Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/fvRZqhT9nwuyOEgCPZqS95I4Ccs.roa
File: fvRZqhT9nwuyOEgCPZqS95I4Ccs.roa (raw, json)
Hash identifier: Xdxx4tsRtmp4xPaC3/eFM9p6mdZi8yCV3FKXjA0qjvQ=
Subject key identifier: 7E:F4:59:AA:14:FD:9F:0B:B2:38:48:02:3D:9A:92:F7:92:38:09:CB
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019427489305A4107A6CDC231A6F5B8CD7D4
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/fvRZqhT9nwuyOEgCPZqS95I4Ccs.roa
Signing time: Thu 02 Jan 2025 13:50:55 +0000
ROA not before: Thu 02 Jan 2025 13:50:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136557
IP address blocks: 45.67.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:93:05:a4:10:7a:6c:dc:23:1a:6f:5b:8c:d7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ef459aa14fd9f0bb23848023d9a92f7923809cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9e:c1:4d:87:f4:65:63:4e:ba:23:01:98:55:
a3:20:54:ee:9c:00:c8:90:b0:97:69:0d:fb:cb:0d:
af:67:70:b4:50:e0:45:21:58:7f:03:bb:d0:65:ed:
3a:f0:25:15:92:a7:9f:0b:81:77:0b:dd:ac:27:2a:
ca:d3:8b:2f:ef:70:24:90:ee:70:cf:26:53:fd:13:
84:d4:4d:71:73:9b:2a:59:00:ed:42:53:5e:ff:51:
fd:00:ba:fa:84:3d:f4:2c:c8:0d:7d:32:4c:da:7a:
73:50:36:69:37:9b:45:1a:2f:95:e6:d3:25:3b:74:
64:9e:92:4d:5b:79:fb:ec:f4:92:05:19:7b:a8:07:
c5:86:c6:49:5d:c0:2b:67:cf:f6:00:cf:15:25:a0:
6b:ed:11:3b:1f:60:bf:ad:14:7b:08:bc:7c:74:cf:
bf:4f:9d:03:33:5d:ae:20:69:93:cf:c3:ec:94:dd:
c9:5f:1e:c1:71:ba:b0:ca:c0:db:ed:ef:af:f0:c8:
ec:f3:c0:8f:80:dd:ad:7c:4a:d7:9e:27:3d:ad:2c:
da:77:e9:ab:fb:0c:e7:62:32:ca:90:6d:7a:b2:29:
bd:0c:f4:bd:4e:bc:1a:b4:ea:38:bb:ca:84:b2:26:
63:d8:5d:33:a9:06:e2:1b:b0:2a:82:d5:e9:42:1b:
a6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F4:59:AA:14:FD:9F:0B:B2:38:48:02:3D:9A:92:F7:92:38:09:CB
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/fvRZqhT9nwuyOEgCPZqS95I4Ccs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.86.0/24
Signature Algorithm: sha256WithRSAEncryption
83:23:f3:bd:0f:92:b9:c1:03:67:86:61:87:f0:0b:5d:3f:76:
c3:8c:de:07:b1:a8:1c:f3:3c:40:8c:ab:10:33:44:67:bb:3d:
13:55:7e:0b:ab:9d:a6:4e:59:01:e6:b0:f3:22:7d:ec:a5:76:
c0:7b:91:30:93:a5:fb:ea:59:d7:af:82:e5:ca:18:c8:9a:87:
f6:c5:8c:dd:b0:a3:f8:25:67:09:88:33:2a:af:66:fa:b6:2e:
f4:3a:6f:ab:2d:6b:fd:dc:e9:a0:99:a9:f1:2a:c9:29:95:9c:
df:b7:f0:24:6c:8e:76:c1:58:19:ad:18:16:41:49:2a:1f:b3:
3e:e2:84:2d:82:2b:91:f3:5c:f6:09:1f:31:29:f9:d7:a1:5e:
d1:c4:09:a1:ec:64:d2:7a:ef:c6:86:26:7a:11:69:95:4e:3f:
ac:38:2f:88:d2:c9:dd:ba:40:19:85:93:d5:53:e1:1d:07:dc:
72:c8:ad:a8:b4:90:64:78:b0:c2:b9:38:37:9b:6e:fe:80:55:
ed:43:45:a9:de:d5:c8:66:f4:9e:6c:d0:6e:83:b3:66:66:42:
cd:68:dc:f6:e5:ce:a5:2b:55:9f:7b:4a:65:d2:f4:b5:63:65:
43:b7:18:ed:08:86:14:ce:1e:74:6e:8e:35:ce:d9:7b:05:16:
93:7c:c5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:26:40 2025 by rpki-client