Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_CJ8D9IwJPaCi9ZKsrGrxvsi7FE.roa
File: _CJ8D9IwJPaCi9ZKsrGrxvsi7FE.roa (raw, json)
Hash identifier: n2UR/l+bmOJ+GAYr1aI0pDCG4YhvNBfAUSAqZDZh6nM=
Subject key identifier: FC:22:7C:0F:D2:30:24:F6:82:8B:D6:4A:B2:B1:AB:C6:FB:22:EC:51
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0195228CBCED8B24C88D8B2F37C4A0C256E6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_CJ8D9IwJPaCi9ZKsrGrxvsi7FE.roa
Signing time: Thu 20 Feb 2025 08:50:03 +0000
ROA not before: Thu 20 Feb 2025 08:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 45.148.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:22:8c:bc:ed:8b:24:c8:8d:8b:2f:37:c4:a0:c2:56:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 20 08:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc227c0fd23024f6828bd64ab2b1abc6fb22ec51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3a:72:e8:77:af:17:a6:d0:81:3e:73:13:41:
2f:ba:11:83:b1:8a:84:ed:95:ea:73:9c:0d:b3:4b:
2f:3e:db:c2:42:70:e9:19:76:43:6b:2e:66:aa:b1:
c3:d3:66:56:44:a8:61:51:26:2e:d0:85:9f:a3:14:
d6:44:aa:73:5c:f7:40:57:22:74:c5:61:45:e3:57:
85:6f:6d:be:ec:7c:1a:f7:c1:fd:55:38:95:4a:fa:
a0:e6:41:a9:9c:3d:4a:c3:35:d6:8e:b5:74:6b:ad:
36:aa:8f:51:aa:97:1f:c8:e8:79:56:58:2e:46:20:
06:d8:df:5f:ad:c0:06:10:11:ab:ad:8b:10:c6:8a:
a7:fc:fe:f7:99:48:65:41:f7:07:4f:e2:83:f5:d1:
18:be:8a:fc:77:f9:57:12:55:52:4a:0f:d4:d3:a2:
0f:b7:49:03:55:e5:40:6b:db:89:35:10:1b:00:08:
4e:8e:80:31:97:dc:c4:a7:72:56:61:62:fb:db:ab:
f3:f5:0d:8d:89:70:25:e8:88:70:c5:c3:9d:14:ce:
7b:b9:63:ea:ee:f6:55:53:c8:f1:0b:c7:1f:88:48:
59:45:b8:89:72:cd:b9:a8:28:75:41:b3:57:4e:b7:
fb:66:af:90:53:c2:c3:d6:81:75:df:06:f6:0c:d9:
5c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:22:7C:0F:D2:30:24:F6:82:8B:D6:4A:B2:B1:AB:C6:FB:22:EC:51
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_CJ8D9IwJPaCi9ZKsrGrxvsi7FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:5d:28:0c:e3:93:1f:53:0e:08:48:24:ff:0f:f9:4e:b7:57:
03:f6:3b:ec:7d:02:d5:23:61:6b:b3:38:46:54:44:73:96:e2:
4b:69:6b:b7:3c:ff:bc:6f:bb:e7:f2:c2:f2:48:97:92:12:62:
f9:7b:2d:9c:10:93:96:07:47:3e:b8:0a:1d:28:7b:32:fe:ff:
de:ad:1b:7c:06:35:f9:a5:65:b5:43:42:0c:f2:f6:29:6f:03:
67:ba:e8:dc:1a:bc:b8:60:81:c6:e8:42:04:ac:c7:ef:10:03:
03:fb:4d:c9:7e:fb:b7:5a:b2:76:e0:ab:85:d0:37:93:15:15:
3a:e3:8e:29:a1:19:27:8b:31:79:ce:ce:1f:0d:0a:2a:4b:bb:
05:95:a8:c1:e7:3d:ba:5e:82:d8:7c:55:cc:97:c4:dc:5f:5d:
57:82:4b:ef:40:0a:7f:1d:f2:63:c9:da:bc:5b:82:fc:79:4e:
9e:5d:de:28:a1:42:78:9b:74:57:bd:9c:24:6b:f8:20:da:4f:
34:2c:bb:a9:2c:e0:83:76:ce:cf:82:7e:1b:46:28:2a:3c:d7:
a5:94:52:27:19:c6:2f:68:dd:d0:74:3a:34:e6:94:07:24:ed:
3b:7f:e3:b0:0b:7a:e3:91:bc:ed:da:fd:02:73:ad:f7:71:e6:
97:eb:cc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:32:52 2025 by rpki-client