Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-rt7Ho3jOLusJN5BoCdx-wQwm9Q.roa
File: 1-rt7Ho3jOLusJN5BoCdx-wQwm9Q.roa (raw, json)
Hash identifier: U6rzr9DjwlFJjJ1uDsKPdbmkaCtONAEES9CYU2OrAXg=
Subject key identifier: FA:BB:7B:1E:8D:E3:38:BB:AC:24:DE:41:A0:27:71:FB:04:30:9B:D4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01949B74BDCBD9D667ECC2C93FDCD37B46DF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-rt7Ho3jOLusJN5BoCdx-wQwm9Q.roa
Signing time: Sat 25 Jan 2025 03:15:06 +0000
ROA not before: Sat 25 Jan 2025 03:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151349
IP address blocks: 45.8.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9b:74:bd:cb:d9:d6:67:ec:c2:c9:3f:dc:d3:7b:46:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 25 03:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fabb7b1e8de338bbac24de41a02771fb04309bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:75:cd:26:5a:c6:a5:91:36:be:b9:73:91:a4:
7e:69:15:5d:fc:fe:b2:a7:3b:e9:0f:35:53:d9:bb:
25:fd:c7:35:64:2a:e1:e0:34:e8:ba:3d:fe:87:a4:
3d:39:eb:b2:bc:3f:97:1c:da:8c:3e:f3:a4:74:69:
84:20:55:e2:b4:95:83:2b:bb:b6:20:ef:cc:8c:70:
70:fb:f2:4d:59:99:17:79:45:9e:68:2b:2f:e3:03:
aa:80:67:29:c7:73:04:e3:23:72:aa:fd:7b:a7:22:
49:b1:ff:29:41:7f:d5:ac:08:b2:d8:9d:45:97:5d:
d1:d3:da:40:7c:3e:29:7b:fa:ed:4a:5a:f4:2b:6b:
b8:00:9b:b3:39:2f:ee:e4:52:f1:84:01:8a:ea:c0:
39:ca:fd:a3:40:c5:87:74:fb:24:62:72:5e:91:1f:
74:87:e4:fd:87:40:e0:de:e2:d9:8d:90:6b:bf:9f:
3b:cd:cd:6d:04:06:bc:84:a6:75:ae:7d:eb:c9:10:
a9:15:e8:de:a9:1f:63:da:da:de:e4:8c:78:5c:09:
64:f0:13:31:97:d9:91:6c:c3:6e:21:03:81:06:3c:
ba:db:7a:83:4e:bc:e8:fd:ca:11:c3:b9:b7:21:36:
19:1b:cd:5d:c9:40:b8:ea:13:f8:60:ea:94:e1:f9:
1c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BB:7B:1E:8D:E3:38:BB:AC:24:DE:41:A0:27:71:FB:04:30:9B:D4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-rt7Ho3jOLusJN5BoCdx-wQwm9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:a7:ef:82:08:40:28:39:29:55:19:d2:cb:b7:7d:b1:60:99:
7e:ae:93:5a:dd:94:eb:a0:ec:53:2f:55:48:a9:61:b1:e2:12:
83:0e:3e:df:84:53:39:10:5e:0d:b6:8f:b6:5e:26:64:7f:11:
bb:17:32:fa:48:dd:06:da:2e:96:12:33:be:25:be:9f:d1:d0:
0b:d0:64:45:7e:4c:66:8a:46:50:e8:d9:42:07:38:23:8f:73:
44:b6:59:0e:82:d7:0b:53:17:69:ba:f0:85:a7:a9:34:d6:b5:
a2:2f:7d:8f:03:1b:7b:62:ea:ec:c4:dd:03:61:d6:25:0d:78:
ab:42:94:d5:fc:c1:1e:59:c4:c1:de:04:f2:24:df:fe:1f:8f:
91:0e:2d:d4:92:43:9c:e9:79:f7:5e:75:d1:6c:b8:b2:15:cd:
6d:36:4d:0f:c9:46:25:aa:35:ad:e5:ee:70:aa:8a:29:a7:e1:
3f:61:1b:37:03:09:94:01:88:08:36:75:3b:af:46:4b:a1:9e:
d9:c7:96:97:25:7d:8a:3a:9e:35:0c:e3:d0:1b:d7:da:01:b0:
37:e5:3d:4d:49:67:82:7b:72:bb:67:19:a0:d6:83:1a:64:e5:
04:79:3a:b3:a1:d4:bb:6e:b8:25:ca:d4:fb:e7:33:14:14:df:
62:7b:39:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:40 2025 by rpki-client