Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/d4dd63YvMop2w-g3LON2FgQkXGs.roa
File: d4dd63YvMop2w-g3LON2FgQkXGs.roa (raw, json)
Hash identifier: wFE27Pfyu6wjdlPpwECWgbJf/SI7T3ch1qMqz+WQODE=
Subject key identifier: 77:87:5D:EB:76:2F:32:8A:76:C3:E8:37:2C:E3:76:16:04:24:5C:6B
Certificate issuer: /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Certificate serial: 019522629CFD4163DC64D934D6F6E5E8AEF7
Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/d4dd63YvMop2w-g3LON2FgQkXGs.roa
Signing time: Thu 20 Feb 2025 08:04:02 +0000
ROA not before: Thu 20 Feb 2025 08:04:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39855
IP address blocks: 45.157.138.0/24 maxlen: 24
178.211.154.0/24 maxlen: 24
193.56.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:22:62:9c:fd:41:63:dc:64:d9:34:d6:f6:e5:e8:ae:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Validity
Not Before: Feb 20 08:04:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77875deb762f328a76c3e8372ce3761604245c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:7a:4f:b5:6d:82:f6:03:ba:5c:6c:a3:8f:
07:ff:df:fa:79:5b:69:62:92:c2:37:e0:f3:74:b7:
5e:11:28:21:2a:51:5f:aa:cb:3a:c1:a2:48:39:ca:
8f:73:86:98:df:5a:38:72:08:9f:11:6b:1f:71:64:
dc:f7:12:03:eb:b1:dc:5c:bd:ca:59:50:f9:01:55:
12:5f:b0:89:03:09:fb:40:a6:08:36:04:3d:50:e1:
a6:7a:a5:28:ef:47:3b:0e:51:f9:d1:f9:94:59:fb:
b8:dc:ce:37:b6:02:0c:e2:25:e0:db:6b:f4:d9:91:
c1:ae:05:b8:0f:d7:39:d3:af:e4:e9:49:87:fa:65:
71:75:85:7d:02:f3:61:12:8a:37:d1:60:e9:2f:23:
c0:b4:98:87:8c:43:a0:4c:01:41:28:35:87:ba:43:
c2:1a:be:4f:a9:82:40:10:20:bb:b8:80:f9:c4:ab:
99:1c:32:17:6d:9d:3c:ed:7e:b2:c2:2b:b9:b8:53:
b7:f9:b3:95:c6:37:76:9c:da:d5:56:99:2d:ba:eb:
65:b1:50:54:b7:bb:5d:b2:7d:99:b8:3a:2d:54:9c:
71:58:a3:dc:4f:7c:aa:15:d8:d7:74:7d:6e:44:f6:
c6:f5:5d:69:4d:99:41:bc:91:dc:5f:c1:92:88:8a:
cf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:87:5D:EB:76:2F:32:8A:76:C3:E8:37:2C:E3:76:16:04:24:5C:6B
X509v3 Authority Key Identifier:
keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/d4dd63YvMop2w-g3LON2FgQkXGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.138.0/24
178.211.154.0/24
193.56.112.0/24
Signature Algorithm: sha256WithRSAEncryption
01:50:ac:ad:99:2f:35:99:bd:ff:d8:09:09:8e:fc:32:a5:a5:
87:1c:29:5c:ad:76:96:85:7d:26:ca:37:ed:cb:56:30:5e:9b:
da:ed:a9:71:f4:82:e1:e6:8b:07:42:bb:16:9e:cc:3f:97:4a:
66:ae:12:7d:a0:e4:a3:a2:e1:c3:37:5c:64:2d:10:92:a6:68:
c5:3c:52:7d:f7:28:aa:09:7c:90:d6:0f:97:f6:6f:64:32:17:
b1:e6:89:66:9d:95:85:e3:10:6c:a0:20:c1:37:1b:b0:ed:b0:
d4:1f:87:8e:37:c4:bd:e2:d3:1b:44:fb:3a:b3:02:39:d6:9c:
c5:46:da:9e:d9:15:64:91:ca:b8:e3:70:5f:85:21:4d:fa:43:
29:98:d7:01:b3:0f:79:65:3d:e1:85:b6:5a:09:de:91:09:78:
27:a8:d1:c5:33:e7:f8:f8:c6:13:eb:2e:87:04:53:5c:1b:67:
a4:3f:8e:d2:ce:00:37:28:b3:fb:17:01:c8:2a:3d:9c:df:37:
46:9f:f6:de:92:eb:43:80:8f:19:5d:ba:47:bc:e4:96:82:33:
dd:27:cb:1c:1d:9c:f8:36:50:ee:55:66:fe:fb:47:b1:e7:a3:
9e:56:a6:7f:66:8b:4e:d1:13:b8:43:30:1b:06:8c:38:9a:ca:
f8:40:98:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:03:10 2025 by rpki-client