Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/F-T6XFqFnI_sbUUjNxNcNd87BhY.roa
File: F-T6XFqFnI_sbUUjNxNcNd87BhY.roa (raw, json)
Hash identifier: 6o0pvXXHkL7jKBhk4FmzhB8YNuZ27KgrcAM6QK83Qb4=
Subject key identifier: 17:E4:FA:5C:5A:85:9C:8F:EC:6D:45:23:37:13:5C:35:DF:3B:06:16
Certificate issuer: /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial: 0194258FAEA9F7831D40ECDB0D1D148F93E0
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/F-T6XFqFnI_sbUUjNxNcNd87BhY.roa
Signing time: Thu 02 Jan 2025 05:49:20 +0000
ROA not before: Thu 02 Jan 2025 05:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205591
IP address blocks: 45.154.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ae:a9:f7:83:1d:40:ec:db:0d:1d:14:8f:93:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
Validity
Not Before: Jan 2 05:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17e4fa5c5a859c8fec6d452337135c35df3b0616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:f0:9c:73:19:65:da:a9:03:ea:8f:5c:c8:
88:b9:bc:fd:7a:6b:20:ca:20:23:9c:b3:45:87:72:
c6:6d:31:a5:96:90:9b:fe:50:e4:2c:d0:34:04:59:
ef:b1:f8:c9:60:8e:f8:a8:c3:7c:6a:ad:dc:aa:03:
89:d1:47:1f:3c:79:f1:09:81:d5:04:b9:e1:30:20:
6f:4c:6d:d2:d1:4a:3d:6a:0e:80:1d:7b:59:13:fb:
98:94:2d:ae:4d:0d:a9:58:86:3d:b2:26:27:89:6d:
68:2f:62:70:cb:22:16:98:58:b0:af:16:2e:c9:31:
5f:19:fe:7c:87:6b:27:b3:7e:63:99:50:ae:47:68:
71:86:2a:9c:6a:a5:a4:9d:f8:12:77:bd:49:61:5d:
f1:03:fc:ad:8d:71:0e:b2:66:9a:17:0f:1a:08:6d:
5d:81:79:35:3b:4f:cb:bd:2a:ee:5e:60:fa:56:74:
5e:ad:7f:7e:a5:c7:c0:73:6c:f9:cb:33:e4:8a:e7:
db:ef:a3:fa:a6:da:17:8c:df:39:f4:59:26:07:71:
28:30:91:83:a5:8e:44:58:c7:c6:c9:a9:b8:03:cf:
8e:d4:63:93:94:ca:b8:79:66:e6:18:9f:11:35:e4:
a5:c2:da:05:7c:e7:37:68:32:16:a1:4e:24:56:ba:
ce:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E4:FA:5C:5A:85:9C:8F:EC:6D:45:23:37:13:5C:35:DF:3B:06:16
X509v3 Authority Key Identifier:
keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/F-T6XFqFnI_sbUUjNxNcNd87BhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.110.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:2c:f5:af:20:bd:c5:05:40:d9:43:ae:17:24:d2:db:dd:53:
ca:23:d8:2c:97:8e:9d:21:ee:6b:61:66:8b:80:3e:58:6a:b4:
fa:2a:11:1e:43:94:96:b7:be:d9:e8:80:42:06:85:f8:b7:23:
55:ad:6b:80:0e:e4:11:d3:d7:22:9b:08:89:db:41:46:fb:81:
bd:cf:04:9b:7d:af:29:9c:bc:4b:8a:ef:ab:cc:6d:7d:ea:2d:
f7:3b:95:de:92:2e:ed:4c:75:7c:85:97:8f:7e:84:e5:55:05:
30:a1:51:e2:fe:ca:7f:c9:69:c3:0e:a9:f7:af:3f:f2:33:96:
28:ea:9e:29:46:ef:fe:a2:12:ca:86:bf:fc:a1:f2:47:76:65:
72:42:20:2f:5e:05:f5:ba:0f:4f:a2:d4:8a:31:10:26:85:65:
6a:0c:a1:0a:16:2a:db:cf:ea:18:2f:d5:95:e6:e1:99:20:33:
02:86:bb:ef:64:85:29:cb:fc:45:0a:58:3d:f3:f9:9d:35:61:
ce:7c:72:41:44:5d:d3:7a:0d:32:5d:46:17:e5:b8:18:60:b2:
4c:e9:36:49:a2:ae:e3:fb:52:ae:4f:55:0a:fc:01:e9:e7:c2:
5e:ee:e5:7f:d1:b5:4e:32:22:53:15:5d:8c:24:79:55:16:81:
01:c3:ce:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:33:56 2025 by rpki-client