Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_4lvYeV-ayqEuNBULPPOUTjxshM.roa
File: _4lvYeV-ayqEuNBULPPOUTjxshM.roa (raw, json)
Hash identifier: NdQ48sOIXtMVgyfAT4cDSjJrP8NrGiMF8pPwF4Fl/SU=
Subject key identifier: FF:89:6F:61:E5:7E:6B:2A:84:B8:D0:54:2C:F3:CE:51:38:F1:B2:13
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B3A729E5A720CBD1422D872E4A8043
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_4lvYeV-ayqEuNBULPPOUTjxshM.roa
Signing time: Thu 02 Jan 2025 01:49:01 +0000
ROA not before: Thu 02 Jan 2025 01:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213205
IP address blocks: 45.155.89.0/24 maxlen: 24
45.156.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a7:29:e5:a7:20:cb:d1:42:2d:87:2e:4a:80:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff896f61e57e6b2a84b8d0542cf3ce5138f1b213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:14:00:c2:65:a6:05:3a:49:c7:d0:7b:b1:48:
7e:4e:0d:f8:2e:15:d3:f0:3a:43:69:86:4a:30:c5:
c0:8d:f0:f3:6e:bf:b1:74:9d:51:f4:77:99:88:ec:
fa:75:bb:0e:d7:6e:8b:8e:13:20:73:8d:03:41:1f:
b5:5f:3a:71:62:bb:99:97:1b:80:10:86:7c:d0:b9:
89:b1:98:2a:bd:05:03:aa:f5:52:84:fc:78:e5:30:
aa:dc:ce:55:2b:38:52:29:84:f0:41:56:ca:e7:50:
ba:cb:fe:6a:8c:1d:42:cb:6a:9d:d1:78:09:98:e3:
b6:75:75:84:07:d6:5e:60:66:ff:0f:4f:eb:d3:22:
5a:db:a2:30:9f:8e:33:2c:24:a8:93:5a:5a:48:e4:
a8:91:5c:d4:d9:b3:30:d6:2a:20:44:c6:de:6d:75:
bd:40:10:e1:12:b7:22:e2:88:c4:22:18:65:57:20:
49:9e:d1:b4:ee:2b:58:75:12:13:b9:85:cb:5c:c5:
15:b0:74:e8:2b:ed:e2:19:b7:cc:73:71:fa:64:05:
8f:9e:1f:3f:e7:40:d0:a9:d8:3b:53:b5:87:92:2a:
2b:0c:5f:0e:48:45:b1:c7:13:0d:8c:f1:0a:b3:c1:
eb:52:e2:a9:54:7e:9d:16:7b:15:d5:0e:c9:2d:be:
7d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:89:6F:61:E5:7E:6B:2A:84:B8:D0:54:2C:F3:CE:51:38:F1:B2:13
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_4lvYeV-ayqEuNBULPPOUTjxshM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.89.0/24
45.156.220.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:58:3d:e4:e8:30:97:18:20:46:4e:09:a3:df:57:94:fa:34:
1b:e9:1a:65:02:76:e7:75:8f:be:42:e3:2f:d6:b5:e9:23:30:
be:4f:a8:08:18:a5:3e:13:84:95:b7:cc:e9:49:b8:e8:9e:03:
88:27:6d:30:85:84:b5:04:41:33:b7:a7:84:2a:43:b5:a5:2e:
2f:00:c5:23:52:5d:25:da:33:ab:93:34:bf:bb:38:9f:c6:a2:
84:55:da:27:da:6c:94:b3:d6:fd:7d:3e:2b:f1:12:78:7f:bc:
93:ae:4f:ad:90:8d:ce:ae:15:2a:2a:4a:fd:70:09:f3:c5:2d:
03:36:e1:3b:35:12:62:10:5c:f4:b5:04:52:ee:0e:95:0c:12:
64:8e:97:7c:76:69:be:86:4e:38:61:f1:d3:b4:39:94:7c:b3:
4c:c3:ad:f9:13:d4:9b:76:91:a4:45:5e:19:bd:8d:36:6b:f1:
05:34:1c:ff:aa:50:92:3b:40:62:ec:16:89:c3:1f:ce:14:fb:
57:24:50:58:1c:7e:f9:0f:69:be:6d:f7:9c:9f:3b:ec:1e:16:
a7:72:9f:da:ed:5b:b2:c3:fa:5b:27:f5:40:24:7c:af:60:e4:
c6:84:41:38:0f:90:84:08:df:17:5d:2c:59:c3:86:4d:de:5e:
53:a2:dc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:25:50 2025 by rpki-client