Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/_PwjO3ri622C9pXuTkMgp8kA_2I.roa
File: _PwjO3ri622C9pXuTkMgp8kA_2I.roa (raw, json)
Hash identifier: 9gfnCatCvRgjhqwGApnPbzNqSEZeGesZjJgdWPF5l74=
Subject key identifier: FC:FC:23:3B:7A:E2:EB:6D:82:F6:95:EE:4E:43:20:A7:C9:00:FF:62
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 0189ADFFC3021A93BACA59F73EA90502AB2E
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/_PwjO3ri622C9pXuTkMgp8kA_2I.roa
Signing time: Mon 31 Jul 2023 22:09:27 +0000
ROA not before: Mon 31 Jul 2023 22:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142594
IP address blocks: 45.139.226.0/24 maxlen: 24
45.139.227.0/24 maxlen: 24
2a04:ff00:800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ad:ff:c3:02:1a:93:ba:ca:59:f7:3e:a9:05:02:ab:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Jul 31 22:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcfc233b7ae2eb6d82f695ee4e4320a7c900ff62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ee:c8:ab:2d:9e:3c:fb:31:88:dc:df:ad:09:
6e:b6:41:1b:a4:7d:f2:85:b9:1b:c1:11:84:e1:c9:
c5:20:49:52:99:7c:73:b4:63:5b:f7:3f:4e:00:8c:
0f:0e:e0:22:d0:bf:e8:81:18:9f:a9:60:82:fa:18:
8e:26:d8:32:cd:07:a6:a9:c7:de:ad:39:f5:dd:15:
c1:c7:fb:24:21:b4:12:1d:9b:d6:05:37:79:5a:2c:
87:f1:2c:0c:ae:db:a2:fb:8e:a3:1e:77:a7:3f:5c:
1d:4e:ad:ad:dc:8d:cf:c8:d8:84:16:6c:26:0e:e2:
0b:c7:1a:47:43:4b:69:e7:9a:3d:ac:0b:5d:1f:71:
2d:4a:79:09:af:99:7c:fc:67:60:63:ce:cc:9b:a0:
3c:a3:0e:09:66:32:c6:76:ba:b3:2c:a2:74:61:2b:
04:f3:6b:d6:2b:56:b7:e9:5f:93:6c:56:0d:13:b6:
03:fa:29:cb:64:04:ff:bd:6a:94:78:dc:ac:42:28:
21:63:a7:40:cc:38:92:7b:bf:58:7f:b6:26:34:0b:
79:9f:e0:80:90:b8:59:a0:53:22:99:85:d6:e4:d9:
8b:f6:26:75:5d:07:ea:5f:27:77:90:e3:cc:04:6f:
2b:8d:31:d4:8a:d8:7d:f4:bd:42:3f:30:13:8d:71:
67:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FC:23:3B:7A:E2:EB:6D:82:F6:95:EE:4E:43:20:A7:C9:00:FF:62
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/_PwjO3ri622C9pXuTkMgp8kA_2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.226.0/23
IPv6:
2a04:ff00:800::/40
Signature Algorithm: sha256WithRSAEncryption
56:f8:d8:d0:c6:74:5b:05:7c:e7:3d:1a:63:e4:a0:69:77:78:
61:12:7a:0e:13:84:12:cf:0b:4f:75:15:a4:b5:37:ad:fd:3e:
fe:49:43:7a:fd:61:26:58:00:e9:e3:a9:d6:d1:ef:9d:82:80:
c7:dc:c1:85:cf:4f:c2:88:63:5b:16:27:7b:ea:15:fa:3a:6f:
bd:3c:15:af:9b:c9:0f:c6:28:ab:7d:cb:44:1c:98:a8:7b:42:
58:e8:b1:74:37:77:2b:22:f4:bb:ee:96:08:53:f9:50:43:84:
50:bd:b8:b2:6d:e5:fb:a3:42:11:a6:ec:1f:28:67:80:1b:81:
30:9f:9f:09:8a:cd:5c:b0:6b:4c:aa:be:60:d0:2e:be:24:26:
da:63:d6:b5:a5:39:08:bb:19:70:29:b0:05:a6:e2:9c:73:01:
b4:52:73:44:33:d8:02:a6:7b:3f:1a:60:95:95:39:9a:28:c3:
02:18:e6:ae:0d:9e:cf:00:e4:28:75:fd:2a:58:12:ab:ab:97:
f7:8e:28:b5:14:84:a0:8e:63:31:66:00:1f:c8:6e:99:1e:02:
93:39:34:da:c8:75:e8:b6:60:2c:c7:13:20:a9:ef:74:73:ce:
b1:1b:26:e2:6c:e2:7f:e1:3e:bc:bd:86:03:4e:e7:94:4f:f2:
4c:2b:a9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:09 2025 by rpki-client