Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fUdWVb0NEABLBBsXZClslknfOPo.roa
File: fUdWVb0NEABLBBsXZClslknfOPo.roa (raw, json)
Hash identifier: UgdeEF3kEYW3WNgcEI6MPaFuZqOFgqfpBl2IhfdX98M=
Subject key identifier: 7D:47:56:55:BD:0D:10:00:4B:04:1B:17:64:29:6C:96:49:DF:38:FA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824D27351394995B26C2BF87AEF55AC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fUdWVb0NEABLBBsXZClslknfOPo.roa
Signing time: Thu 02 Jan 2025 17:51:29 +0000
ROA not before: Thu 02 Jan 2025 17:51:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215955
IP address blocks: 45.14.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:d2:73:51:39:49:95:b2:6c:2b:f8:7a:ef:55:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d475655bd0d10004b041b1764296c9649df38fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1b:48:20:82:5e:c4:83:23:1e:f4:ca:d4:0a:
44:29:08:2c:d9:81:7f:56:4f:bb:f0:91:5f:cb:2b:
df:ed:3e:b7:40:0b:ae:a6:03:0e:f5:cb:bc:a1:f7:
5a:c6:75:1a:15:f4:da:a6:61:93:a4:e0:81:88:dd:
50:be:33:7d:18:fc:6b:06:a6:c7:b0:19:e1:ca:92:
03:5f:93:f1:0a:c8:58:38:90:d1:18:db:32:05:5e:
2a:5c:76:88:5e:e2:1a:38:23:d8:dc:14:59:a1:9d:
50:fb:cb:6c:c2:1c:87:32:98:ee:bc:14:06:ff:70:
c0:8c:7a:fb:83:0e:bb:fd:fa:c0:3d:70:bd:b1:5c:
3d:5b:9c:84:f3:4c:16:7d:ba:c0:5a:e0:70:66:02:
e6:5f:b8:8c:eb:67:6f:f9:f6:d4:65:51:fe:10:25:
e6:05:3e:96:7e:36:b6:c0:1c:4e:ee:f4:69:03:c5:
18:b7:c9:3e:6c:dd:24:6d:95:03:68:b3:69:0c:4a:
42:2e:a5:ef:13:58:f1:c0:1c:ec:b3:39:ea:a4:fb:
82:b6:b4:92:ed:0e:5b:18:6c:90:e4:78:e4:93:0c:
ec:cc:9c:95:db:66:25:8e:e0:9f:5a:8c:71:fe:cc:
e9:0f:d8:10:51:7a:30:af:4c:11:ae:bd:01:6d:1c:
96:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:47:56:55:BD:0D:10:00:4B:04:1B:17:64:29:6C:96:49:DF:38:FA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fUdWVb0NEABLBBsXZClslknfOPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.167.0/24
Signature Algorithm: sha256WithRSAEncryption
89:c4:32:fd:68:a3:74:89:8c:94:fb:e7:bb:4b:7e:7a:ed:68:
0b:1e:6b:8d:01:fd:01:47:8a:cc:3a:1e:d3:43:4b:e3:0a:2a:
4d:a2:bb:59:2c:19:f7:47:b4:17:14:e2:d1:42:07:d8:a2:6e:
3e:2c:ed:12:2c:f5:1b:29:19:2d:3a:ae:a8:ae:a3:a7:db:cd:
d3:b8:d4:7c:f0:3d:c1:28:8a:71:17:0c:66:21:69:e8:13:7e:
26:d4:32:c2:54:dd:f3:3d:27:af:eb:d3:6b:37:3f:96:05:a9:
6d:eb:30:a5:44:a9:ba:0b:f6:65:f9:de:24:23:2f:6b:46:e3:
75:d5:af:f3:9f:49:3a:7c:6c:ea:03:e1:33:fe:2a:d6:77:b5:
03:d8:3b:9e:76:89:63:d8:b4:ef:46:84:01:2d:9f:e9:1e:fe:
a3:58:ac:c5:40:ea:f8:0c:92:3d:a0:c1:23:61:e4:24:5d:53:
cb:4b:61:a1:66:1d:52:dc:db:12:a0:f7:db:1a:3d:d4:f3:90:
01:1e:14:9a:e7:4d:1e:8e:2e:82:74:15:80:c3:92:d5:7a:ec:
2b:da:ca:7b:b2:ef:69:b5:f7:4f:18:c6:ed:3d:f5:fb:ed:7b:
78:7c:dd:92:fe:53:9b:38:54:3d:a6:eb:cb:b0:4b:92:ee:64:
6c:73:81:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:33 2025 by rpki-client