Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/9-A-IGVJov0vDRYMH0W5P-yt4UY.roa
File: 9-A-IGVJov0vDRYMH0W5P-yt4UY.roa (raw, json)
Hash identifier: 3/dYS9CuzNFb9uenUXE3PIZn505Ci8BtC4ySTrYDJvI=
Subject key identifier: F7:E0:3E:20:65:49:A2:FD:2F:0D:16:0C:1F:45:B9:3F:EC:AD:E1:46
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 0194221F93DCCFA9E99076170D6B24A22051
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/9-A-IGVJov0vDRYMH0W5P-yt4UY.roa
Signing time: Wed 01 Jan 2025 13:48:02 +0000
ROA not before: Wed 01 Jan 2025 13:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8100
IP address blocks: 45.159.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:93:dc:cf:a9:e9:90:76:17:0d:6b:24:a2:20:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Jan 1 13:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7e03e206549a2fd2f0d160c1f45b93fecade146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0b:ce:e2:be:a6:2d:fd:d1:50:44:e8:67:fe:
19:38:7f:95:69:be:a3:8c:0e:42:83:7d:85:00:05:
9b:fa:0f:83:89:d4:61:fd:83:58:e6:9f:6f:59:55:
7c:08:e8:32:07:b2:c5:35:8c:f9:86:7d:86:b0:6e:
bf:85:fb:02:80:fc:bf:ed:7c:88:34:0d:52:96:be:
37:50:8b:66:85:7f:f0:89:b2:64:00:fb:3e:b5:a7:
60:76:da:86:ea:82:22:f8:c1:30:7b:bb:98:0d:bf:
12:1a:bc:4f:71:11:6f:ee:bc:22:63:56:22:d3:6c:
f6:28:88:50:89:51:e8:4d:14:94:1e:2f:1f:36:6d:
66:82:04:4f:ef:a9:00:c0:88:41:8a:52:fe:93:ad:
6b:e7:87:83:6c:8f:ff:45:a0:99:51:98:35:bd:cd:
1f:37:5d:ac:97:e6:80:cc:50:66:f7:a2:f3:bc:30:
d5:53:fd:fc:e7:90:3c:45:35:75:87:a6:ca:96:3f:
b2:9a:9f:6a:ed:24:28:0e:72:de:9e:ad:83:b4:81:
88:82:1a:ea:22:da:53:fb:76:30:d6:04:86:76:98:
cc:fc:fc:59:35:ed:58:30:9d:51:cc:21:b4:6d:31:
a2:1c:59:bc:01:c1:af:5c:f5:98:4a:8a:c2:23:a9:
c6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E0:3E:20:65:49:A2:FD:2F:0D:16:0C:1F:45:B9:3F:EC:AD:E1:46
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/9-A-IGVJov0vDRYMH0W5P-yt4UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.15.0/24
Signature Algorithm: sha256WithRSAEncryption
50:0c:4a:33:52:cc:75:38:a4:06:eb:6f:83:a7:6c:d8:ca:eb:
90:a9:d1:46:f0:87:71:e7:b3:25:ae:e5:0e:ad:e8:b9:7d:2f:
24:74:47:44:e5:b4:a4:66:d0:27:a9:74:f1:b8:14:7c:b6:72:
c7:d4:1a:77:14:61:67:12:f9:e0:a6:9b:fc:fd:c8:17:77:be:
93:24:4a:78:80:e7:b6:98:0c:af:d9:92:8d:be:d8:25:f6:67:
51:57:8e:af:37:b4:93:9d:a8:93:8b:c1:8d:c3:61:e7:c3:7c:
8f:42:f3:19:9e:93:24:51:2f:0d:5f:dc:63:c9:15:a0:41:2b:
75:c9:cf:78:28:66:3f:b6:65:02:e9:49:51:c2:ac:a5:f7:01:
fa:3c:ad:70:3c:49:db:83:09:76:61:d2:55:71:70:0c:33:e5:
6c:d5:c7:8e:0d:ab:91:ef:24:96:38:2f:7c:c6:8f:3a:dd:ed:
ac:ea:57:02:21:87:e4:f0:61:ba:a2:66:f6:92:79:4c:b9:19:
71:b1:4c:e4:7a:11:19:97:b8:e5:95:2a:2b:09:78:71:f4:4c:
53:41:ce:41:3f:70:bb:e1:2f:ed:f7:ed:ad:8c:23:07:7d:12:
d9:ea:dc:28:38:e4:57:2c:b3:c9:bb:d2:0d:04:41:e1:6f:9c:
56:13:72:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:21 2025 by rpki-client