Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/F_PDpTT8VwujQPkmGcIdtXNgU4I.roa
File: F_PDpTT8VwujQPkmGcIdtXNgU4I.roa (raw, json)
Hash identifier: OQ+wz/UPm6ASLF7eLZGDlZyrZXXluOZOAJY7tc8F2uQ=
Subject key identifier: 17:F3:C3:A5:34:FC:57:0B:A3:40:F9:26:19:C2:1D:B5:73:60:53:82
Certificate issuer: /CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Certificate serial: 01856E38A963AC70B1BC35D3B6AE43121726
Authority key identifier: 72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/F_PDpTT8VwujQPkmGcIdtXNgU4I.roa
Signing time: Sun 01 Jan 2023 16:44:45 +0000
ROA not before: Sun 01 Jan 2023 16:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 45.129.197.0/24 maxlen: 24
5.182.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:a9:63:ac:70:b1:bc:35:d3:b6:ae:43:12:17:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Validity
Not Before: Jan 1 16:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17f3c3a534fc570ba340f92619c21db573605382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:f0:ae:94:0e:b8:a7:ff:b1:dd:17:a9:7f:
b3:78:74:2e:39:5a:58:f4:64:b2:16:c0:91:dc:f6:
3a:79:bb:aa:eb:75:a0:cf:94:f5:20:4a:58:9b:17:
8e:d3:a7:5c:0e:9d:8f:5f:d5:63:7e:b3:5f:9c:42:
f1:7e:91:ad:04:4b:c0:7c:7a:28:83:3c:c7:41:46:
c3:8f:e7:25:15:f7:cb:29:9e:18:88:79:1f:81:3b:
d3:67:88:61:c3:3b:54:45:1e:cf:a4:19:f3:8a:67:
6f:93:53:1b:99:9e:58:7b:3f:b5:b6:93:34:8f:0f:
ca:44:33:47:c8:84:96:2e:d1:8f:3d:6b:d1:fa:f6:
5f:f2:b8:6c:43:25:13:6b:76:4c:42:3d:1e:bf:1d:
f7:84:11:9c:33:b8:7d:08:6b:f5:3b:db:0b:3a:78:
32:01:d6:02:a9:8f:33:e7:47:94:33:aa:6d:58:65:
97:d6:e9:86:47:2e:4b:64:30:12:6c:f2:ab:23:c3:
75:75:0d:3c:a1:24:cd:38:0d:80:a1:c4:e3:e8:e2:
25:89:02:b4:96:5a:00:03:c8:3f:57:3e:57:bb:af:
d6:c5:50:3d:9d:df:f2:61:02:a5:25:65:19:c2:70:
f1:c9:a5:9f:4b:fd:98:24:85:60:13:9e:27:fc:88:
d4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F3:C3:A5:34:FC:57:0B:A3:40:F9:26:19:C2:1D:B5:73:60:53:82
X509v3 Authority Key Identifier:
keyid:72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/F_PDpTT8VwujQPkmGcIdtXNgU4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/cntIdqLREFjC5qd5_OrF8ECDtMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.117.0/24
45.129.197.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:0a:a7:bc:3c:c4:b7:d4:42:25:84:28:ea:a8:33:f8:bb:0d:
49:81:5c:08:c2:3e:41:87:b3:95:fa:22:e7:f6:88:01:63:30:
cd:e6:37:52:4e:2d:58:c7:25:d6:d7:07:3a:96:0c:91:79:25:
38:f1:0b:bb:33:40:2e:ea:f5:aa:f9:91:29:ac:64:c1:df:74:
09:a0:13:4d:9d:a1:86:77:a9:49:fa:0a:a2:7c:4a:bb:5f:1b:
61:c7:53:cc:30:13:ae:6f:bf:8a:e7:c1:a7:e1:1d:d3:04:69:
f5:66:15:fa:1d:01:08:3a:db:71:3b:e3:5e:b9:a8:36:a1:ce:
d4:87:d2:b1:dc:14:91:db:9b:11:b9:1f:48:e5:20:d9:f2:73:
46:11:d7:6a:99:50:17:f1:58:37:e2:63:5c:4a:e7:1a:57:55:
66:a6:41:36:e4:a2:a4:09:a2:8c:e6:14:62:23:ff:4b:3d:23:
50:14:74:a4:24:d5:af:5f:2e:16:f1:71:e7:ee:94:c7:b0:1e:
d4:4e:60:1a:29:52:31:22:98:39:a8:5c:0c:ba:ac:68:9e:79:
48:cb:d2:65:87:a2:a5:33:ff:7c:1d:92:15:ed:c4:3f:4b:92:
f5:25:4f:d9:7f:29:4f:83:51:e0:1a:18:fe:9a:e2:a0:cf:10:
17:89:db:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:12:07 2025 by rpki-client