Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/D67aVlXhc44LndQNsE5Bzd0G7rE.roa
File: D67aVlXhc44LndQNsE5Bzd0G7rE.roa (raw, json)
Hash identifier: Dxh2s3RJlCzPr2UFPIR0UDzenFrh9ma2jyYFmd8QKIw=
Subject key identifier: 0F:AE:DA:56:55:E1:73:8E:0B:9D:D4:0D:B0:4E:41:CD:DD:06:EE:B1
Certificate issuer: /CN=542f094f0427b14f3499f7cdf61d883b0888628a
Certificate serial: 019425FC267338F7BF3C0F370412BC3BE07A
Authority key identifier: 54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/D67aVlXhc44LndQNsE5Bzd0G7rE.roa
Signing time: Thu 02 Jan 2025 07:47:49 +0000
ROA not before: Thu 02 Jan 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208963
IP address blocks: 45.13.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:26:73:38:f7:bf:3c:0f:37:04:12:bc:3b:e0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f094f0427b14f3499f7cdf61d883b0888628a
Validity
Not Before: Jan 2 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0faeda5655e1738e0b9dd40db04e41cddd06eeb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:82:d4:e6:30:54:05:23:20:58:16:db:ab:
32:db:d1:ad:3c:2a:16:af:58:3a:65:4f:06:99:33:
79:14:e1:c7:99:e5:1d:a4:0d:d9:e7:33:38:a0:0d:
0c:f9:84:59:a1:39:21:08:d0:7a:8a:28:57:c1:59:
ac:ff:40:66:42:79:10:f9:79:7c:ea:59:df:57:33:
89:9e:c4:92:16:dd:24:a1:3a:39:a4:3b:01:5c:ce:
0e:20:f2:9b:ef:1d:a2:1b:58:72:56:a4:fb:17:b2:
ad:7a:41:86:a6:44:64:f7:98:88:8b:75:b1:5e:94:
b6:4e:5a:6b:c9:cc:14:06:2f:17:cf:da:de:80:86:
91:17:50:83:24:dd:35:1d:1b:4c:13:27:d6:26:86:
e6:21:ef:0f:fd:36:68:9e:8c:94:2d:5b:77:37:00:
48:a5:05:a6:25:f0:04:d9:67:0c:32:6a:ca:58:86:
e8:3e:96:06:83:2c:21:a7:b9:db:e9:af:12:55:16:
5e:41:1c:e6:95:2c:9d:bf:de:6f:7e:da:e3:98:16:
7b:63:96:28:dc:7f:b5:a8:c1:4b:3f:66:1e:ed:ab:
ac:f4:2f:1c:df:85:94:48:ad:42:c0:bf:ec:56:fe:
e0:08:5d:23:3d:da:75:bb:d9:96:11:6e:2e:5b:24:
b7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AE:DA:56:55:E1:73:8E:0B:9D:D4:0D:B0:4E:41:CD:DD:06:EE:B1
X509v3 Authority Key Identifier:
keyid:54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/D67aVlXhc44LndQNsE5Bzd0G7rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.48.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:69:a4:04:f8:4a:0b:a5:79:f5:38:fe:84:23:ba:85:7d:aa:
6f:fe:9d:4e:ac:37:24:03:43:86:e2:d9:d5:68:cc:2d:b9:fa:
c5:5a:b6:31:bc:88:ad:dd:62:b5:6d:14:3b:1f:2f:2a:c9:b4:
0e:51:0f:5b:2d:3a:af:d2:08:99:23:61:a0:d4:c7:fe:ab:ff:
6d:8b:0d:98:a2:86:47:3e:a5:19:7c:18:26:5c:0b:9f:fa:63:
3f:ca:04:d0:74:a9:0d:cd:28:b9:89:b2:18:b0:5a:a8:cd:79:
ec:45:93:cf:48:a3:1f:d1:84:f8:5f:85:ce:9d:d4:00:3c:18:
cf:30:cf:95:30:8e:98:5c:78:15:e3:ce:7f:7a:53:0d:c1:32:
2f:ec:5e:37:d1:2c:aa:1c:ce:af:48:0d:c0:2c:c8:5c:f5:3f:
b5:f1:1e:49:b3:d4:79:0a:5b:c1:84:59:59:5c:1b:1c:e5:c5:
aa:44:11:02:ea:62:16:64:1c:e3:e4:36:1f:39:6c:97:ad:f7:
7c:98:3a:8c:52:1c:7d:27:d2:1d:d0:54:15:46:48:cc:85:17:
21:02:d0:7e:04:14:05:64:87:fd:1d:f0:9a:04:99:da:e0:3d:
97:70:54:8d:39:06:46:ef:0b:1d:e2:71:4c:f9:03:31:1f:d4:
f4:d6:0a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:20 2025 by rpki-client on console.sobornost.net