Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/r8u9ZLvamSVM7GysZCMdG7CcnUU.roa
File: r8u9ZLvamSVM7GysZCMdG7CcnUU.roa (raw, json)
Hash identifier: akN7psPFY3veeIUCuwwKzY+JrN9js28hJ2m0AQu54s8=
Subject key identifier: AF:CB:BD:64:BB:DA:99:25:4C:EC:6C:AC:64:23:1D:1B:B0:9C:9D:45
Certificate issuer: /CN=fc8569520e0da7d87aa682124a2774d63666b5e8
Certificate serial: 01610A38
Authority key identifier: FC:85:69:52:0E:0D:A7:D8:7A:A6:82:12:4A:27:74:D6:36:66:B5:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IVpUg4Np9h6poISSid01jZmteg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/r8u9ZLvamSVM7GysZCMdG7CcnUU.roa
Signing time: Sat 01 Jan 2022 06:59:54 +0000
ROA not before: Sat 01 Jan 2022 06:59:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56529
IP address blocks: 45.148.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23136824 (0x1610a38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8569520e0da7d87aa682124a2774d63666b5e8
Validity
Not Before: Jan 1 06:59:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=afcbbd64bbda99254cec6cac64231d1bb09c9d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:12:85:1e:ef:f3:24:51:8b:d9:30:cb:41:
7e:3f:13:23:d7:c4:60:82:c2:54:d6:98:f8:ed:cf:
ec:2b:24:52:36:a4:16:87:c8:cb:8a:4a:ca:5f:e0:
57:c8:29:86:43:ed:d6:de:08:95:5e:65:c1:a4:23:
76:3e:af:60:88:6a:a2:46:67:84:1f:b0:3b:3b:64:
49:3f:93:15:fc:62:57:99:af:d1:cd:42:7d:d6:7b:
72:65:b0:d9:11:41:b9:bb:22:dd:f7:17:27:10:00:
ad:5d:4c:df:eb:d1:ea:d0:d5:2e:63:61:6e:7e:a8:
67:0a:da:a1:35:d5:9a:9d:a9:9a:76:9a:8c:eb:82:
6e:ef:06:13:1d:55:c9:f9:fc:0d:e9:a1:85:b6:25:
b8:26:74:25:62:6f:b7:9f:5f:ef:89:7f:c7:bf:d8:
e2:99:5d:c7:a4:86:3d:9c:b9:12:70:6f:7b:2a:ec:
a0:0e:7b:a9:92:e5:97:8b:4e:bb:15:86:46:a1:35:
15:68:09:69:3f:bf:a2:57:69:bd:08:c8:8d:9a:a8:
7f:8b:ce:e2:9b:f2:9f:09:f2:0c:a4:02:c9:b1:6e:
ac:12:84:9f:3d:dd:3c:4f:47:53:df:bd:cd:95:8e:
32:e0:a6:de:fb:fb:38:1c:7e:1e:d2:19:3b:82:3d:
24:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CB:BD:64:BB:DA:99:25:4C:EC:6C:AC:64:23:1D:1B:B0:9C:9D:45
X509v3 Authority Key Identifier:
keyid:FC:85:69:52:0E:0D:A7:D8:7A:A6:82:12:4A:27:74:D6:36:66:B5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IVpUg4Np9h6poISSid01jZmteg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/r8u9ZLvamSVM7GysZCMdG7CcnUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/_IVpUg4Np9h6poISSid01jZmteg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.243.0/24
Signature Algorithm: sha256WithRSAEncryption
37:86:bc:ce:5d:9c:8b:0c:32:cd:df:69:c2:5f:72:47:b1:53:
a2:4a:29:85:68:fe:43:bb:d9:ce:1b:dc:02:74:47:45:18:e3:
ee:b9:4a:67:4d:62:79:d1:d6:b2:c9:46:d2:2f:6d:a4:e1:99:
cb:ce:01:ca:6b:db:11:46:ee:bb:dd:fc:16:aa:06:5a:99:4b:
fd:b0:e3:4b:56:cb:d5:3a:f1:e5:a7:f2:e9:b2:d3:ba:af:2f:
ca:fd:1b:9a:f5:4c:18:52:7f:54:c6:8e:da:33:c2:49:f3:a2:
9c:c7:28:2c:00:98:7c:75:3c:df:98:b8:9f:a0:2d:13:b4:bc:
09:09:b2:ce:52:29:76:ea:9f:65:a3:1c:da:f7:ea:1c:3d:0f:
25:2d:0e:52:35:7f:5f:2e:33:d8:33:b4:9e:b7:d0:13:10:36:
59:d7:65:a3:5c:f4:b6:f7:bd:bb:2b:13:55:9b:56:55:97:43:
67:54:d9:a6:2e:f5:eb:b4:c5:92:5e:3b:ab:74:c7:b2:4b:72:
33:fc:05:c3:b5:d8:b9:9c:34:e7:66:bf:ff:06:2e:4d:f3:5c:
16:1f:5d:ff:d1:3a:cb:1c:ab:14:71:62:c8:a7:e3:73:2d:75:
83:7c:5f:59:04:87:2b:3a:03:3d:dd:a3:4f:81:a4:01:67:c4:
e3:cd:be:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:05:29 2025 by rpki-client