Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/VOPfsPLo2qD6WzGvi49ZWNyWRCQ.roa
File: VOPfsPLo2qD6WzGvi49ZWNyWRCQ.roa (raw, json)
Hash identifier: U4NKV1QaU6X7/z8jYu2ZN8ojJKZniu0yv+LX0DQZ7Lw=
Subject key identifier: 54:E3:DF:B0:F2:E8:DA:A0:FA:5B:31:AF:8B:8F:59:58:DC:96:44:24
Certificate issuer: /CN=2e872826fce02bd9485ef276641d2b584f599b37
Certificate serial: 01958A9C8AE0BFAE3596E4E2E4DE873CEBA2
Authority key identifier: 2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/VOPfsPLo2qD6WzGvi49ZWNyWRCQ.roa
Signing time: Wed 12 Mar 2025 13:47:49 +0000
ROA not before: Wed 12 Mar 2025 13:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42298
IP address blocks: 45.67.73.0/24 maxlen: 24
45.67.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8a:9c:8a:e0:bf:ae:35:96:e4:e2:e4:de:87:3c:eb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e872826fce02bd9485ef276641d2b584f599b37
Validity
Not Before: Mar 12 13:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54e3dfb0f2e8daa0fa5b31af8b8f5958dc964424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:18:2f:cf:69:a1:84:e3:1f:9a:99:06:99:e1:
ae:0c:2b:7d:0d:01:f5:9c:0d:b3:cc:f1:a1:8c:12:
60:b9:7a:c2:a1:53:1c:03:01:d8:39:3d:05:ab:08:
41:fb:75:87:87:f2:59:fe:ac:eb:ae:1f:85:8d:7a:
29:59:25:86:c7:51:37:e6:3d:71:93:9c:a9:57:e6:
25:b8:6e:20:fb:21:e3:d1:8b:d1:31:dc:05:63:d6:
da:87:05:d1:83:14:fb:07:31:11:ff:0f:be:74:29:
33:fd:d1:e5:c8:78:23:ab:02:fb:f5:d4:db:86:aa:
f9:38:7a:b5:79:96:d5:a2:c4:6f:a3:de:db:9b:ef:
35:24:5f:1c:51:ea:3d:14:58:61:0d:a2:aa:28:23:
bb:34:f8:59:92:f0:e4:79:30:03:1c:3c:d1:fb:3a:
b9:4e:dc:bd:4e:b0:d6:12:1c:9a:77:c9:8d:52:a3:
82:48:75:a9:35:ba:7f:b4:1d:21:ba:39:e3:99:e0:
87:ab:63:e3:16:a1:d1:cb:77:ff:f1:e8:89:b4:b9:
9f:51:02:4b:da:7f:6a:c1:c4:2b:af:30:93:ca:b0:
14:74:0e:42:0a:19:2c:55:e9:00:69:6d:1d:e3:e8:
54:4f:f0:5a:9b:00:03:16:10:a8:4a:0d:47:63:9a:
58:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E3:DF:B0:F2:E8:DA:A0:FA:5B:31:AF:8B:8F:59:58:DC:96:44:24
X509v3 Authority Key Identifier:
keyid:2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/VOPfsPLo2qD6WzGvi49ZWNyWRCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.73.0/24
45.67.75.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ad:88:80:76:3a:5d:b7:2f:48:f1:6d:fa:8f:69:a5:b7:1c:
b7:f4:ea:bb:34:28:e9:0e:d1:f9:13:43:c1:84:b6:0a:b8:bd:
68:9a:46:40:a7:cf:0d:39:f1:73:cc:2b:0d:e2:ce:02:65:ab:
db:17:7c:ba:7a:a3:8c:32:e9:ee:d6:0e:b4:cd:ab:fc:2e:43:
21:1d:ce:39:75:47:55:b5:ec:db:b2:3e:6f:ec:67:4d:92:26:
31:ca:c5:f0:9c:5c:46:a2:77:9e:43:1c:5f:fe:c0:3c:0a:10:
c0:09:7e:74:b3:a0:d3:14:45:be:e1:5e:fe:43:dc:be:2f:98:
27:42:10:66:56:cb:66:ac:6c:eb:97:f2:ee:d9:f0:74:9c:cb:
32:d1:21:e1:31:b3:a3:1c:a4:6d:14:02:e7:78:d2:ed:7f:ca:
db:6d:3c:cd:38:bb:8d:a2:e2:ba:5d:58:cb:b2:88:84:a5:9e:
92:7e:32:7b:2d:0b:2a:b3:a1:c8:82:fc:3c:1f:d6:21:31:1e:
48:0d:2f:12:a6:7c:1a:f3:1b:28:25:9e:9a:db:6e:19:01:1e:
ca:e0:9d:d9:13:21:ac:95:b1:c8:e6:0a:9d:59:1b:e0:b9:a3:
74:5c:86:20:42:e4:4c:38:04:63:90:b6:ee:cc:95:96:7c:3f:
22:da:65:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:14 2025 by rpki-client on console.sobornost.net