Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/3AF9vTlPGn0LP4BTNbyIFClKdiE.roa
File: 3AF9vTlPGn0LP4BTNbyIFClKdiE.roa (raw, json)
Hash identifier: ErhtxdYMFohKoMlTBF3cO6zqIkHAYZYYcv46l0Ht4TU=
Subject key identifier: DC:01:7D:BD:39:4F:1A:7D:0B:3F:80:53:35:BC:88:14:29:4A:76:21
Certificate issuer: /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial: 019428268775910DFA3DBDAB1AD1E27810F9
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/3AF9vTlPGn0LP4BTNbyIFClKdiE.roa
Signing time: Thu 02 Jan 2025 17:53:21 +0000
ROA not before: Thu 02 Jan 2025 17:53:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43366
IP address blocks: 45.154.8.0/24 maxlen: 24
185.241.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:87:75:91:0d:fa:3d:bd:ab:1a:d1:e2:78:10:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
Validity
Not Before: Jan 2 17:53:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc017dbd394f1a7d0b3f805335bc8814294a7621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cb:21:c4:08:a2:e5:09:69:68:3c:33:73:95:
d4:bc:cc:c0:60:60:81:f4:7b:67:35:4f:18:36:f2:
92:93:5f:33:87:2a:1f:44:9a:2f:6c:eb:d7:a3:ae:
7a:e2:6b:ec:44:52:fd:87:26:93:dc:98:65:86:84:
53:63:25:ee:ef:8b:48:09:32:c7:2a:59:28:4b:a5:
4c:95:d4:38:27:a4:1e:4d:9a:a9:64:0d:00:a8:0c:
1d:15:ff:d1:c1:6c:a7:15:b5:94:73:9d:c2:cf:f7:
3d:cc:5c:00:7e:25:ce:87:06:a3:96:91:c0:0a:c3:
0e:ae:81:9a:3e:63:8d:c8:7a:58:43:46:9c:a2:41:
89:9d:28:96:f3:44:ce:90:5c:0e:71:0a:fc:21:a8:
65:b8:3c:8b:49:02:2e:7d:bf:19:5c:a0:f0:8c:8f:
a5:b0:16:e2:0b:62:f5:d6:7a:41:d3:66:f5:a6:0f:
a5:8a:86:56:e0:c5:6b:ae:a6:97:72:ca:26:28:09:
15:9e:a2:76:c3:5e:f8:a9:ee:ec:49:14:18:1a:35:
76:96:bd:2f:92:99:a3:70:5a:c3:b7:3a:f8:78:26:
ed:7f:80:be:9e:f5:e3:75:c2:89:fa:44:ce:52:61:
22:af:91:f0:12:17:7c:4c:54:28:66:43:77:90:08:
ef:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:01:7D:BD:39:4F:1A:7D:0B:3F:80:53:35:BC:88:14:29:4A:76:21
X509v3 Authority Key Identifier:
keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/3AF9vTlPGn0LP4BTNbyIFClKdiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.8.0/24
185.241.188.0/22
Signature Algorithm: sha256WithRSAEncryption
28:18:c2:b9:9b:a3:4c:a0:9a:09:96:53:fd:63:2e:bf:2c:52:
64:76:55:87:bc:87:3e:5f:3b:84:c7:b7:2c:cf:20:db:b5:fd:
f0:71:a3:c1:be:aa:35:89:9d:12:7e:da:a1:3b:df:f6:07:2b:
38:22:63:bc:1d:9e:a2:91:0e:fb:83:25:55:bf:42:ca:02:c1:
74:32:05:d4:d6:b5:9e:85:10:fc:c6:b3:0d:22:d6:f8:98:47:
d9:33:79:52:30:cf:a6:e5:49:b1:6b:d0:ef:6d:3d:50:f6:76:
28:48:ad:ad:d6:e6:97:6d:e7:8c:0f:ff:3a:66:c0:bf:3f:e3:
03:0e:a2:db:af:58:18:1b:9e:4a:d2:c5:64:4d:fe:9c:89:74:
0e:88:de:06:ea:47:f0:3a:de:91:95:5c:4d:4e:35:8a:56:7f:
24:50:01:c3:fe:d6:39:e8:fe:d5:be:3c:3d:4d:31:8f:60:1c:
67:02:24:c3:cf:39:a2:ff:11:d3:7c:bb:15:0e:7d:a0:af:89:
f7:4a:f8:3a:63:e0:7d:6a:4f:f2:a4:6c:6d:b7:9d:38:a4:7f:
7d:61:a9:34:59:c9:b2:59:39:0b:fb:fe:b5:c8:9b:b8:36:a4:
bf:0c:64:19:36:2f:ee:0d:2e:d3:89:2b:06:41:1e:a6:97:c4:
1f:f7:c3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:02:20 2025 by rpki-client