Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/vxP2xV6OFlVgEmCKqzHS4ueORns.roa
File: vxP2xV6OFlVgEmCKqzHS4ueORns.roa (raw, json)
Hash identifier: XA0YpPvIUuMXqQ6+3DygdU8XsryUZwl96I0JrCrgxDw=
Subject key identifier: BF:13:F6:C5:5E:8E:16:55:60:12:60:8A:AB:31:D2:E2:E7:8E:46:7B
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0194D2089A6816C0E0C0964CBB15C033F9BE
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/vxP2xV6OFlVgEmCKqzHS4ueORns.roa
Signing time: Tue 04 Feb 2025 17:36:06 +0000
ROA not before: Tue 04 Feb 2025 17:36:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215843
IP address blocks: 147.45.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d2:08:9a:68:16:c0:e0:c0:96:4c:bb:15:c0:33:f9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 4 17:36:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf13f6c55e8e16556012608aab31d2e2e78e467b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:08:f9:c5:ae:41:7a:74:3d:09:45:7c:ac:76:
cc:90:3f:e6:ef:d9:09:c9:8a:02:6c:a9:48:c3:36:
d3:f2:bc:11:6c:ef:19:87:9b:63:3b:7c:f9:e5:b9:
a7:85:4b:72:39:2e:34:14:e0:c6:a5:90:cd:fb:35:
f0:2c:b7:8c:55:6b:d8:f9:ae:33:2d:12:1f:3d:13:
69:0a:cb:cf:26:e8:4d:e6:18:b7:6e:bf:10:52:05:
83:03:b3:71:60:a1:3d:3e:61:14:81:ed:31:cc:48:
a0:33:08:f8:ce:03:5e:8b:81:2a:58:22:5f:26:4f:
a6:94:1f:af:eb:94:24:fa:f7:8c:70:98:31:f4:49:
08:a0:63:34:fb:7c:b7:c6:52:5f:eb:5a:cf:e0:ae:
ae:c8:81:d7:d0:07:46:3f:fa:32:85:a3:2d:23:d9:
a2:72:7e:cb:5d:7a:ed:0c:fd:b6:59:63:21:ad:47:
20:56:5e:30:c8:3f:bb:50:27:62:b2:69:d4:d5:f3:
8d:52:e5:a7:1d:40:9d:c1:2e:db:48:77:f8:d2:cf:
3f:d5:17:6a:d2:e2:88:9f:a4:ba:2c:08:f5:7c:b8:
20:6f:09:de:5f:2e:0b:35:66:5b:b9:f3:6f:b4:e2:
f2:9f:5d:fd:81:bd:30:82:20:f8:c9:36:01:ae:ef:
a5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:13:F6:C5:5E:8E:16:55:60:12:60:8A:AB:31:D2:E2:E7:8E:46:7B
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/vxP2xV6OFlVgEmCKqzHS4ueORns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.216.0/24
Signature Algorithm: sha256WithRSAEncryption
00:d9:05:af:f5:77:c2:33:f8:a5:fd:0c:6d:4b:20:23:9e:86:
48:87:f2:94:6e:1c:0e:77:70:3b:ea:a2:1e:a3:84:b6:28:37:
24:5c:6e:5d:7a:ef:d8:aa:f5:21:e1:31:2e:ee:46:1d:40:5a:
8f:b8:a2:fd:da:31:3e:d8:65:9d:50:c2:76:06:36:40:ba:f9:
b7:60:3f:6d:64:36:e2:6a:c3:a8:a2:46:00:fd:b5:aa:c3:ac:
41:e3:02:45:67:61:53:07:6e:bf:a0:f9:8a:a0:33:a0:6c:62:
c1:38:a4:65:cb:19:a0:8f:23:13:d0:12:40:21:f8:a8:96:7c:
84:c8:4e:0f:fc:e6:0b:4b:f9:ce:ec:88:46:91:c3:1f:8f:67:
41:05:f3:4e:5a:2d:26:47:8c:f0:b4:d7:1c:d8:6f:b7:64:78:
48:de:db:05:a4:1a:4d:30:1d:86:d6:21:7d:1c:7e:f8:48:6d:
73:07:1c:7d:6e:17:be:42:7b:30:e3:90:f1:79:34:5d:08:7a:
29:4c:9d:84:3f:1d:84:e4:93:53:ae:a5:40:d3:aa:54:78:f4:
76:fd:3e:d1:aa:95:1b:3f:62:69:64:07:e3:c2:ec:c7:c8:0e:
b5:56:7a:2f:22:86:5f:7e:33:d2:04:2f:22:45:59:dd:d8:72:
3b:57:ab:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:05:15 2025 by rpki-client