Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/n4Pw8baANRxhhekgxLaZKB-fBgo.roa
File: n4Pw8baANRxhhekgxLaZKB-fBgo.roa (raw, json)
Hash identifier: S5fqr3mKJjNzVccylR6I2I+OImDDxy8APhqrEtXDif0=
Subject key identifier: 9F:83:F0:F1:B6:80:35:1C:61:85:E9:20:C4:B6:99:28:1F:9F:06:0A
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01942823979ADE34B6F005FA6928E106E8F3
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/n4Pw8baANRxhhekgxLaZKB-fBgo.roa
Signing time: Thu 02 Jan 2025 17:50:08 +0000
ROA not before: Thu 02 Jan 2025 17:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211826
IP address blocks: 45.65.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:97:9a:de:34:b6:f0:05:fa:69:28:e1:06:e8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 2 17:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f83f0f1b680351c6185e920c4b699281f9f060a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:11:9a:fc:f5:27:a7:00:b2:22:6d:d5:1b:8c:
5e:92:19:ee:10:42:3d:f0:32:5f:58:c9:27:53:93:
96:25:5a:74:27:7a:42:54:be:83:06:b8:9f:b7:23:
33:65:a5:80:5d:08:24:34:23:be:db:db:64:01:af:
26:9b:49:ae:b4:fc:f6:bc:ec:75:17:f2:2f:90:bf:
ea:d2:ec:fb:89:21:6d:aa:09:0f:ee:05:bf:d8:c3:
3b:05:ed:9d:fc:a9:25:3e:9f:b0:68:a6:3b:5d:84:
c7:89:da:50:16:16:af:6d:f6:d5:e2:5c:69:fe:21:
95:51:33:c5:29:9e:cc:e9:4b:11:91:af:ed:4e:8a:
ee:48:22:d0:80:82:78:44:9f:3f:db:92:9c:f4:c1:
a3:c5:96:e7:fa:70:10:71:c4:26:5b:53:df:5d:5d:
57:2b:9f:f4:2a:1f:7a:ad:e1:2b:0f:cb:83:6b:1d:
33:e4:81:ee:29:4e:2a:fd:b2:e5:ce:8e:8c:6e:64:
e6:8f:50:4e:90:bb:df:be:01:87:d2:b9:d2:54:49:
44:32:b5:0a:7f:b3:d0:7a:e6:8f:95:60:8d:06:1a:
04:f8:3a:f5:57:bc:48:95:d6:62:c8:f0:06:be:37:
ba:20:e0:5b:13:ba:88:85:0c:3d:d2:48:1d:e5:1e:
e1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:83:F0:F1:B6:80:35:1C:61:85:E9:20:C4:B6:99:28:1F:9F:06:0A
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/n4Pw8baANRxhhekgxLaZKB-fBgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.112.0/24
Signature Algorithm: sha256WithRSAEncryption
31:b7:fd:be:ce:76:4d:fc:ed:e6:b0:ed:ed:18:d7:76:e4:bd:
15:23:78:29:d5:07:fa:45:3f:f8:1b:4f:60:ff:b5:7b:b4:bd:
6b:ff:30:35:11:b5:12:dd:e5:ad:0c:0f:c5:bd:e7:53:51:2e:
e6:42:b7:a2:cd:fa:53:ee:95:94:49:87:79:f5:46:a2:36:cc:
60:78:c5:9a:f6:9b:89:ad:74:fe:54:72:77:b5:4e:78:16:58:
96:f3:b5:06:02:e8:53:2b:de:5f:54:48:8a:71:84:14:28:c5:
bf:09:d8:51:4e:b8:e2:cf:8b:c2:86:c6:9b:0a:1d:03:c6:b1:
fa:3b:e4:20:96:2d:b0:b6:60:ef:01:55:c3:3d:bf:81:01:01:
e7:37:3a:8c:4b:38:3c:ce:44:bb:a5:5c:98:ce:a8:1d:e6:f2:
07:67:73:a8:f8:e2:cb:81:92:c3:9d:35:da:dc:b7:28:23:39:
e1:9e:37:0c:cb:68:0b:b8:61:b5:8a:a0:89:1e:3a:89:7c:92:
e8:81:3c:d8:10:91:6b:4f:87:52:b9:aa:dc:e8:14:4a:15:02:
e6:d7:d0:bd:c8:ba:38:82:4f:ea:27:c1:63:c4:d0:b3:cf:3c:
49:12:86:33:6b:06:94:91:49:17:44:54:09:b7:7b:84:75:05:
b7:60:7b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:50 2025 by rpki-client on console.sobornost.net