Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/8Mnd-aabYi6gxcB8hByuplHiy3A.roa
File: 8Mnd-aabYi6gxcB8hByuplHiy3A.roa (raw, json)
Hash identifier: F5z3FeGBQAj6Qn9az/QGh8jfuMxcSrHf1y24nKzQ4ls=
Subject key identifier: F0:C9:DD:F9:A6:9B:62:2E:A0:C5:C0:7C:84:1C:AE:A6:51:E2:CB:70
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 019585DCABD679B6C07D38632976773849E9
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/8Mnd-aabYi6gxcB8hByuplHiy3A.roa
Signing time: Tue 11 Mar 2025 15:39:46 +0000
ROA not before: Tue 11 Mar 2025 15:39:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60068
IP address blocks: 45.154.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:dc:ab:d6:79:b6:c0:7d:38:63:29:76:77:38:49:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 11 15:39:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0c9ddf9a69b622ea0c5c07c841caea651e2cb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:6a:67:52:28:e5:a5:25:a1:df:f0:46:0a:
41:4d:87:fc:f4:45:fa:be:c6:84:2f:99:6c:c6:3a:
a9:90:fb:49:1f:72:31:e9:6c:f7:f1:b2:36:c8:37:
aa:e8:2b:63:f5:27:7f:71:11:b2:89:e2:31:10:a1:
e4:28:bf:cf:e2:f6:18:7f:33:66:d1:34:13:dc:6e:
af:ea:9f:90:a2:cf:d9:1d:26:1d:7a:6a:c6:7e:a3:
ae:ab:5c:a9:7a:ee:7f:08:ff:b0:5c:98:e6:f2:7e:
01:d2:62:69:77:83:fc:2a:05:0a:bb:7b:38:9f:32:
78:2e:db:4b:e1:92:73:fd:09:7c:c9:26:28:99:de:
c2:63:f0:a6:b8:6a:70:e3:ab:2c:8d:5f:c7:07:bf:
f6:aa:f1:93:50:72:3b:b3:03:77:83:e2:74:88:dc:
99:51:1c:4d:a3:c4:96:0e:e4:66:f2:5c:fc:6d:4d:
fa:29:bb:28:d2:b2:85:ca:8f:41:13:37:8b:f6:1c:
50:d8:f2:b4:bc:5e:e1:10:56:72:57:77:f7:f3:da:
a0:15:51:22:6f:bc:53:6a:36:a3:d9:03:e5:c7:8f:
ad:fe:0a:34:05:68:e3:42:02:4d:b6:ac:ea:14:4b:
b9:94:0f:15:37:ff:3d:c9:ee:f6:22:cf:72:af:1b:
05:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C9:DD:F9:A6:9B:62:2E:A0:C5:C0:7C:84:1C:AE:A6:51:E2:CB:70
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/8Mnd-aabYi6gxcB8hByuplHiy3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.159.0/24
Signature Algorithm: sha256WithRSAEncryption
97:55:e5:6e:e1:7a:2d:aa:aa:c7:6f:c1:d3:e4:bc:d0:13:c8:
7e:0f:e6:11:c9:65:fd:e8:1d:00:be:02:8d:0a:cd:5c:35:d5:
fd:ac:03:c4:02:a6:85:20:69:3a:fa:aa:97:a2:9d:1b:ce:20:
97:b7:a2:d1:d3:53:fc:d4:f3:eb:c3:5a:ff:0c:d5:d6:7c:df:
a3:d6:40:4a:78:6e:7b:b2:84:c1:c9:28:76:61:eb:53:c7:98:
e3:c2:01:fa:e2:43:75:dd:be:c0:f5:86:79:5d:f5:7e:37:87:
0e:f9:b0:92:91:fc:07:4c:ae:53:0a:02:b5:0e:96:1e:7b:4e:
81:46:67:b2:77:01:32:08:15:c6:46:c9:d0:58:cc:a8:27:dd:
73:cb:d5:38:93:6b:87:29:f4:a4:ff:ab:d0:1a:2d:ad:81:34:
cc:21:2c:59:66:74:e4:5b:e5:63:76:54:cf:eb:d4:66:50:ad:
0e:be:ff:85:37:a2:aa:d2:e8:62:89:3a:32:65:b0:1c:45:a3:
ca:f6:0f:30:95:7b:e4:ab:c5:e6:b3:9a:48:21:c6:4a:d6:04:
47:60:53:d9:8f:cc:a9:83:12:ca:23:d2:c9:df:54:8c:cb:ed:
83:7d:ee:e8:18:60:46:ee:ac:1c:ae:da:a5:a7:9e:6f:5a:05:
32:77:e0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:15:17 2025 by rpki-client