Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7LFyPmBLzn0gBMGNgUwzwFT5uvU.roa
File: 7LFyPmBLzn0gBMGNgUwzwFT5uvU.roa (raw, json)
Hash identifier: 8+1RNFV9odLOjnIzBSD+WZwKaQJtLa03Bb8zPUmX2dw=
Subject key identifier: EC:B1:72:3E:60:4B:CE:7D:20:04:C1:8D:81:4C:33:C0:54:F9:BA:F5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942C670F87C4BE4DF3296417FC9EBCDC31
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7LFyPmBLzn0gBMGNgUwzwFT5uvU.roa
Signing time: Fri 03 Jan 2025 13:42:19 +0000
ROA not before: Fri 03 Jan 2025 13:42:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214309
IP address blocks: 45.151.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2c:67:0f:87:c4:be:4d:f3:29:64:17:fc:9e:bc:dc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 3 13:42:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecb1723e604bce7d2004c18d814c33c054f9baf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:05:f3:7a:c4:d3:cb:41:86:cc:57:6f:5a:bd:
7b:04:9f:1c:e5:d2:f2:1e:19:c7:c7:31:53:20:dc:
83:d7:e5:83:1a:49:f5:06:ac:0b:de:36:42:18:5d:
ff:ff:95:96:83:a8:f2:6c:c6:53:9e:86:ac:f2:83:
bd:54:ea:a7:29:fb:26:1b:d3:c2:b2:4e:c2:35:f8:
4b:78:07:9f:e7:1d:48:cf:cb:06:75:56:9a:31:af:
bc:ea:45:dc:d7:0d:5c:64:23:db:77:af:de:79:97:
01:15:8f:f1:be:33:17:0f:2b:eb:1b:36:6e:e8:32:
bb:2d:fd:68:67:cc:5b:67:e7:19:9b:20:13:45:5d:
15:f8:c5:43:c3:70:3f:6f:ce:99:d2:d8:fa:a2:a9:
92:5c:b4:1a:57:92:c7:38:e8:07:76:f6:b5:57:88:
37:82:e4:b6:a6:c9:c6:b7:cd:e7:d1:49:95:2b:8a:
2e:76:04:3f:b8:8c:a9:55:3b:7f:82:14:0d:9d:6d:
c1:e7:bf:0c:c1:60:17:97:99:47:68:e1:fc:14:ac:
d1:49:04:2c:66:a1:16:90:8e:ac:64:d2:f6:1d:2f:
4f:b0:d4:28:ad:91:de:2f:54:30:1d:59:62:ea:d7:
e6:e4:e9:2b:00:b7:9f:90:63:28:14:e5:ae:aa:25:
1b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B1:72:3E:60:4B:CE:7D:20:04:C1:8D:81:4C:33:C0:54:F9:BA:F5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7LFyPmBLzn0gBMGNgUwzwFT5uvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.91.0/24
Signature Algorithm: sha256WithRSAEncryption
71:2b:37:3f:80:9d:b3:20:bd:cc:71:04:93:90:76:bf:aa:2b:
1a:be:24:26:d8:1c:33:af:6a:2e:24:30:ea:32:02:91:00:23:
91:a3:7a:50:72:3b:34:32:09:46:b5:d1:20:31:3c:83:c1:e8:
9c:89:8d:d6:d3:cc:fd:fd:b4:a1:3c:d8:8e:7c:3e:28:59:91:
40:42:13:26:08:68:a8:2e:13:c7:c2:b0:ed:ed:e2:e7:ce:b9:
cb:5e:37:03:43:fc:e8:53:8e:94:f7:e7:42:14:a7:ec:30:1b:
f1:56:f3:29:7f:11:b9:6f:f4:ea:09:a5:b2:04:e2:e7:b3:64:
90:8e:2b:82:b2:8a:96:14:12:6e:3b:40:bd:2f:7a:7b:59:89:
e2:f6:67:de:68:32:a1:22:ae:df:e8:78:fe:60:d0:ca:cd:d7:
dc:6e:9c:5c:5b:6f:af:27:d9:2c:ee:4c:63:95:ac:e5:b3:5b:
40:04:41:66:e7:dc:ab:21:69:65:ce:0d:01:e3:df:8e:f5:92:
6d:fe:7f:c5:6f:90:3d:79:fb:73:0e:96:d5:a2:08:ad:45:b5:
37:17:d1:85:58:bc:b0:2e:4a:f2:7a:35:5e:a3:76:74:dc:d3:
75:57:d1:58:0e:14:99:06:88:1e:e9:1f:14:1e:55:ee:19:06:
e3:f8:37:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:32 2025 by rpki-client