Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/AsEhPAtLD_IJju_sgBTAl0uGrFk.roa
File: AsEhPAtLD_IJju_sgBTAl0uGrFk.roa (raw, json)
Hash identifier: ZlU+ON1QiXQGKFTk10ft4qCnzLDqTIRZ7n4NMbjN5A8=
Subject key identifier: 02:C1:21:3C:0B:4B:0F:F2:09:8E:EF:EC:80:14:C0:97:4B:86:AC:59
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0194272E63C929002D2CDE6E043964E11AA7
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/AsEhPAtLD_IJju_sgBTAl0uGrFk.roa
Signing time: Thu 02 Jan 2025 13:22:19 +0000
ROA not before: Thu 02 Jan 2025 13:22:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49055
IP address blocks: 147.45.208.0/22 maxlen: 24
147.45.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:2e:63:c9:29:00:2d:2c:de:6e:04:39:64:e1:1a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 13:22:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02c1213c0b4b0ff2098eefec8014c0974b86ac59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:d0:36:17:1d:0c:b9:5b:44:bb:28:23:38:
8f:94:9a:a8:16:f6:80:9b:53:be:f2:af:74:49:7e:
7a:b5:56:1c:cb:38:c7:83:0a:26:39:cf:b9:9e:10:
db:12:6c:c0:ee:5b:d7:24:38:a9:f2:14:cd:9a:d0:
fe:0c:1f:25:79:01:49:4a:80:a6:79:5b:23:23:1d:
21:a1:da:5c:9b:b1:f1:8d:0e:74:45:c1:88:e2:4c:
07:3d:3b:3b:5d:a7:e3:12:f2:97:3c:b1:ae:5e:7e:
54:a8:97:15:82:1d:5b:e7:52:59:07:e2:53:74:3d:
d2:09:2b:05:4d:d8:c5:8b:bb:27:02:1d:17:c9:5a:
73:f1:c1:a3:a6:dc:da:f6:f3:72:02:96:40:74:e0:
ed:11:92:c5:6a:d7:6e:89:c4:8b:65:c8:92:f9:c0:
32:a3:9a:20:23:19:44:b4:df:89:e9:e0:7b:66:52:
45:49:d6:57:c8:3f:f5:a0:20:b6:70:38:2b:67:71:
fa:99:87:92:1b:c7:59:f9:77:03:43:27:5d:84:09:
39:56:bf:db:d4:d6:1a:82:19:e2:b4:65:1a:47:ff:
03:8c:16:24:7e:ae:f4:4e:8a:1e:bf:58:ca:4c:08:
16:7e:eb:9d:2d:b3:f0:b4:d4:db:47:a7:ef:98:ed:
d6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C1:21:3C:0B:4B:0F:F2:09:8E:EF:EC:80:14:C0:97:4B:86:AC:59
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/AsEhPAtLD_IJju_sgBTAl0uGrFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.208.0/21
Signature Algorithm: sha256WithRSAEncryption
43:28:95:a1:ae:35:17:d4:b0:ef:4a:ec:e0:bd:a6:fe:22:4c:
f8:a4:f1:65:c5:b2:b9:ed:6d:bc:f4:c8:f8:96:f4:65:f2:fe:
40:60:bb:9a:98:95:00:e0:d2:90:b6:5f:6f:e1:17:f5:41:39:
87:03:36:88:1e:59:67:a3:6e:9c:83:41:14:29:5d:f9:0e:95:
e5:05:6f:c6:18:c9:a5:f5:cf:38:bf:06:b0:4f:fc:44:28:d5:
18:a0:ce:22:50:e1:91:cf:07:ba:0c:d9:c8:dc:ae:a3:3f:96:
8f:44:e2:5a:fd:e5:7f:c3:70:25:56:d2:c4:75:cc:cb:5d:99:
68:ec:60:06:29:4e:7a:0f:0d:0e:47:16:d2:5d:f1:46:a6:fd:
49:22:f4:81:f6:67:e3:36:cb:ee:fd:71:9e:d1:c6:0f:79:77:
f0:36:36:72:44:0b:52:8e:bd:bc:4d:2e:f4:0a:23:38:1c:6c:
5a:25:eb:03:3c:3a:94:f8:7b:d5:3e:69:28:6f:8e:7d:d6:81:
ce:10:ed:0c:17:08:2f:d2:13:d2:08:a0:a1:a0:99:c7:f3:93:
74:9c:e7:04:1d:c1:7c:16:93:26:c6:05:76:48:0b:7f:24:1b:
20:a2:fe:19:8e:22:f0:2a:1b:80:27:81:7a:c5:50:29:1f:48:
b8:0f:d0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:22:37 2025 by rpki-client