Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/361f9a-c94b-4411-9b65-6af6072754a3/1/I4R5ktbmh03SlnxVh7dWjKwZ3Xw.roa
File: I4R5ktbmh03SlnxVh7dWjKwZ3Xw.roa (raw, json)
Hash identifier: i2pBb2C765UI5moFYsKdOfRtl4L2BpTaoAMwgsK3Fqo=
Subject key identifier: 23:84:79:92:D6:E6:87:4D:D2:96:7C:55:87:B7:56:8C:AC:19:DD:7C
Certificate issuer: /CN=af650bedd16b4e3c98116ee32b12174f97485c8a
Certificate serial: 01F37940
Authority key identifier: AF:65:0B:ED:D1:6B:4E:3C:98:11:6E:E3:2B:12:17:4F:97:48:5C:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2UL7dFrTjyYEW7jKxIXT5dIXIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/361f9a-c94b-4411-9b65-6af6072754a3/1/I4R5ktbmh03SlnxVh7dWjKwZ3Xw.roa
Signing time: Sat 01 Jan 2022 08:04:55 +0000
ROA not before: Sat 01 Jan 2022 08:04:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211252
IP address blocks: 45.15.40.0/24 maxlen: 24
2a07:5c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32733504 (0x1f37940)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af650bedd16b4e3c98116ee32b12174f97485c8a
Validity
Not Before: Jan 1 08:04:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23847992d6e6874dd2967c5587b7568cac19dd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f4:3a:c1:7b:55:de:a2:ca:da:64:7c:4a:20:
b4:0d:48:2e:7e:78:ef:73:b7:30:a1:98:2e:d4:f8:
9a:43:ea:89:b1:b3:d4:4f:be:ab:8f:b6:4d:fe:08:
73:5f:bf:52:a0:a4:f9:1e:5b:97:18:16:9e:fe:d3:
34:28:56:d6:fa:98:63:21:08:f2:d8:ee:d8:a4:7d:
db:d6:78:ec:d7:51:cc:c6:e3:96:0b:8e:6b:68:7b:
06:97:b6:80:d4:78:71:93:81:18:ea:d1:a6:24:77:
db:dd:69:f9:81:91:1e:d5:c8:a7:cd:fb:26:93:59:
e5:0b:40:28:8a:eb:de:35:38:bd:95:f3:75:88:c6:
9f:48:0b:02:c6:ed:2a:c9:d9:5c:9a:c3:ea:39:74:
36:34:d2:5e:4a:79:13:e4:10:ae:5b:21:e2:b7:17:
ba:ec:18:5d:f7:f4:c4:61:89:e6:91:5d:71:8c:98:
ed:1c:45:dd:3e:13:14:96:8a:5d:a9:e4:59:35:0e:
72:d8:32:49:c8:6e:5c:b8:43:02:77:63:09:ec:40:
3c:91:cd:49:e2:c9:7a:f7:6e:d3:08:a2:25:b0:a4:
68:c8:9c:9c:7a:7b:2d:49:d0:29:12:e4:c5:9a:c7:
46:e3:96:de:80:1d:14:0c:bd:b8:c0:84:3b:d9:a0:
62:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:84:79:92:D6:E6:87:4D:D2:96:7C:55:87:B7:56:8C:AC:19:DD:7C
X509v3 Authority Key Identifier:
keyid:AF:65:0B:ED:D1:6B:4E:3C:98:11:6E:E3:2B:12:17:4F:97:48:5C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2UL7dFrTjyYEW7jKxIXT5dIXIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/361f9a-c94b-4411-9b65-6af6072754a3/1/I4R5ktbmh03SlnxVh7dWjKwZ3Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/361f9a-c94b-4411-9b65-6af6072754a3/1/r2UL7dFrTjyYEW7jKxIXT5dIXIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.40.0/24
IPv6:
2a07:5c0::/29
Signature Algorithm: sha256WithRSAEncryption
7c:98:de:26:47:47:7c:2d:c1:56:ee:84:f9:08:b2:22:b5:f1:
e0:6c:a3:9a:0b:96:64:de:ef:42:06:ee:79:5f:e8:77:ac:46:
06:1b:fb:78:4c:6e:45:c8:ca:cc:cb:03:a6:e4:b8:8e:ca:e9:
a0:95:06:fc:2f:3c:43:5a:b8:74:60:12:b9:d2:64:05:48:c7:
ac:96:03:14:06:c0:c6:bb:88:01:a2:e7:a4:1d:8b:03:2a:fb:
78:4b:96:c4:0f:e9:5c:c8:9e:c8:5d:be:3c:4f:54:be:b8:ca:
8b:1c:ec:ab:05:86:9a:8a:bf:c8:1b:fa:ab:7b:ae:2f:c2:8b:
44:45:e3:c3:52:6a:1f:0e:c0:6a:c2:4e:ec:9a:ac:fe:5d:48:
fb:2b:63:99:11:27:b1:f4:89:89:72:f6:34:ca:2f:6f:7d:6f:
56:0b:da:4c:5c:39:32:6e:e2:5d:d0:87:bf:1b:2e:1a:5c:17:
16:8d:5c:6e:f9:93:b8:75:e2:3a:9b:5b:aa:c7:41:bd:8d:bb:
f0:36:53:8f:32:0a:27:95:9d:c2:3a:ae:92:c3:30:e0:db:02:
24:eb:72:8f:6e:bc:34:08:f1:84:cd:30:87:68:5e:f9:9c:5e:
9b:5c:02:20:30:8a:c0:fc:4f:27:fe:5e:dc:ac:6d:bc:bd:fc:
26:92:66:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:48 2025 by rpki-client