Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/361f9a-c94b-4411-9b65-6af6072754a3/1/30dt85dzsK5hiPQQKO6L6zwWJn0.roa
File: 30dt85dzsK5hiPQQKO6L6zwWJn0.roa (raw, json)
Hash identifier: 60eMaChme3kJQ6bD0OvFwucjUKUoui0q6xBZTiHUaJs=
Subject key identifier: DF:47:6D:F3:97:73:B0:AE:61:88:F4:10:28:EE:8B:EB:3C:16:26:7D
Certificate issuer: /CN=af650bedd16b4e3c98116ee32b12174f97485c8a
Certificate serial: 018CC5DC1DAB48B2EA7A08169A4B7C4855EC
Authority key identifier: AF:65:0B:ED:D1:6B:4E:3C:98:11:6E:E3:2B:12:17:4F:97:48:5C:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2UL7dFrTjyYEW7jKxIXT5dIXIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/361f9a-c94b-4411-9b65-6af6072754a3/1/30dt85dzsK5hiPQQKO6L6zwWJn0.roa
Signing time: Mon 01 Jan 2024 16:29:46 +0000
ROA not before: Mon 01 Jan 2024 16:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211252
IP address blocks: 45.15.40.0/24 maxlen: 24
2a07:5c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:1d:ab:48:b2:ea:7a:08:16:9a:4b:7c:48:55:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af650bedd16b4e3c98116ee32b12174f97485c8a
Validity
Not Before: Jan 1 16:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df476df39773b0ae6188f41028ee8beb3c16267d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e1:65:6e:a7:8b:95:3a:47:b4:e4:47:cc:1c:
2a:c6:50:37:05:b7:0d:83:21:f9:23:bc:4c:f2:c7:
f8:1c:8d:a6:b4:3a:48:ef:27:f5:30:65:b0:ef:dc:
d5:5b:20:d5:41:17:7d:e3:2e:ea:58:52:37:26:4e:
cb:fd:a4:52:30:25:01:93:55:9b:0c:4a:23:05:68:
a3:21:8c:11:b6:d6:61:e4:14:19:16:90:4d:16:54:
9d:60:5b:11:0d:5d:53:56:cd:69:01:2c:70:aa:99:
a6:74:7f:c2:76:f0:26:7b:5c:f2:ee:84:5a:c6:48:
26:61:f7:48:1d:2b:60:66:d2:37:c9:19:96:8d:79:
23:64:0b:44:19:ef:cc:96:eb:71:cf:cd:09:80:d7:
de:2c:d8:70:82:b8:04:cb:aa:04:6a:61:dc:3c:af:
27:08:26:35:7e:73:66:0c:94:a1:47:96:b6:bf:59:
e7:49:60:56:09:00:3e:51:b2:1c:88:52:97:e0:d7:
09:a8:6a:ca:99:bc:4b:78:c5:8b:c1:00:18:21:37:
24:94:2a:7e:71:9f:c5:9a:40:56:ab:81:9a:d2:4e:
4c:d5:92:49:a6:5a:2f:1f:f5:f8:4b:3b:ee:5f:70:
46:af:15:cd:1b:93:6e:4b:de:4d:bf:41:3a:10:49:
5b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:47:6D:F3:97:73:B0:AE:61:88:F4:10:28:EE:8B:EB:3C:16:26:7D
X509v3 Authority Key Identifier:
keyid:AF:65:0B:ED:D1:6B:4E:3C:98:11:6E:E3:2B:12:17:4F:97:48:5C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2UL7dFrTjyYEW7jKxIXT5dIXIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/361f9a-c94b-4411-9b65-6af6072754a3/1/30dt85dzsK5hiPQQKO6L6zwWJn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/361f9a-c94b-4411-9b65-6af6072754a3/1/r2UL7dFrTjyYEW7jKxIXT5dIXIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.40.0/24
IPv6:
2a07:5c0::/29
Signature Algorithm: sha256WithRSAEncryption
3f:77:9d:ee:63:eb:b6:58:6f:aa:46:0a:a0:66:a5:f4:ee:6d:
e4:c7:e0:36:f6:2f:ce:17:54:5f:9b:01:d3:2c:59:45:65:d2:
a9:db:8b:36:a2:0f:1f:48:22:32:09:0b:91:33:f4:c5:79:1b:
75:23:51:1d:8c:d3:a0:e4:d4:ed:61:13:5f:9c:55:56:97:cc:
bb:74:c3:5f:84:f3:54:09:4e:b5:3c:89:ee:90:a5:0b:bb:a8:
67:74:af:a0:10:6c:5f:70:a3:08:5a:e3:ac:6e:bc:7f:36:46:
b0:43:26:27:1f:8d:3a:66:26:9a:92:74:9c:80:dd:32:58:19:
75:e8:35:58:16:d6:89:ce:cc:92:6e:7a:43:4a:e1:5c:bf:8e:
af:aa:ca:3b:6c:cb:51:20:10:e1:32:f8:7d:33:88:93:8c:de:
9d:f0:58:bb:87:b6:d3:aa:d7:2b:d3:d3:81:22:94:af:9a:72:
c3:6a:c7:ac:e9:88:41:12:56:e5:ac:b5:68:c9:65:19:9c:fc:
f1:ff:0c:0e:fc:a4:d5:32:12:77:0b:e4:de:f7:01:1f:54:c8:
53:2d:43:df:22:69:9f:67:04:bd:db:e4:3e:b2:2f:f5:76:58:
8a:4d:2b:80:08:1b:45:ce:60:7b:42:cc:71:ce:46:a5:93:1b:
bb:02:6e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:18 2025 by rpki-client