Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/H7RDadMRjVcvma8PhFugcKUdoT0.roa
File: H7RDadMRjVcvma8PhFugcKUdoT0.roa (raw, json)
Hash identifier: 6sD2c8/NrghCekThtfpslB8AAW0einNgCY8Rjyouu9I=
Subject key identifier: 1F:B4:43:69:D3:11:8D:57:2F:99:AF:0F:84:5B:A0:70:A5:1D:A1:3D
Certificate issuer: /CN=3de2681dda00702a7597a71257e14f7a725e890e
Certificate serial: 0195D40EBB2950B3650D62D587B4BBD8BFEB
Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/H7RDadMRjVcvma8PhFugcKUdoT0.roa
Signing time: Wed 26 Mar 2025 20:04:50 +0000
ROA not before: Wed 26 Mar 2025 20:04:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206024
IP address blocks: 145.43.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d4:0e:bb:29:50:b3:65:0d:62:d5:87:b4:bb:d8:bf:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e
Validity
Not Before: Mar 26 20:04:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fb44369d3118d572f99af0f845ba070a51da13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:df:b4:5f:57:96:67:b2:42:7c:5c:50:26:54:
77:75:7d:7b:a6:70:91:4e:a5:1b:a1:ec:a0:0a:7a:
b2:f6:0c:9d:1a:09:00:f7:b1:70:4e:37:07:e2:4b:
60:30:82:a1:ff:1b:6c:63:64:7f:25:c1:bb:5c:fb:
4c:0b:45:88:94:13:b1:46:f8:19:e3:92:d7:66:70:
c0:88:cd:de:be:dc:13:05:72:ef:98:c4:5a:bb:4d:
3b:48:b3:9c:89:1c:b3:13:2e:97:c9:81:0f:6f:e7:
aa:44:e8:7b:44:a1:bf:b7:10:d3:d5:63:9a:cc:39:
85:1c:eb:a9:22:34:75:14:2e:8b:7b:56:b1:1b:31:
66:89:22:29:52:b9:9b:a8:12:5c:50:3e:45:7c:e4:
d3:53:aa:9a:7b:ae:2d:e4:cd:04:cc:ce:a9:8b:73:
b0:89:8e:7a:4e:85:74:8f:a4:83:21:6f:01:3e:e0:
28:d4:95:0e:c0:80:02:9a:54:78:8a:21:ab:fd:f7:
13:79:f6:32:43:59:4f:3f:2a:b3:37:20:7e:ea:4c:
ae:1f:7f:d8:94:64:b6:22:5d:51:bf:c7:1d:b7:e4:
11:32:63:c4:8c:4e:fd:1a:58:72:46:a4:a1:23:9c:
23:5b:29:8e:f1:e6:4b:fa:12:62:ac:b5:95:7c:24:
4b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B4:43:69:D3:11:8D:57:2F:99:AF:0F:84:5B:A0:70:A5:1D:A1:3D
X509v3 Authority Key Identifier:
keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/H7RDadMRjVcvma8PhFugcKUdoT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.43.254.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:aa:cb:25:e6:c7:3b:63:55:a3:53:07:34:dd:fe:2d:21:50:
f0:ec:b4:b5:67:a8:45:02:c5:d2:42:f8:25:45:7b:54:2f:42:
33:c3:2c:c8:f5:45:92:cb:e9:bd:c1:68:c6:61:24:f4:73:06:
a1:8e:a7:8f:75:ae:fe:6f:19:bc:d9:d7:19:be:7e:ec:db:0e:
94:aa:ef:a3:46:0c:48:62:60:55:c1:93:f2:2e:cc:7d:81:a4:
99:96:a5:b4:8a:e2:a3:46:0a:75:67:29:97:36:93:e0:18:c0:
c1:39:2c:2f:01:38:9b:7c:a3:47:c6:d5:8e:1b:02:72:ea:c2:
84:04:5b:36:5a:cb:0d:f9:2c:9c:8a:46:e6:10:6b:fb:16:11:
39:9d:05:1c:58:91:77:f1:ac:b4:fa:7c:31:f4:c8:06:39:2b:
7f:34:d2:79:8f:18:90:96:1a:d6:58:6e:81:a0:4f:fb:f9:3a:
a6:aa:99:37:c6:d4:32:c0:6e:5e:35:6d:64:f1:d8:db:a3:b6:
ed:b4:0d:50:28:59:a3:d2:8e:90:77:8d:be:a7:42:17:fe:a1:
70:18:7d:8e:b9:aa:35:bd:50:13:e3:3f:e2:ed:0d:3d:d9:c3:
4c:66:2b:08:c7:92:ea:2d:90:32:57:a9:4e:2b:3b:1b:0d:ff:
5e:36:20:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:45:00 2025 by rpki-client