Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/Dio0fKwjaz8mgVWvDfl4tq6lDf4.roa
File: Dio0fKwjaz8mgVWvDfl4tq6lDf4.roa (raw, json)
Hash identifier: pj+y9YgulsDhHROR3sIL55OAwSn4ndZYjqojLyj44RM=
Subject key identifier: 0E:2A:34:7C:AC:23:6B:3F:26:81:55:AF:0D:F9:78:B6:AE:A5:0D:FE
Certificate issuer: /CN=159d30b70b9a83cb8ed5501f554a7feca382f959
Certificate serial: 019424B3B142F425B328991971EE12CDA9A0
Authority key identifier: 15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/Dio0fKwjaz8mgVWvDfl4tq6lDf4.roa
Signing time: Thu 02 Jan 2025 01:49:03 +0000
ROA not before: Thu 02 Jan 2025 01:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199703
IP address blocks: 45.157.144.0/22 maxlen: 22
2a13:f000::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b1:42:f4:25:b3:28:99:19:71:ee:12:cd:a9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159d30b70b9a83cb8ed5501f554a7feca382f959
Validity
Not Before: Jan 2 01:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e2a347cac236b3f268155af0df978b6aea50dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9d:6a:96:d5:fc:05:c1:b1:35:00:69:2f:3d:
a0:c3:69:14:99:be:a6:4d:8b:6d:f8:96:06:f6:43:
e7:5f:c6:9b:8c:af:3b:87:a7:79:bc:cb:0b:f5:12:
80:a8:fd:a7:eb:3a:23:e1:15:a2:f5:8c:fc:0a:ad:
a8:01:d0:3f:74:ce:e5:50:07:df:af:ee:60:a3:b9:
4c:d7:45:48:d3:cf:8a:c2:53:a2:1d:d9:b2:37:82:
be:fc:a5:aa:25:c9:58:55:a7:3b:a8:b4:ee:81:8a:
c2:7f:45:f7:95:c2:ef:a3:68:13:48:b1:27:5b:61:
9e:84:3c:bc:9b:02:cd:4d:7e:20:3e:44:63:25:37:
fb:43:11:44:5e:73:be:99:b8:63:97:7b:3f:83:72:
25:dd:78:9c:6d:93:6f:40:0d:b7:01:e4:ec:32:d7:
34:e6:8b:bc:18:33:fc:91:f1:df:12:b4:bd:57:e3:
ae:58:78:1a:bd:5e:48:cd:d4:2e:74:82:fc:8d:c4:
f0:9d:a7:6f:1c:3f:c6:71:5e:f9:ab:59:3f:0c:ff:
9d:2b:94:49:93:c7:2a:e4:bb:0a:90:8f:14:5e:0a:
90:b1:68:9a:3c:1b:e6:ad:fe:8c:15:69:9a:4f:5e:
15:12:51:7d:63:a1:3b:40:e3:c2:3d:47:ba:f2:0f:
75:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2A:34:7C:AC:23:6B:3F:26:81:55:AF:0D:F9:78:B6:AE:A5:0D:FE
X509v3 Authority Key Identifier:
keyid:15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/Dio0fKwjaz8mgVWvDfl4tq6lDf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.144.0/22
IPv6:
2a13:f000::/32
Signature Algorithm: sha256WithRSAEncryption
7d:82:5f:d4:9f:b1:11:a3:cd:08:91:68:7c:72:bb:12:31:74:
a6:9e:1c:8a:8f:cd:20:aa:a1:c9:ae:d6:c1:0e:18:2a:ed:61:
cc:e4:29:bb:ad:9b:46:89:24:b6:43:4f:9d:27:00:8f:e5:21:
ac:28:d9:d3:21:0f:d8:37:49:79:29:38:30:b8:0a:3f:e8:e8:
1c:30:c7:ab:88:1c:87:67:99:ab:54:08:3d:3e:ca:06:9d:3a:
31:4c:7b:a7:22:e6:d7:cb:4f:a6:0e:12:4d:1c:0e:f0:d3:e2:
2a:35:f4:29:28:a2:5a:df:d7:0d:cb:3a:ba:02:c5:e6:7f:2f:
a3:3e:7d:66:e1:62:b3:c1:6f:45:23:38:2c:e0:38:5d:6e:65:
89:d8:80:fb:7c:56:25:be:14:fe:76:01:93:8b:dc:ed:bc:ab:
2c:6a:e7:20:0b:ae:1d:97:32:a4:16:b4:54:26:36:40:51:f4:
6f:22:35:a6:81:52:6a:6e:e3:bb:fe:2a:50:89:c7:d6:dc:ff:
b9:fb:6e:a5:bc:30:38:53:84:73:9d:a7:ac:2d:38:1c:a9:a8:
3e:4d:64:94:81:fb:f9:64:52:e6:c0:76:ad:24:24:e2:f4:2f:
1b:b7:9d:8a:71:47:93:8c:1d:b9:ff:ac:ee:27:98:d1:e0:8a:
0b:f5:05:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:30 2025 by rpki-client