Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/F1ShlRrx5ZPQmtQlj2ftFMW353w.roa
File: F1ShlRrx5ZPQmtQlj2ftFMW353w.roa (raw, json)
Hash identifier: Xetg03+rB7SCygrrXAn/7tOc08cqxoGNbraAHZ0gKtM=
Subject key identifier: 17:54:A1:95:1A:F1:E5:93:D0:9A:D4:25:8F:67:ED:14:C5:B7:E7:7C
Certificate issuer: /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial: 0194258FAF4FF4074A60E04D11449CB25569
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/F1ShlRrx5ZPQmtQlj2ftFMW353w.roa
Signing time: Thu 02 Jan 2025 05:49:20 +0000
ROA not before: Thu 02 Jan 2025 05:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206313
IP address blocks: 45.154.108.0/22 maxlen: 24
45.154.108.0/24 maxlen: 24
45.154.109.0/24 maxlen: 24
45.154.110.0/24 maxlen: 24
2a0f:b500::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:af:4f:f4:07:4a:60:e0:4d:11:44:9c:b2:55:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
Validity
Not Before: Jan 2 05:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1754a1951af1e593d09ad4258f67ed14c5b7e77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:c7:75:e2:6e:4d:4e:33:3e:2b:c3:41:e3:
ab:88:e1:0f:7a:db:1c:35:31:b9:c6:ba:78:1c:ec:
6e:78:aa:fa:c9:d8:34:e5:7d:da:a7:8d:0a:97:a4:
c1:70:ff:8e:87:3f:c4:14:53:ed:f8:8a:d5:69:a1:
d7:a2:bc:45:b5:d1:9d:c5:b3:a5:be:f7:f3:68:d4:
83:78:22:65:2b:42:f8:9c:b5:33:7a:24:22:1d:06:
80:f7:4d:f8:ed:46:0f:a4:65:48:de:ce:8a:6e:bc:
3e:83:e9:ab:b7:2b:05:7c:d5:e6:fd:89:17:3a:d8:
db:25:13:fe:b8:60:f8:a3:0d:99:e2:f1:49:34:ae:
27:4a:5e:f2:c0:b6:1c:51:5d:7f:16:28:2d:c3:71:
94:97:48:1c:df:19:60:d9:87:3c:f8:28:65:43:bc:
ca:c7:8f:4c:23:d1:1b:a3:0e:b7:30:7f:ea:60:57:
b6:7e:b7:a4:66:19:99:bf:a3:0a:cc:f4:10:6b:40:
a1:f4:69:ee:4d:51:21:01:3a:5b:1b:04:23:a2:2e:
7d:9b:fc:13:22:1e:8c:b7:2b:69:b7:0a:e6:3b:2a:
fb:94:d4:b5:5c:29:9d:ee:ef:82:fe:7a:7f:d6:a0:
e0:fd:23:38:9e:9a:88:6c:ef:73:f1:a8:e3:46:30:
ff:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:54:A1:95:1A:F1:E5:93:D0:9A:D4:25:8F:67:ED:14:C5:B7:E7:7C
X509v3 Authority Key Identifier:
keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/F1ShlRrx5ZPQmtQlj2ftFMW353w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.108.0/22
IPv6:
2a0f:b500::/29
Signature Algorithm: sha256WithRSAEncryption
a4:b1:25:7b:81:ca:1b:80:c0:7d:a9:50:01:6f:4f:e3:8e:18:
cc:0e:8e:f0:5e:36:53:bd:84:17:6e:af:3a:87:26:f8:d4:99:
be:27:3c:5b:e0:3e:60:68:8a:45:ea:87:05:3a:d2:ff:3e:e6:
92:d3:74:fe:ad:35:7b:9f:e8:8a:43:7c:fe:50:d2:45:17:e9:
9e:14:f4:7d:e5:ea:5f:3e:19:0f:8e:d2:4b:9b:69:53:0b:f5:
67:4a:c5:54:7c:e0:ee:9c:01:54:cc:ca:c4:d5:54:97:4a:18:
35:a0:42:27:0a:b1:04:84:9c:c3:a0:2c:c0:81:99:5f:73:c9:
20:f1:9f:c8:0c:5a:b0:ee:f7:f2:41:70:06:d1:86:d4:06:39:
24:64:0f:2a:67:4b:8a:96:ce:28:83:72:16:bb:75:8e:a4:97:
80:7c:46:8c:24:00:dd:31:58:21:71:02:9e:7b:f3:84:4d:28:
88:42:14:b5:55:39:cd:b0:c5:7b:07:cf:5d:f9:3b:26:7a:cc:
20:d6:e5:d3:ce:41:e7:b9:cb:da:39:6e:42:df:ca:f9:4d:1f:
67:ab:44:7c:df:df:dc:eb:1f:1c:83:09:16:b9:d0:bc:22:0b:
16:a7:96:71:d2:d0:1d:73:d5:7f:ec:8e:12:9e:a7:22:f0:a7:
d1:ed:d0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:15:51 2025 by rpki-client