Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/t662D9vApr8ZiFSjITs7a3oVIQY.roa
File: t662D9vApr8ZiFSjITs7a3oVIQY.roa (raw, json)
Hash identifier: ysoT6z2U1fG/7XYJruqmcsqEJYDDWfQicEyYt1W7TQQ=
Subject key identifier: B7:AE:B6:0F:DB:C0:A6:BF:19:88:54:A3:21:3B:3B:6B:7A:15:21:06
Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Certificate serial: 019426D9DE19BBE50D09D10FC6B379258094
Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/t662D9vApr8ZiFSjITs7a3oVIQY.roa
Signing time: Thu 02 Jan 2025 11:49:59 +0000
ROA not before: Thu 02 Jan 2025 11:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203735
IP address blocks: 45.143.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:de:19:bb:e5:0d:09:d1:0f:c6:b3:79:25:80:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Validity
Not Before: Jan 2 11:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7aeb60fdbc0a6bf198854a3213b3b6b7a152106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:72:bf:29:5f:ea:93:6f:6b:da:46:1c:78:
7b:ae:ba:6e:fa:2a:59:7c:51:19:12:cc:ff:36:a7:
34:d1:ea:8c:c7:cb:51:40:59:59:e1:0c:0d:df:52:
ed:b9:5b:91:af:7b:59:20:64:63:66:11:d6:36:33:
a7:48:7d:59:83:7e:e7:81:84:bb:ec:0c:45:a3:fc:
44:ea:7e:2e:fa:f9:ef:49:8d:3a:d8:e9:a2:48:3e:
65:32:26:a8:fe:16:e4:9d:f6:2b:88:c6:3d:7d:5e:
e7:4e:d9:66:ce:fc:08:8e:11:d0:6c:90:73:13:72:
48:ac:45:4a:dd:0c:c3:ad:0a:91:2c:30:f1:ba:ed:
14:c6:b7:a4:16:26:ef:6d:e7:8a:f4:08:5f:d0:98:
bf:64:86:f0:82:0d:bc:1e:0c:1a:c5:e7:2b:ad:f0:
d6:7e:2f:16:31:db:0b:b6:1b:7a:09:a0:87:79:8f:
ae:3c:ad:d1:d5:38:47:8d:fe:5b:85:8e:9e:9b:8d:
ef:3b:9f:d5:2c:3d:fd:bc:63:0a:7c:95:93:e0:28:
43:80:d1:8e:88:90:76:6b:00:ea:2c:8c:4e:46:aa:
cb:28:dc:e3:bd:d0:64:97:39:71:41:c4:20:82:d1:
c9:35:59:22:4f:ce:2a:95:71:e0:46:1e:d8:73:b4:
82:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AE:B6:0F:DB:C0:A6:BF:19:88:54:A3:21:3B:3B:6B:7A:15:21:06
X509v3 Authority Key Identifier:
keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/t662D9vApr8ZiFSjITs7a3oVIQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.31.0/24
Signature Algorithm: sha256WithRSAEncryption
98:95:9a:32:02:fd:4d:67:df:97:20:e6:95:c3:2f:52:25:1d:
ef:50:fe:d2:61:bc:d3:5d:c4:92:df:13:3d:6c:c0:e8:2f:8d:
9a:77:66:de:c0:73:05:7f:19:2b:62:bf:17:9b:59:ee:92:9a:
d8:37:67:f0:df:af:59:19:fd:74:b8:25:dc:ea:ac:cf:4f:ed:
b6:91:c0:a5:f2:b7:e9:09:d0:de:49:a3:3a:c1:03:85:77:27:
fb:5f:f4:1b:15:02:45:f9:bb:7a:1b:92:1f:5a:1d:ff:a4:70:
d0:87:57:26:18:22:6d:82:e9:80:7b:93:88:1b:3b:4c:e0:10:
34:fe:35:71:dc:c9:ff:ce:88:26:61:8a:60:c9:5a:1f:66:47:
7c:de:6e:ef:45:d2:e1:d6:ab:6f:50:78:d9:cc:7b:1f:28:ae:
2e:7c:5d:cb:3c:27:0a:ca:56:24:f7:f7:5f:fc:f6:6a:f2:e4:
c3:21:68:8a:03:ea:a1:49:a5:8d:f9:2a:8e:b3:ee:c7:9d:14:
c3:7a:ff:50:91:dc:90:40:e2:63:64:09:db:ff:ed:a8:ec:f6:
22:1c:3f:63:c9:67:4c:41:05:7a:8f:c2:55:ee:67:26:e6:18:
6b:33:e4:0f:1b:ae:4d:7d:40:69:51:2c:9a:21:98:4c:fc:81:
d5:9f:32:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:28:34 2025 by rpki-client