Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/3kJhXofCpFDD7Eo6E2j1Gd-FMQ4.roa
File: 3kJhXofCpFDD7Eo6E2j1Gd-FMQ4.roa (raw, json)
Hash identifier: K3OTcQcoZnzC8T3KuSMerKr1Yy1y4ZL68Y/lWSF+tJA=
Subject key identifier: DE:42:61:5E:87:C2:A4:50:C3:EC:4A:3A:13:68:F5:19:DF:85:31:0E
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 019424B3E7D399DCF745592DAB13D707E6D8
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/3kJhXofCpFDD7Eo6E2j1Gd-FMQ4.roa
Signing time: Thu 02 Jan 2025 01:49:17 +0000
ROA not before: Thu 02 Jan 2025 01:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200918
IP address blocks: 45.145.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e7:d3:99:dc:f7:45:59:2d:ab:13:d7:07:e6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 01:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de42615e87c2a450c3ec4a3a1368f519df85310e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ab:1f:16:65:52:12:33:b1:64:c8:25:11:e3:
e5:be:1e:be:b6:49:24:5c:3d:72:4d:fb:2f:eb:b8:
d5:fe:20:88:b7:d3:40:95:a8:5a:e8:7e:ae:60:07:
c7:cc:f4:28:ec:f2:ba:82:d8:d6:da:1b:d3:c4:df:
2b:14:73:6e:2f:43:0e:67:ad:60:2e:46:d7:93:25:
86:75:d1:cb:22:b3:01:ae:19:18:9b:9d:82:03:bf:
97:40:11:c5:20:ee:6d:40:dc:25:13:ce:8f:92:16:
e1:6f:7b:16:43:f3:9e:93:51:7d:53:31:59:fc:17:
de:80:38:76:0d:31:58:46:af:ee:8c:8e:f9:a0:08:
eb:71:e9:e7:35:28:e1:22:bc:a9:96:8f:57:5c:48:
8d:f3:b5:e4:26:81:40:63:74:ae:33:d4:f0:e6:7d:
8d:f2:3c:28:25:f1:5a:96:04:97:62:e6:36:e7:7d:
ae:3a:55:c2:83:06:b6:d0:8c:67:89:67:4d:76:92:
03:a5:0b:49:48:9e:88:e2:7f:a3:bc:af:59:14:95:
48:ae:94:ea:ab:eb:e7:4c:3a:ab:0f:17:43:72:c0:
cd:45:8b:c6:6b:20:ba:f1:55:b6:17:e9:d0:a8:07:
f6:70:b9:2a:5d:4d:29:a0:b6:d3:b9:0a:74:a4:64:
08:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:42:61:5E:87:C2:A4:50:C3:EC:4A:3A:13:68:F5:19:DF:85:31:0E
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/3kJhXofCpFDD7Eo6E2j1Gd-FMQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.220.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:d3:2b:1e:95:df:b6:e2:61:f9:d2:de:5a:f1:68:e6:0c:f5:
bb:c4:95:f5:a8:7a:98:95:cc:72:fa:7f:5d:ec:93:8b:9d:ca:
94:71:26:7a:bc:62:0b:01:f1:e2:cf:50:d2:b4:28:23:38:69:
1a:10:f7:a3:1c:c4:a7:b5:ea:ca:90:4a:54:f6:56:fa:ee:a9:
69:18:f2:2d:49:68:bc:1f:66:8e:b8:c1:ef:b7:07:48:e9:96:
db:d3:af:66:02:f7:00:61:43:ec:79:5e:31:13:c5:24:9d:6c:
a4:37:c7:b7:a8:d9:8b:75:f8:96:c8:e6:ca:c5:f0:2f:62:3f:
46:1f:2d:a0:5a:de:d1:b1:6c:91:23:66:ab:f2:6c:a0:db:67:
b7:0e:e0:f7:6f:07:db:95:5c:4e:10:8b:48:15:2f:65:44:da:
da:09:29:b2:72:fb:7a:36:61:a0:6a:0b:dd:95:c7:dc:1a:0b:
34:e9:a7:40:c1:1c:af:f3:64:10:7e:59:fa:cc:a6:8c:fa:5a:
b8:ff:8f:53:c5:2e:f6:c3:51:e7:89:d2:35:6a:10:29:f5:02:
30:b9:48:ad:c1:8e:22:54:2a:69:4b:9b:da:9d:c5:b6:76:45:
50:7a:07:db:11:3d:15:32:ae:c0:55:eb:af:25:82:7d:c0:c1:
0f:7f:33:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:22:39 2025 by rpki-client