Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/af11db-19a5-4b8a-8eb7-fb75cd109585/1/fhw21TwdMV45YDsX3TLTXvTFOew.roa
File: fhw21TwdMV45YDsX3TLTXvTFOew.roa (raw, json)
Hash identifier: 1oaGkvYbYea7UgZf2WBqL4HQnIXMRpq2VVijwDNmEvI=
Subject key identifier: 7E:1C:36:D5:3C:1D:31:5E:39:60:3B:17:DD:32:D3:5E:F4:C5:39:EC
Certificate issuer: /CN=51a91a65f97b7c11ca2e4ede863f517b195b494f
Certificate serial: 01856F670253551859C8153143A1C7E25D58
Authority key identifier: 51:A9:1A:65:F9:7B:7C:11:CA:2E:4E:DE:86:3F:51:7B:19:5B:49:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UakaZfl7fBHKLk7ehj9RexlbSU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/af11db-19a5-4b8a-8eb7-fb75cd109585/1/fhw21TwdMV45YDsX3TLTXvTFOew.roa
Signing time: Sun 01 Jan 2023 22:14:59 +0000
ROA not before: Sun 01 Jan 2023 22:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62048
IP address blocks: 45.86.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:02:53:55:18:59:c8:15:31:43:a1:c7:e2:5d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a91a65f97b7c11ca2e4ede863f517b195b494f
Validity
Not Before: Jan 1 22:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e1c36d53c1d315e39603b17dd32d35ef4c539ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:80:07:e3:19:d0:e3:09:71:98:b4:94:b6:50:
0f:4d:81:13:22:7b:e4:8a:d2:4e:ab:88:96:c7:45:
dd:74:21:7d:24:e5:ff:67:a0:37:0c:61:5e:33:df:
d1:5a:7f:84:86:b9:05:10:ab:5e:17:10:c7:2b:b1:
68:0b:46:6e:a9:45:9d:79:35:ed:a1:f7:8f:e7:e5:
e0:10:05:cf:37:2d:4b:11:c4:f9:80:62:cb:6e:11:
88:d7:9d:bc:9a:16:c3:51:2a:3e:71:59:62:e1:73:
d0:4b:2a:b1:c2:0f:6d:54:8a:b5:19:db:ad:54:01:
23:97:e3:17:03:a3:30:63:a8:85:e8:cc:0a:40:85:
3c:23:e4:d0:78:7c:55:d6:aa:00:de:c2:ae:b9:dc:
ee:93:8a:05:74:b8:bc:57:5e:46:3e:a7:4c:5b:ce:
76:63:1a:5b:2d:1d:b8:ef:fa:c2:a1:2e:5e:d9:db:
ce:75:ed:99:07:3c:8f:47:74:9f:ae:d6:83:9b:35:
1b:3b:72:d9:88:89:67:1f:9d:fd:c6:4f:b9:b3:79:
c4:5a:6d:dd:63:5e:de:d2:df:c8:e9:99:f5:c5:9e:
43:46:3f:b1:55:34:f4:c2:c6:d9:04:7a:b5:d8:08:
0b:71:bc:b5:e0:7b:6a:06:87:0e:e4:f6:28:66:e7:
00:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1C:36:D5:3C:1D:31:5E:39:60:3B:17:DD:32:D3:5E:F4:C5:39:EC
X509v3 Authority Key Identifier:
keyid:51:A9:1A:65:F9:7B:7C:11:CA:2E:4E:DE:86:3F:51:7B:19:5B:49:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UakaZfl7fBHKLk7ehj9RexlbSU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/af11db-19a5-4b8a-8eb7-fb75cd109585/1/fhw21TwdMV45YDsX3TLTXvTFOew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/af11db-19a5-4b8a-8eb7-fb75cd109585/1/UakaZfl7fBHKLk7ehj9RexlbSU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.87.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:cf:44:56:92:a2:b9:a1:78:ec:d2:8e:5f:7c:b3:2d:92:ff:
1a:55:d9:b7:70:9b:32:46:0a:30:b8:a9:c0:b8:8a:ee:da:5a:
5d:47:61:42:99:50:70:a0:7a:0c:84:59:e1:75:37:5a:ec:e4:
88:d3:64:2b:ec:6a:a0:f5:cc:72:0e:68:99:d6:8a:13:bb:5b:
ee:0f:47:8f:e9:49:bf:88:b6:1f:47:fb:96:a1:f3:46:9e:69:
74:4a:0b:54:9a:cd:b8:56:86:ec:75:58:a2:46:f7:73:9a:64:
d1:86:68:fc:b9:cb:78:39:b4:aa:2c:5d:79:7d:9e:80:3b:1e:
ad:3e:7e:05:8f:7e:7d:5a:b7:a3:d2:17:81:88:f9:4a:40:c3:
75:76:36:9e:4c:4e:1f:f7:95:0b:f1:74:db:fa:1a:2e:22:2b:
c1:c3:c1:d5:13:43:5a:57:26:2b:99:08:25:57:c7:29:00:5c:
6c:9a:42:fd:75:c7:fa:6d:9b:68:fb:18:28:d3:f1:01:61:b2:
b4:27:9a:f6:52:be:4e:47:f0:af:21:c7:c3:45:ca:89:b9:ab:
09:89:f8:53:68:9e:a3:b0:0d:ad:17:65:8c:61:24:43:ab:99:
7d:23:0d:6f:36:8a:0a:d3:23:00:cb:0f:63:ce:49:bb:e5:89:
a3:f0:bb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:00:50 2025 by rpki-client