Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-uSwUPsoPck4mmJj3xJ7IXLQsms.roa
File: 1-uSwUPsoPck4mmJj3xJ7IXLQsms.roa (raw, json)
Hash identifier: vnDvpDZEOZtWHCEmCVjEztMi5o0xBGS8JCwKX/f3jak=
Subject key identifier: FA:E4:B0:50:FB:28:3D:C9:38:9A:62:63:DF:12:7B:21:72:D0:B2:6B
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019427487FC2FDBA478227FB84C2ADCCCA0E
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-uSwUPsoPck4mmJj3xJ7IXLQsms.roa
Signing time: Thu 02 Jan 2025 13:50:50 +0000
ROA not before: Thu 02 Jan 2025 13:50:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33185
IP address blocks: 45.135.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7f:c2:fd:ba:47:82:27:fb:84:c2:ad:cc:ca:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fae4b050fb283dc9389a6263df127b2172d0b26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:bc:51:ff:31:2a:35:b8:c0:7a:f7:78:1a:
ed:f5:15:ef:38:18:83:c6:52:08:dc:9c:3f:aa:58:
20:af:e8:08:30:34:d1:3d:b7:1d:a1:65:04:3b:c9:
74:87:14:b6:50:66:83:09:8f:5c:32:5e:80:00:0a:
17:d2:74:e6:ea:a6:0c:dd:a5:fc:92:ef:07:87:f8:
41:3f:26:23:96:88:ff:52:35:a2:c9:f1:56:8f:a8:
04:40:5c:b4:5c:34:81:6c:96:2c:bf:3d:7b:b0:a0:
80:f4:5f:c2:3c:7a:4d:7f:0e:05:50:e2:af:62:3b:
9c:2f:e3:97:c8:41:05:55:10:ff:81:78:bb:9f:1b:
e4:9f:40:7f:60:86:c8:53:2e:8f:1a:0d:cf:9c:3f:
55:93:d7:d9:ea:ec:56:6c:3a:b7:be:ad:28:c6:fb:
ba:75:f3:6a:ae:22:27:d7:f5:e5:51:b7:fe:ea:42:
6a:e5:0b:7f:a9:5f:4c:2a:80:17:c8:58:70:97:30:
4e:6f:54:3c:c8:7a:66:80:35:71:80:1d:34:55:22:
45:cf:9d:9f:a8:e1:0a:4b:cb:64:4a:3d:64:45:53:
1e:12:5d:f4:68:1b:73:46:c5:d5:7d:4d:d0:b0:af:
0c:05:1f:86:0a:f4:ae:48:0d:76:fa:e4:28:cf:6d:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E4:B0:50:FB:28:3D:C9:38:9A:62:63:DF:12:7B:21:72:D0:B2:6B
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-uSwUPsoPck4mmJj3xJ7IXLQsms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.148.0/24
Signature Algorithm: sha256WithRSAEncryption
33:df:1a:a5:fe:a8:5a:ea:8b:7e:3a:e2:3f:94:de:f5:84:aa:
29:1c:89:07:e9:72:5a:28:43:af:76:2c:de:00:4d:e0:4e:c8:
df:92:96:60:3f:dd:b3:59:ea:e9:31:35:56:f4:ae:a2:db:33:
14:eb:2e:6e:02:8c:6a:f5:9b:74:88:23:a5:d6:09:74:fb:46:
0e:96:28:c2:d8:6a:3f:14:0d:8a:1b:d6:95:9f:97:4a:6d:d0:
5f:9c:7e:dd:f4:00:f0:3d:bf:b9:ee:1f:be:43:9d:e0:f5:a5:
6d:bf:f1:64:de:b5:18:dc:67:7f:63:41:7d:9b:bd:6c:22:04:
8d:97:a4:1e:d6:e4:62:2f:af:d5:f1:84:23:0a:7f:e8:57:8e:
dc:bf:0f:48:93:d6:94:70:df:75:ce:46:37:b8:86:14:70:6c:
72:fd:71:c5:20:90:4a:d4:43:71:ef:d7:29:50:4a:26:48:9c:
8f:f6:ad:03:74:54:a1:54:23:c1:e8:7c:20:c7:7f:08:30:bb:
2d:ab:cb:48:99:59:2c:22:19:e0:da:c0:95:8a:02:b5:e0:b9:
ac:1b:1a:ab:81:ad:6a:2f:2a:b6:bd:60:b5:7d:de:8c:74:fc:
a5:51:57:d3:b1:3a:9c:5e:05:3d:78:a6:05:e7:40:46:0a:9c:
0a:a9:c2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:34:58 2025 by rpki-client