Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/AXM-u9-ArSlyw8_-qgLr4I2-w_Q.roa
File: AXM-u9-ArSlyw8_-qgLr4I2-w_Q.roa (raw, json)
Hash identifier: lutyP2cKjL5Nv82xf6I8MvyNKxEXaxwMGdfQHF8SkAo=
Subject key identifier: 01:73:3E:BB:DF:80:AD:29:72:C3:CF:FE:AA:02:EB:E0:8D:BE:C3:F4
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019546223A44969A780D9566153F27461E51
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/AXM-u9-ArSlyw8_-qgLr4I2-w_Q.roa
Signing time: Thu 27 Feb 2025 06:40:03 +0000
ROA not before: Thu 27 Feb 2025 06:40:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213828
IP address blocks: 147.45.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:22:3a:44:96:9a:78:0d:95:66:15:3f:27:46:1e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 27 06:40:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01733ebbdf80ad2972c3cffeaa02ebe08dbec3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:76:3b:51:3c:ee:13:6f:61:a8:2b:09:0c:9b:
56:79:ad:06:c6:cf:6a:56:52:c1:4e:55:72:01:40:
d9:86:df:2d:44:2b:a8:a2:fd:92:3b:b8:1d:2f:e4:
2a:cc:3d:41:35:e6:45:f6:d8:f7:0c:0b:d4:ae:b2:
46:ea:1e:e2:d7:a1:b1:f3:20:67:d1:3b:cd:21:70:
93:8a:41:4c:cd:9f:4d:57:38:85:7b:c9:27:b8:59:
92:8c:69:a7:4c:89:05:b9:fd:a7:ed:9b:b5:7b:99:
6f:63:77:07:22:a7:bd:f2:a4:92:ad:87:9f:b0:71:
93:81:45:08:63:30:86:50:31:7d:99:08:9a:f7:b7:
00:4f:43:d1:ed:e7:e1:39:ef:cc:4d:76:50:a3:08:
c2:c8:c7:59:77:3c:39:a3:4a:38:6e:12:f2:7e:d8:
2e:bd:66:39:4b:db:fb:ed:a0:60:37:84:40:57:3d:
ed:5e:ed:d3:9c:7d:96:3c:ee:4c:d6:f2:35:cb:60:
81:62:a3:2f:91:3f:1e:c4:36:d5:15:7a:2e:f0:93:
84:20:d8:66:53:85:b3:b0:37:44:a2:0f:a0:fc:a1:
4c:5d:26:be:ff:3c:95:01:a1:ef:b3:ca:c9:2e:ab:
9e:af:c7:94:5d:9d:39:87:fa:06:ac:1a:44:9d:d3:
5c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:73:3E:BB:DF:80:AD:29:72:C3:CF:FE:AA:02:EB:E0:8D:BE:C3:F4
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/AXM-u9-ArSlyw8_-qgLr4I2-w_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.47.0/24
Signature Algorithm: sha256WithRSAEncryption
77:67:84:1c:a0:64:63:e7:1f:0c:92:81:a9:de:cf:e4:a2:90:
cd:0b:28:49:d9:5f:53:1e:9f:4a:79:20:b9:0e:08:c7:2a:3e:
c2:b1:92:58:ff:ff:01:1f:70:1a:30:b1:31:3a:7f:a6:44:df:
44:8a:8c:9d:cd:fc:81:ed:6b:b7:00:89:9f:b3:59:b4:c0:83:
2a:c3:40:42:22:bd:cf:42:10:04:28:7e:64:e0:0c:fc:f9:ab:
5f:15:56:98:e7:21:6f:d0:29:38:96:7e:ee:61:23:6e:e9:c0:
fb:4d:95:cb:47:ff:f4:ef:65:26:5b:58:4c:05:d8:c0:34:5c:
85:a2:96:62:2a:aa:07:ac:bd:5d:e7:5c:a6:91:6d:29:9f:04:
e0:3b:cf:7a:2c:6e:da:11:db:80:05:57:db:63:2e:3b:8b:b5:
7a:4b:f1:c7:a5:59:ae:03:b8:77:22:0a:ba:73:16:af:7e:02:
21:00:11:52:84:f7:1b:e2:51:f5:6b:3b:eb:6e:1c:09:0c:af:
57:80:e8:7e:a2:08:89:d8:7d:2c:44:07:d1:8b:55:7d:79:40:
09:36:33:11:fd:bd:99:24:e7:b8:33:6f:af:89:d4:fe:54:67:
1f:ee:92:14:c1:20:a7:7e:50:83:07:82:2f:a4:b1:39:1e:00:
27:74:03:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:15:55 2025 by rpki-client