Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/09MZz0r-lrQdKm3nwJfPk4LJ56o.roa
File: 09MZz0r-lrQdKm3nwJfPk4LJ56o.roa (raw, json)
Hash identifier: Wsf0mCAy3rF2abZ97qXZn9CS8lDfV5EuJYVCMMIUeQo=
Subject key identifier: D3:D3:19:CF:4A:FE:96:B4:1D:2A:6D:E7:C0:97:CF:93:82:C9:E7:AA
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019523CEFDB87F5E2B309895F83B3B4CA445
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/09MZz0r-lrQdKm3nwJfPk4LJ56o.roa
Signing time: Thu 20 Feb 2025 14:42:02 +0000
ROA not before: Thu 20 Feb 2025 14:42:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213893
IP address blocks: 147.45.198.0/24 maxlen: 24
147.45.199.0/24 maxlen: 24
147.45.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:23:ce:fd:b8:7f:5e:2b:30:98:95:f8:3b:3b:4c:a4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 20 14:42:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3d319cf4afe96b41d2a6de7c097cf9382c9e7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:65:97:11:29:ba:45:12:26:17:fd:f3:95:3d:
d8:0a:92:8c:d1:9f:20:c4:54:77:ff:ef:f1:c5:ff:
ab:29:e7:9c:cd:7e:ef:e3:23:2b:42:79:7f:de:7a:
58:72:ab:d0:8f:9a:40:fe:54:77:28:76:c5:10:a9:
59:98:3d:51:40:da:91:e2:7e:de:a6:6d:54:d3:2e:
47:12:41:86:fc:16:a3:eb:a9:c6:67:63:63:43:d4:
4a:33:8b:78:f3:38:1b:a9:8d:7d:eb:8f:5f:27:64:
89:4f:4e:6a:0c:0f:81:05:bd:59:ac:b3:47:d7:cb:
7f:36:0d:1e:f9:85:65:dc:98:39:24:7c:c8:27:92:
be:8f:28:d6:f4:e1:0e:1c:61:37:dd:86:9f:7d:92:
f9:e3:ec:c5:ca:b7:63:df:31:29:cb:e7:82:94:3d:
87:a0:f7:ac:11:6c:b8:fd:fd:ce:9f:61:78:67:b4:
a4:a3:3f:2b:78:a7:ba:ab:cc:b2:a7:35:dd:ec:e9:
7c:8a:50:a2:73:9c:d7:12:9e:10:aa:27:17:86:ee:
3b:26:3b:66:2d:96:b8:b1:dd:74:d9:56:bd:b2:e2:
43:b6:7d:bd:6d:23:5a:8b:2e:e4:13:69:f4:a3:93:
67:b9:f5:bb:8a:67:91:0a:fb:64:99:b7:2d:58:e3:
1b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D3:19:CF:4A:FE:96:B4:1D:2A:6D:E7:C0:97:CF:93:82:C9:E7:AA
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/09MZz0r-lrQdKm3nwJfPk4LJ56o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.198.0/23
147.45.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:09:36:e0:3b:18:d0:ae:13:88:7b:e3:ea:62:46:d8:7c:1f:
c2:0e:f0:51:2d:89:0e:42:40:66:24:c9:2d:f6:19:e2:cf:e4:
ec:d0:4f:de:e0:dd:5a:c3:94:40:19:de:b6:bd:c0:b4:82:0d:
6f:b7:4b:1b:57:7a:6e:85:f4:85:74:42:ab:6a:63:e6:78:8d:
75:9c:13:f0:3a:1c:84:2f:72:ac:9a:71:bb:78:88:ad:4a:ea:
70:19:91:eb:0a:1d:79:34:9c:ec:f6:88:d4:8e:3e:db:d5:38:
af:bb:dc:d1:26:33:88:b0:1b:a6:b2:88:32:c0:b5:29:38:be:
17:4a:42:6f:90:04:39:2e:48:35:73:f1:0c:99:37:4b:36:84:
f7:ff:7c:29:14:b7:d4:3d:41:a8:17:f5:0d:a1:d3:c2:4e:3c:
ca:f6:fa:52:b4:48:37:32:4e:13:b2:b7:b1:fc:58:cf:2e:37:
39:c6:29:db:80:d9:79:51:47:12:48:41:e6:64:b2:3d:87:f6:
4b:5b:0c:dc:ac:d8:08:81:1b:80:d9:96:ce:c8:36:de:50:b6:
10:59:62:8f:fc:b9:40:e9:be:a8:f2:05:bd:8e:b8:8c:cc:fc:
b5:29:9c:62:26:ca:f2:3a:3c:51:f5:83:b5:55:dd:62:90:4a:
b6:25:7c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:57:50 2025 by rpki-client