Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/84x3PaWcAMu4m9T5fa870PeiheE.roa
File: 84x3PaWcAMu4m9T5fa870PeiheE.roa (raw, json)
Hash identifier: a/9oxv4KvgEVgoCDMjJiyZ098edxxir4zBlBcmgb+Nc=
Subject key identifier: F3:8C:77:3D:A5:9C:00:CB:B8:9B:D4:F9:7D:AF:3B:D0:F7:A2:85:E1
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 01957B5320564F8A79CDE8E93F5F6060BE5B
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/84x3PaWcAMu4m9T5fa870PeiheE.roa
Signing time: Sun 09 Mar 2025 14:33:20 +0000
ROA not before: Sun 09 Mar 2025 14:33:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 45.159.13.0/24 maxlen: 24
45.159.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7b:53:20:56:4f:8a:79:cd:e8:e9:3f:5f:60:60:be:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Mar 9 14:33:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f38c773da59c00cbb89bd4f97daf3bd0f7a285e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:23:4d:1e:43:c5:7d:09:7c:02:77:8c:e2:
a0:bc:2e:71:92:89:1c:ac:6c:4e:60:29:61:4a:77:
5c:ad:a3:b1:23:cc:56:70:8f:96:ce:90:70:6d:5f:
ec:f3:c9:53:c0:2e:85:c2:43:d8:f9:de:ed:a6:4c:
3a:93:fd:9c:57:83:74:8d:2e:04:77:71:8c:0b:0a:
15:1b:24:0b:ae:8c:80:a2:4c:8c:4d:d0:93:6f:73:
39:b7:93:72:d2:85:e9:b7:5c:60:38:9a:db:5a:d3:
cf:ff:e1:60:78:e7:e1:ba:7b:bf:4b:a7:e0:e8:1b:
75:77:9a:7d:52:60:65:32:f5:75:32:b2:16:8b:a3:
c8:14:d3:3c:c9:85:9d:17:13:d8:71:e7:98:70:29:
15:49:36:fd:05:42:ca:2f:b9:28:a9:b1:a0:7d:9c:
76:c6:a1:c5:33:c2:f4:8e:d6:53:95:f9:f3:67:1a:
23:20:9b:69:3c:43:cf:59:d5:6c:0a:31:bc:8c:45:
9a:e9:fb:8d:df:a4:1c:4e:ef:e3:fa:11:ca:83:9b:
34:c2:ec:6e:a9:6e:dd:73:3d:fd:8f:3a:50:2f:96:
44:54:9c:55:1e:f3:3f:65:cc:63:39:0a:a1:f8:21:
60:b9:e3:27:35:77:4c:08:29:3a:82:74:d5:4f:d0:
e8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8C:77:3D:A5:9C:00:CB:B8:9B:D4:F9:7D:AF:3B:D0:F7:A2:85:E1
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/84x3PaWcAMu4m9T5fa870PeiheE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.13.0/24
45.159.15.0/24
Signature Algorithm: sha256WithRSAEncryption
20:73:5c:7b:0b:8e:c1:35:43:50:5b:c5:50:e8:c3:f9:35:40:
7a:40:b9:f2:0d:7d:9e:fd:56:77:6c:8f:a2:7c:47:7b:42:b6:
4d:a3:d6:1e:cc:d0:dd:fd:1f:6b:8f:6c:86:ad:57:0e:39:ab:
16:72:37:e9:9f:e8:fb:3f:12:9e:93:78:ce:bc:b3:38:8a:4c:
43:1e:ce:b7:b9:69:75:db:68:a9:6d:09:8c:aa:ac:51:86:25:
c4:30:cb:e2:16:a7:e1:d5:91:1d:a8:bb:82:90:ef:58:08:fc:
aa:24:6c:94:03:60:52:d1:7b:d4:d5:ea:69:97:22:64:4d:56:
ee:97:ea:fa:e0:f3:21:d0:e6:d7:a6:51:d1:23:b0:58:d6:4c:
85:2f:f8:8c:31:65:7e:2b:86:b5:97:9f:75:9e:ff:97:12:f2:
5a:21:07:64:c0:51:29:d1:82:41:2f:cf:52:83:dd:2e:86:b9:
1c:0c:86:4a:c3:b2:1b:17:53:24:2d:22:5c:4e:83:c2:93:a3:
24:f0:5f:77:01:6c:42:99:32:6f:10:3a:34:c4:16:db:0c:4b:
01:49:d6:1e:42:3c:78:ad:8d:68:f2:e7:be:6b:35:30:91:90:
1e:a7:d3:77:ff:9f:ad:13:f3:92:70:7d:8b:9e:e4:cc:37:da:
dc:50:f7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:07 2025 by rpki-client