Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/8nxtIMAm2DD8tS8d6Ng0tp5Fe_0.roa
File: 8nxtIMAm2DD8tS8d6Ng0tp5Fe_0.roa (raw, json)
Hash identifier: FvDkI6CIFNHik2wsBukw4v9UslTrPQDrLgIOV3ymuKQ=
Subject key identifier: F2:7C:6D:20:C0:26:D8:30:FC:B5:2F:1D:E8:D8:34:B6:9E:45:7B:FD
Certificate issuer: /CN=fc8569520e0da7d87aa682124a2774d63666b5e8
Certificate serial: 018673E0CBC8967F1492C261BCDABE9550A9
Authority key identifier: FC:85:69:52:0E:0D:A7:D8:7A:A6:82:12:4A:27:74:D6:36:66:B5:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IVpUg4Np9h6poISSid01jZmteg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/8nxtIMAm2DD8tS8d6Ng0tp5Fe_0.roa
Signing time: Tue 21 Feb 2023 12:09:17 +0000
ROA not before: Tue 21 Feb 2023 12:09:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61302
IP address blocks: 45.141.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:e0:cb:c8:96:7f:14:92:c2:61:bc:da:be:95:50:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8569520e0da7d87aa682124a2774d63666b5e8
Validity
Not Before: Feb 21 12:09:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f27c6d20c026d830fcb52f1de8d834b69e457bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:a7:e0:5a:a3:30:43:1e:3a:e9:dc:f5:a1:
b5:5f:65:d8:c8:34:43:db:de:f1:ad:7e:4e:f4:cf:
6e:93:e8:2e:34:72:e1:88:57:74:ac:28:59:81:69:
55:dc:e7:42:56:b4:14:68:15:38:4b:a1:58:77:3a:
6e:f5:82:50:09:8f:22:5d:50:00:b7:e7:13:32:35:
36:08:2d:5e:ac:bf:fb:f8:5b:c3:2d:fb:cd:96:d5:
10:81:92:1c:fc:ba:57:b6:5f:ed:7b:4b:1e:78:47:
be:4c:cc:40:79:32:a7:b5:92:bf:c0:f0:62:fa:7e:
51:2e:45:1a:83:e8:36:df:c7:33:93:ce:db:01:f2:
c0:97:74:d8:cd:01:75:70:de:2d:e3:e0:28:0b:de:
4b:21:ac:d5:d9:c8:24:38:29:59:37:ce:ee:a6:eb:
e3:2b:48:88:a5:09:a6:c5:8b:f6:ec:6e:20:1d:cd:
85:29:fd:97:e5:e5:66:7b:64:df:2c:b8:f4:7d:1d:
38:aa:8e:39:c8:f6:77:19:0c:44:23:0e:f1:43:e3:
00:0a:c4:a2:dc:10:38:d8:bc:f6:31:27:0e:28:db:
de:90:80:85:8c:ad:ee:70:5e:5f:a1:d3:b5:4c:52:
9a:a0:39:31:e9:a1:df:b9:71:b1:e6:0c:1c:97:04:
61:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7C:6D:20:C0:26:D8:30:FC:B5:2F:1D:E8:D8:34:B6:9E:45:7B:FD
X509v3 Authority Key Identifier:
keyid:FC:85:69:52:0E:0D:A7:D8:7A:A6:82:12:4A:27:74:D6:36:66:B5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IVpUg4Np9h6poISSid01jZmteg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/8nxtIMAm2DD8tS8d6Ng0tp5Fe_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/_IVpUg4Np9h6poISSid01jZmteg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.184.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d1:b7:9e:f5:01:22:13:8e:2b:07:eb:d0:6c:8b:da:84:89:
68:86:06:61:70:d0:42:73:c8:a1:9b:c2:88:2e:db:78:fa:ea:
c2:ac:bd:7c:ba:0f:b9:1b:de:aa:57:b2:25:59:10:e0:df:5d:
ed:b8:d6:27:b7:40:48:43:85:6d:2e:33:6d:01:fa:7f:a6:68:
7b:37:3e:1d:2b:c6:38:d6:66:a2:48:e4:a1:f8:a4:14:e5:e8:
54:b0:a4:72:e2:53:3c:ce:fa:e6:76:70:3a:88:8b:b2:f9:0b:
54:8d:1e:08:ef:7c:a5:d4:1c:21:35:65:e7:49:6c:55:27:d1:
3a:ed:1b:86:44:6f:5c:25:a0:ab:45:df:e0:7d:25:c3:5c:3d:
9f:7e:84:b0:d4:db:a9:72:24:43:a5:2d:ec:c7:42:11:9c:89:
dc:00:f7:d4:14:9e:0d:50:b3:e6:23:34:71:6b:61:b7:9f:64:
e5:ca:f4:52:33:51:a4:55:31:fa:aa:9c:06:54:b8:22:85:2a:
3d:c4:47:62:07:10:ac:4f:af:b5:6e:a5:89:83:91:80:d9:27:
0d:38:14:37:d7:9e:ca:2e:9e:56:c9:9a:92:1b:a6:e6:97:33:
7a:94:4d:c4:43:2b:c4:ce:7d:40:31:80:49:3c:1c:40:95:99:
58:3b:22:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:33:02 2025 by rpki-client