Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/1-ZqfLP815hGDJt6t_sphk_VckAI.roa
File: 1-ZqfLP815hGDJt6t_sphk_VckAI.roa (raw, json)
Hash identifier: n2sUfMbrBou21ku9LSWKRA9r7NQWYOBbPIyyDVy9hFg=
Subject key identifier: F9:9A:9F:2C:FF:35:E6:11:83:26:DE:AD:FE:CA:61:93:F5:5C:90:02
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018E21BC926BFC36248D3B4BD2AFB572A889
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/1-ZqfLP815hGDJt6t_sphk_VckAI.roa
Signing time: Sat 09 Mar 2024 05:43:10 +0000
ROA not before: Sat 09 Mar 2024 05:43:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.150.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:21:bc:92:6b:fc:36:24:8d:3b:4b:d2:af:b5:72:a8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Mar 9 05:43:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f99a9f2cff35e6118326deadfeca6193f55c9002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d9:4e:0b:f1:99:15:b8:90:ca:12:7d:51:97:
f5:02:87:27:76:34:dc:fb:f0:8f:f7:38:fa:d2:3c:
2a:59:d8:db:a3:3e:f6:a4:22:7a:49:c1:7b:5d:c9:
d9:0c:ab:81:aa:f9:80:26:d2:ab:7d:97:ec:79:1b:
06:99:b7:16:98:c6:e8:23:67:7f:62:53:ba:ff:ee:
0d:7a:9e:bf:99:08:9c:dc:6a:65:84:87:fc:ed:6d:
80:a9:15:2b:fe:77:a7:d5:56:a8:05:2f:02:2c:98:
39:46:5a:34:ca:e9:fa:d8:dc:7a:3a:97:92:0f:0a:
1b:83:dd:01:83:74:9d:70:c1:06:bf:6e:9f:de:d7:
a6:f4:74:de:1e:44:9c:86:b1:84:71:a4:1e:dc:02:
09:26:13:01:dc:0c:79:20:be:ca:67:4f:c7:3c:67:
ad:8a:8d:f5:0c:e4:da:f6:c1:80:3b:2e:9c:ec:53:
0b:d0:78:6b:d2:04:45:4a:89:d3:d0:b5:1c:95:0a:
87:20:fd:a6:4d:5e:8b:ec:15:5e:14:16:29:f3:03:
ab:d9:32:80:70:ab:9c:e2:97:11:fd:1a:f3:e7:59:
83:7d:91:59:f7:0e:79:94:57:35:e3:47:fe:54:a6:
0e:dd:55:cd:a1:e1:fa:68:8f:59:fb:9f:8b:3a:d1:
ce:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9A:9F:2C:FF:35:E6:11:83:26:DE:AD:FE:CA:61:93:F5:5C:90:02
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/1-ZqfLP815hGDJt6t_sphk_VckAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.172.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:d5:cc:40:2f:88:fb:5e:44:a5:73:aa:c9:32:11:cd:b6:7a:
4c:8f:83:e1:1e:82:fb:7d:17:dd:6b:a0:27:ed:d3:0c:a6:06:
75:e7:40:77:88:6e:9e:d4:66:ab:77:3c:3c:f0:f1:5e:a6:a0:
46:3c:0e:ea:1b:ce:1d:61:b6:cf:74:ac:14:30:5d:70:b1:79:
20:6a:a0:74:0e:b1:6a:35:c3:d3:55:ef:aa:e0:01:70:10:ff:
52:fc:12:8a:c3:a0:2b:bf:95:06:7c:97:e1:c0:9d:22:82:c6:
59:b1:d8:41:de:75:6e:04:99:a4:bb:04:48:8f:6c:03:b3:e4:
23:c5:9a:52:53:c6:1e:b7:f9:86:38:de:67:25:c0:78:52:de:
64:f4:c1:87:ed:41:38:95:2c:5f:be:3f:ba:45:85:9c:97:23:
c5:06:e1:03:1e:58:45:7d:fa:d3:e5:e7:5b:b2:0f:f5:7f:36:
49:3e:88:ad:bc:71:25:e5:df:a9:f3:cc:c0:a4:09:95:87:95:
b8:aa:56:d6:9a:b2:a6:3d:e5:e1:0e:90:6e:d4:54:74:41:39:
1e:98:66:fa:06:16:4f:64:cc:1c:f8:24:8f:24:55:9a:bf:8b:
f7:c8:10:c2:7b:32:52:b7:fd:99:3b:38:65:81:d4:84:24:17:
cb:ae:9f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:47:33 2025 by rpki-client