Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/bo4OF6d3WBwVINWIFOBfuv1feWM.roa
File: bo4OF6d3WBwVINWIFOBfuv1feWM.roa (raw, json)
Hash identifier: WIlEeoS03KZhYkB/WVxtVnsXKvvfA/PVNs3E9rKLLHc=
Subject key identifier: 6E:8E:0E:17:A7:77:58:1C:15:20:D5:88:14:E0:5F:BA:FD:5F:79:63
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 0195A4F8E5C808D7B7B3072008EC8C3A2F17
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/bo4OF6d3WBwVINWIFOBfuv1feWM.roa
Signing time: Mon 17 Mar 2025 16:38:49 +0000
ROA not before: Mon 17 Mar 2025 16:38:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63025
IP address blocks: 45.129.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a4:f8:e5:c8:08:d7:b7:b3:07:20:08:ec:8c:3a:2f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Mar 17 16:38:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e8e0e17a777581c1520d58814e05fbafd5f7963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:3d:f5:61:f7:7b:c8:d5:81:b6:5b:97:03:
a4:16:92:1d:5f:87:c2:65:5a:2f:c9:17:f7:8d:3a:
b9:c0:21:ad:0d:8a:9f:04:45:89:45:34:9d:0e:f1:
25:45:79:0c:f8:b2:8c:ca:c1:9e:be:fc:72:ae:1d:
92:ab:de:48:4e:3a:9b:06:ff:d3:98:2c:7d:92:f7:
3e:1a:45:a1:1d:53:38:5e:11:83:d4:50:74:01:a6:
21:76:98:ba:84:69:3f:5a:8a:77:c4:63:4a:ad:62:
b6:a6:94:e5:97:c2:63:7e:b6:f1:d4:25:07:21:a4:
6f:11:08:c4:c2:b6:a5:25:97:58:ac:3c:d7:6f:27:
2a:78:28:06:a1:ea:3f:28:f1:52:99:ca:81:2c:36:
60:a0:9f:61:c6:85:6e:9b:cf:a2:c3:c8:84:7d:ac:
a1:59:ee:dd:24:cf:53:ce:81:0e:e5:46:ea:86:fc:
2d:e9:22:d5:db:2b:db:55:e8:87:ab:a8:e9:e9:f7:
53:c4:29:ba:38:51:79:df:a4:72:03:f7:85:8f:ba:
80:17:b0:bd:7c:c8:f8:33:04:d3:ec:c2:76:ae:ea:
18:e9:0c:bd:97:de:96:24:23:a5:cb:9c:60:66:70:
d9:78:8c:c7:ad:5d:59:31:e5:ae:73:24:68:2c:80:
5f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8E:0E:17:A7:77:58:1C:15:20:D5:88:14:E0:5F:BA:FD:5F:79:63
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/bo4OF6d3WBwVINWIFOBfuv1feWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.241.0/24
Signature Algorithm: sha256WithRSAEncryption
00:21:59:52:eb:dd:6f:e1:d2:0c:68:dd:97:f5:50:d9:5f:00:
13:33:ed:b0:3c:e1:96:3e:97:44:20:51:3f:82:67:e9:d4:13:
8c:b5:e5:c6:04:73:61:8d:30:43:48:45:e5:24:20:b3:19:7c:
80:1e:b7:a4:64:d0:cf:a6:07:84:5f:57:e8:e7:29:13:42:0b:
9a:c1:66:d5:04:b6:e9:08:96:5d:66:c0:26:65:c3:76:f6:e9:
c6:2f:b7:77:05:61:ef:f4:68:9e:25:7f:5f:89:f7:fa:40:57:
38:31:db:c2:e9:75:44:48:95:4e:59:45:ae:1b:8b:36:c3:81:
12:5a:f9:5c:56:9f:2e:5f:48:ac:a6:d6:2a:30:19:db:63:1e:
44:e9:9f:d0:8b:2e:f0:ca:8a:32:ce:b5:e1:ef:40:a1:22:54:
02:3c:da:19:c8:ed:24:98:ce:08:8d:79:2e:ed:d5:69:87:68:
3c:bb:16:c6:1d:c8:17:1a:13:45:21:41:d3:2d:13:3a:4c:48:
19:4c:b5:c8:1b:80:30:dd:e5:2d:c8:74:f6:18:f3:ee:08:a8:
1a:64:3f:87:35:ea:27:96:4f:be:65:21:dc:c4:c4:cc:6d:cb:
32:0e:65:4d:5a:6a:ea:39:46:65:9d:6a:97:a0:b5:e4:f5:fc:
40:2f:1c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:14 2025 by rpki-client