Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/f2D3UV4sYjo4Otohoy79vFEF0Ag.roa
File: f2D3UV4sYjo4Otohoy79vFEF0Ag.roa (raw, json)
Hash identifier: KRgW361Frr8F6yZbGVOnQ7xVzqdchF195Wcn12RxysE=
Subject key identifier: 7F:60:F7:51:5E:2C:62:3A:38:3A:DA:21:A3:2E:FD:BC:51:05:D0:08
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 0195986B650F252EC940E5980C73D679AFD5
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/f2D3UV4sYjo4Otohoy79vFEF0Ag.roa
Signing time: Sat 15 Mar 2025 06:08:49 +0000
ROA not before: Sat 15 Mar 2025 06:08:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213693
IP address blocks: 45.65.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:98:6b:65:0f:25:2e:c9:40:e5:98:0c:73:d6:79:af:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 15 06:08:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f60f7515e2c623a383ada21a32efdbc5105d008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8d:e6:a5:e9:cc:a7:da:7b:09:25:5b:6f:19:
12:fa:62:d3:88:75:1a:28:35:d0:88:ad:3d:9e:a2:
5f:28:e0:29:4b:1b:95:fb:87:17:0c:ac:68:2e:77:
a1:a6:dd:b0:f2:ca:03:cb:95:6b:d6:e5:13:c4:96:
c9:cd:16:29:b1:59:ae:12:f0:5d:a4:4f:53:2b:b0:
0b:15:82:77:8a:92:03:87:a6:b8:07:25:bd:7a:4f:
d9:3f:c1:90:ec:5b:c7:03:c9:e8:73:23:79:17:62:
5f:19:e2:75:53:b1:4b:a4:85:62:b5:f0:83:4b:dc:
9e:0b:15:f4:07:58:fb:e3:12:89:69:bf:d7:1a:d7:
35:f4:e0:4d:0e:3a:e4:7a:3d:04:8e:e5:30:be:05:
84:be:62:92:86:a0:91:c5:76:e7:cc:51:61:28:fd:
42:c0:c7:c7:a6:f9:d8:f9:30:f6:4f:bf:a8:8e:2c:
a4:ca:06:70:bb:d6:79:41:24:6c:b0:4f:42:ec:00:
ac:52:e1:11:8e:f6:0a:98:c2:e8:1a:3f:5b:ce:ea:
1a:bb:b0:4a:59:16:cf:a9:a5:99:49:fb:0a:3d:8b:
a7:a8:ec:4f:7b:68:37:b8:86:3e:46:90:c0:d6:87:
9c:4f:c3:22:72:b6:bf:61:92:be:44:e5:fc:cf:4f:
08:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:60:F7:51:5E:2C:62:3A:38:3A:DA:21:A3:2E:FD:BC:51:05:D0:08
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/f2D3UV4sYjo4Otohoy79vFEF0Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.112.0/24
Signature Algorithm: sha256WithRSAEncryption
40:27:90:cc:02:b1:84:48:25:a8:65:a5:f2:9d:d3:c7:ee:f9:
4c:39:f9:55:8e:89:e1:e1:26:a4:28:83:38:34:cf:e0:ab:0a:
6e:23:c9:4e:7d:ce:f1:15:ef:3f:12:8c:90:94:be:8b:7e:b0:
01:d3:f0:5f:21:3c:3d:a5:39:cf:55:91:32:49:67:83:2b:c8:
79:94:69:cc:28:58:11:71:b7:94:c5:a6:12:c5:29:5c:c2:f9:
fe:79:29:b1:72:6c:c3:d1:f6:3b:e4:be:df:0a:de:11:8f:82:
47:6a:85:7f:20:50:59:28:cb:d5:4e:2e:63:c3:d2:e6:ff:ae:
72:f7:97:a0:06:bd:7c:27:ae:46:fc:28:f6:b3:2b:72:19:40:
bd:49:1c:30:23:a6:09:f6:ab:5e:23:d0:23:c1:90:86:0f:bf:
ea:7d:43:25:9f:e4:66:05:7c:3c:4b:f9:c6:47:0d:d1:16:a6:
35:f3:2a:35:cf:3a:41:90:c3:2e:00:3c:49:93:6d:b5:f6:e0:
d2:29:be:b0:2a:d6:19:b5:73:40:b7:90:e8:e7:80:86:65:5d:
3f:f1:f5:ab:c4:9c:38:8b:e8:92:0f:e3:cc:d0:74:cf:29:44:
cf:84:1c:ba:8f:2d:9f:93:07:f9:57:ce:5c:8c:71:4d:38:55:
87:95:2b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:54 2025 by rpki-client