Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1-fe2BFW7Lg9SzvoVV2Q-_s4Vj84.roa
File: 1-fe2BFW7Lg9SzvoVV2Q-_s4Vj84.roa (raw, json)
Hash identifier: MuNQzjB/jOq2Y19nsZfmkwcrMz+Uo4UBZWXdK+yQxto=
Subject key identifier: F9:F7:B6:04:55:BB:2E:0F:52:CE:FA:15:57:64:3E:FE:CE:15:8F:CE
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A47E0A20CD633BBD62EAA216BAFFD
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1-fe2BFW7Lg9SzvoVV2Q-_s4Vj84.roa
Signing time: Wed 01 Jan 2025 19:49:15 +0000
ROA not before: Wed 01 Jan 2025 19:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132335
IP address blocks: 45.132.15.0/24 maxlen: 24
92.119.149.0/24 maxlen: 32
2a06:7a02::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:47:e0:a2:0c:d6:33:bb:d6:2e:aa:21:6b:af:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9f7b60455bb2e0f52cefa1557643efece158fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0e:f7:60:13:24:e1:23:36:d9:73:c0:fe:6b:
c3:8e:6b:21:1b:6c:f8:5d:a8:64:ee:1d:33:8b:4c:
3e:d2:f4:96:9d:3b:0e:f3:56:8d:e5:c3:6e:73:3d:
0d:ec:df:59:f4:20:2e:44:91:d0:63:65:73:08:73:
3c:fb:eb:b2:e4:32:f1:6f:bf:16:63:20:f8:25:16:
4b:a9:ea:58:53:b8:a2:b8:25:30:d5:3d:0e:4e:6e:
f0:a3:51:56:fb:53:c6:da:6d:f5:45:f0:cd:3e:dd:
cc:98:17:5e:24:fa:7b:d8:3a:0a:a2:1e:b3:8f:d8:
fa:1c:9e:55:f6:09:5c:ad:b2:77:91:c7:d7:5d:c5:
af:7d:38:97:c9:30:94:12:2f:b7:72:8a:b1:3b:1f:
58:00:6d:e0:b4:af:e6:12:94:ce:56:39:44:98:0d:
c1:36:32:77:60:72:2f:2c:f6:2a:b2:cc:90:81:fc:
f1:cf:5c:22:48:d3:e4:59:14:8b:68:bc:e7:a1:cb:
6d:ae:98:e0:2c:3e:ab:44:bc:1e:0e:e1:36:04:5e:
b9:cf:d7:50:d9:5a:ec:d7:cf:54:0a:8a:3f:7f:a2:
f6:67:cd:0d:3b:24:db:39:3a:c6:67:c9:82:80:44:
96:d9:f1:e9:2e:99:a1:00:a2:6f:72:9b:cd:36:2c:
18:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F7:B6:04:55:BB:2E:0F:52:CE:FA:15:57:64:3E:FE:CE:15:8F:CE
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1-fe2BFW7Lg9SzvoVV2Q-_s4Vj84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.15.0/24
92.119.149.0/24
IPv6:
2a06:7a02::/48
Signature Algorithm: sha256WithRSAEncryption
98:f9:6f:3e:b8:18:5c:94:6e:07:c1:0e:ee:64:6b:83:05:71:
17:6c:49:67:df:08:2a:a8:df:11:24:46:3b:3d:30:d4:9e:2b:
01:ac:47:60:12:29:14:8a:9a:e0:5d:f8:55:43:fc:56:74:cd:
3e:ba:ab:0f:ba:a4:80:15:5c:47:26:fb:48:d4:e6:02:37:ac:
aa:4d:5f:ea:ca:98:27:b6:45:09:df:20:d1:91:31:f9:ac:43:
9c:cd:27:7d:fd:96:9f:94:d0:a4:39:39:7b:0d:fe:2e:e5:88:
39:5b:16:bc:ee:8a:1b:0c:7e:4e:31:56:fd:6d:68:0a:3f:dc:
97:ab:6b:aa:7c:c2:5c:d6:28:43:8e:59:3e:c5:5d:6b:e4:9a:
94:68:f4:57:bc:37:f0:43:cf:65:77:a0:86:f8:2f:d0:78:5f:
65:13:f5:49:9a:d6:b5:12:0b:8b:29:91:02:aa:34:7e:f2:14:
9c:2a:53:cd:78:8d:60:72:eb:5f:34:90:3b:3b:c1:c1:b7:07:
b8:d4:d0:83:b3:01:64:a5:f8:bb:53:83:b7:d1:40:e1:65:e2:
fa:31:07:12:de:34:e4:c2:55:49:36:f9:9c:24:77:61:da:33:
c7:50:72:75:d2:2d:68:d0:02:3f:b5:3e:a3:63:74:7b:fb:5e:
46:35:38:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:29:08 2025 by rpki-client