Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/9uEuifYarTIvERXwNJd--2LA3J0.roa
File: 9uEuifYarTIvERXwNJd--2LA3J0.roa (raw, json)
Hash identifier: JjPH6fJTL7B3p3qZ9hNRmhhAryPBNjd9bl6j9yLpT1Y=
Subject key identifier: F6:E1:2E:89:F6:1A:AD:32:2F:11:15:F0:34:97:7E:FB:62:C0:DC:9D
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01953D87AFE56B96A763B2607099A373EBAD
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/9uEuifYarTIvERXwNJd--2LA3J0.roa
Signing time: Tue 25 Feb 2025 14:34:17 +0000
ROA not before: Tue 25 Feb 2025 14:34:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213893
IP address blocks: 147.45.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:87:af:e5:6b:96:a7:63:b2:60:70:99:a3:73:eb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 25 14:34:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6e12e89f61aad322f1115f034977efb62c0dc9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:55:11:55:a5:ee:15:4d:ce:f3:93:f1:8e:
43:b3:9a:d6:b6:89:f7:47:fe:c7:22:48:48:f8:89:
94:d3:69:71:c1:a7:97:ad:2c:bb:a2:70:b3:ed:47:
5a:17:db:d5:12:73:b3:6e:e9:94:8b:55:96:0b:71:
a5:d3:7e:06:10:c1:e9:03:e3:d5:05:bd:a2:8d:34:
1c:4a:92:0d:28:d4:73:14:1a:2c:23:50:c5:8f:85:
04:9c:9e:e4:fd:5d:3b:da:7a:e2:ad:e3:a7:86:2f:
d2:38:5c:d9:40:d0:97:cf:18:31:16:8c:55:71:0e:
8e:5a:a2:b8:9c:57:de:df:f1:fb:3d:68:89:60:80:
66:95:81:53:76:fe:1b:1a:ba:e0:2a:06:10:f1:00:
48:0c:21:92:08:5e:44:fb:61:a1:15:3c:7e:da:a3:
76:ab:58:25:e5:7b:df:41:e7:50:99:35:91:65:7f:
a0:b1:6d:3d:21:c8:ed:0f:ad:c5:72:20:ed:f6:d5:
ed:df:33:7a:07:cd:16:5f:c6:a6:1d:6c:8a:ef:3c:
17:d7:7b:bd:21:83:58:ab:6f:a1:07:19:30:37:fa:
50:23:a0:f5:81:07:a0:a4:b3:c4:d4:f5:4f:e2:72:
93:0f:93:ff:4d:44:4e:b0:ac:2f:76:4d:8e:c5:93:
a3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E1:2E:89:F6:1A:AD:32:2F:11:15:F0:34:97:7E:FB:62:C0:DC:9D
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/9uEuifYarTIvERXwNJd--2LA3J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.223.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:4f:b4:ca:bb:6f:c9:04:5a:e8:7f:a7:a4:01:5d:75:2e:78:
cf:3b:98:a9:ff:79:20:3e:a3:50:12:5e:fd:13:57:83:ce:bf:
2f:00:04:a8:40:90:03:ca:b2:91:51:99:d3:db:c9:84:f2:29:
aa:14:92:9f:48:9c:00:f6:cd:5f:46:1c:8b:66:95:a4:09:16:
82:80:5c:86:ae:82:d2:fb:56:2a:6d:85:2f:84:e9:2c:be:83:
1c:00:27:6c:32:d8:13:fe:4b:60:52:a9:f9:b3:dd:a5:49:76:
29:30:2e:eb:6c:0f:e4:58:ab:bd:73:10:97:1b:37:2b:df:8f:
c8:fe:c8:96:84:28:e2:89:e4:46:cb:7c:e5:c1:d2:2a:ce:69:
85:12:3e:97:0f:bf:65:0a:3c:49:b0:4e:15:43:5f:e2:74:88:
81:02:04:94:3f:f8:ac:d8:73:93:f0:32:48:22:a1:6f:36:b8:
5d:8d:d7:63:c5:60:92:f5:4e:7c:11:5a:ac:09:1c:31:cb:e3:
21:29:66:26:68:4a:4f:92:02:44:26:3e:20:0b:19:04:f5:2d:
b2:73:b7:9e:39:b3:91:d5:fd:01:24:9f:81:1e:e3:21:72:11:
39:19:cd:2c:0a:39:a4:f5:e6:f0:0d:94:dc:fe:f5:2f:78:92:
38:65:06:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:05 2025 by rpki-client