Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/IH_OZG4tQIf8B1LlcYbElSANPoE.roa
File: IH_OZG4tQIf8B1LlcYbElSANPoE.roa (raw, json)
Hash identifier: p+OtUE1Aqa/Cf40bvgwM+BHBnnpd8j6NMDlGq+PRcD4=
Subject key identifier: 20:7F:CE:64:6E:2D:40:87:FC:07:52:E5:71:86:C4:95:20:0D:3E:81
Certificate issuer: /CN=a1a01f76a42be8717befdce1676215988a4dfc73
Certificate serial: 018C1DF2D11046D3BEEC75EDAE3CED4046BD
Authority key identifier: A1:A0:1F:76:A4:2B:E8:71:7B:EF:DC:E1:67:62:15:98:8A:4D:FC:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaAfdqQr6HF779zhZ2IVmIpN_HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/IH_OZG4tQIf8B1LlcYbElSANPoE.roa
Signing time: Thu 30 Nov 2023 01:58:21 +0000
ROA not before: Thu 30 Nov 2023 01:58:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31863
IP address blocks: 45.142.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1d:f2:d1:10:46:d3:be:ec:75:ed:ae:3c:ed:40:46:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a01f76a42be8717befdce1676215988a4dfc73
Validity
Not Before: Nov 30 01:58:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=207fce646e2d4087fc0752e57186c495200d3e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5c:83:a7:f1:f7:cb:2c:24:c9:66:6d:7d:ec:
db:eb:e0:ba:0d:3d:84:e8:fb:39:77:a7:bd:46:50:
58:a4:3d:73:f1:2c:f9:ae:47:9b:34:24:c1:30:29:
ac:41:08:eb:21:25:8b:0e:ef:b1:e8:1e:be:ac:83:
22:97:69:c4:6e:75:cb:e7:7d:20:e2:25:50:2e:6b:
38:05:c7:a5:7a:de:6e:8c:30:8a:09:84:24:cd:9b:
34:fa:5a:c2:bc:6c:39:dd:15:6a:9a:5b:d1:69:49:
54:a6:c8:b7:87:11:b6:0e:e3:fe:d5:ea:95:73:99:
28:73:61:0d:fc:40:cf:97:07:fd:4d:d7:72:f8:3b:
e2:27:0c:9d:37:bc:a4:9f:b0:67:7e:cc:5a:d9:39:
36:4b:6d:37:dd:52:48:58:10:38:8f:55:e1:4c:81:
ef:b1:4b:3b:cf:23:e2:91:2b:ca:18:81:4e:5b:9c:
13:40:a6:a3:31:28:57:ad:64:5a:a8:22:9f:94:d0:
80:a5:7e:82:1f:33:80:99:74:ab:a4:8d:6b:3c:fa:
e0:9a:3c:fd:b0:01:8b:56:6a:71:bf:3a:a0:c9:66:
c8:e7:16:00:df:c7:47:54:0f:65:33:7b:e7:c5:a7:
4f:6b:70:fc:d3:9f:e3:01:33:2c:d4:ec:c3:b2:5f:
7b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7F:CE:64:6E:2D:40:87:FC:07:52:E5:71:86:C4:95:20:0D:3E:81
X509v3 Authority Key Identifier:
keyid:A1:A0:1F:76:A4:2B:E8:71:7B:EF:DC:E1:67:62:15:98:8A:4D:FC:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaAfdqQr6HF779zhZ2IVmIpN_HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/IH_OZG4tQIf8B1LlcYbElSANPoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/oaAfdqQr6HF779zhZ2IVmIpN_HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.154.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:2a:fa:35:8e:79:a6:e0:b5:b4:0e:86:22:d4:3b:73:77:68:
c7:c8:2b:cc:87:49:0a:03:c7:96:50:2b:b9:34:50:35:d2:44:
09:aa:a6:dc:4e:4d:96:93:5b:db:0c:a0:20:f9:17:67:36:df:
9e:ab:8e:a0:57:54:d5:1c:92:a6:d9:68:4f:70:47:4f:e9:ec:
5e:b1:89:88:0f:36:35:dd:da:1c:8b:4e:a2:9b:1a:f9:4b:1f:
9a:6e:a4:52:1c:48:ec:2b:74:96:1a:15:19:90:95:a2:26:11:
a5:fa:ae:a7:88:71:31:f8:01:9c:48:a4:10:de:02:ae:98:28:
87:21:a2:51:71:f4:f8:a5:11:18:3b:34:d1:6a:3d:af:75:40:
43:b7:15:c0:1d:a1:6c:db:1e:41:c8:dd:85:6f:df:d9:31:fb:
5c:29:c7:95:2c:53:59:f1:5e:8e:2a:e5:4e:6f:f2:9c:c2:c8:
ba:86:f5:a4:db:e6:04:e6:b2:25:fc:1e:10:da:0c:19:63:70:
52:fb:57:78:4e:8e:98:f0:28:75:44:fe:ff:99:01:3f:b4:97:
27:8d:cf:b2:7c:ba:97:04:f2:7d:e3:ed:1e:c6:93:d9:93:f6:
f6:b0:be:56:4e:55:68:48:f7:31:a5:be:17:e5:e3:5a:85:7f:
22:1d:50:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:03:33 2025 by rpki-client