
38:e9:96:4e:26:57:c7:dd:d9:69:8a:aa:d8:d4:d1:cb:e6:93:
23:28:1c:c0:ed:2e:9d:39:15:1c:cd:81:02:83:2d:02:5e:d9:
13:c8:55:55:e3:66:0d:8a:b0:4c:f5:ef:89:b9:0c:9b:67:0c:
4b:97:e4:bf:a7:14:58:06:9d:52:0a:da:24:35:fa:71:6d:29:
00:63:24:f7:ba:8b:e6:83:32:37:5f:95:e1:63:c6:f1:b2:3f:
f6:6b:0d:a9:70:5a:16:d7:c2:9d:54:ed:8f:3e:b2:5f:c6:ee:
5a:0e:91:2e:98:ac:c7:ce:d1:ad:86:99:89:ad:20:b5:f9:72:
5e:30:e9:16:58:4c:64:e4:30:17:e7:01:bf:05:e8:81:fb:5d:
c8:76:92:23:a2:89:1c:b6:92:62:ff:72:9a:c4:7d:9a:f1:57:
05:c5:26:d2:5d:35:62:b1:7b:52:5c:3c:44:de:b1:25:7c:45:
ff:10:4a:2f:77:4a:d1:96:83:88:a1:17:3c:19:df:e5:d5:24:
3a:f9:cb:9b:d1:d9:62:f3:29:6e:09:51:2e:be:d8:87:ae:9f:
3b:c4:27:6a:ac:71:53:76:5a:8b:52:3d:05:14:94:60:d5:c8:
10:53:34:e4:59:a0:c8:50:69:c9:e7:65:32:4d:da:12:3c:53:
4f:84:b9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:19:57 2025 by rpki-client