Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/nRO271tdrNACduJFYjdOKGtM_VQ.roa
File: nRO271tdrNACduJFYjdOKGtM_VQ.roa (raw, json)
Hash identifier: Yv1+Ws39fUXZCiuTu0NkXs09HwF/qzxgRlEF4ICT8SI=
Subject key identifier: 9D:13:B6:EF:5B:5D:AC:D0:02:76:E2:45:62:37:4E:28:6B:4C:FD:54
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 0194266BDBB634D05D302E9BD71B8AD54EC8
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/nRO271tdrNACduJFYjdOKGtM_VQ.roa
Signing time: Thu 02 Jan 2025 09:49:50 +0000
ROA not before: Thu 02 Jan 2025 09:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44382
IP address blocks: 45.87.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:db:b6:34:d0:5d:30:2e:9b:d7:1b:8a:d5:4e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Jan 2 09:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d13b6ef5b5dacd00276e24562374e286b4cfd54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:98:8b:74:2e:fc:2f:dc:87:3c:9b:d2:56:
ae:82:f2:41:7e:87:af:26:fe:35:50:bc:0e:5b:7a:
b8:db:e0:cc:76:21:ec:ff:a5:09:16:d4:da:2b:87:
cf:82:0b:dc:ad:c1:9a:06:bf:cb:f4:3c:0e:33:7e:
e2:2c:09:63:49:37:21:86:45:b1:79:2a:f1:54:f2:
5f:fa:a8:26:24:82:fa:f6:27:1a:b1:d6:7c:5a:20:
10:d9:71:98:23:c2:4a:37:3a:1c:3e:e9:3c:f8:d4:
8c:cc:38:7a:16:43:b9:69:53:4c:a2:16:5d:c1:c3:
8d:f5:a6:e0:43:2c:8c:dd:20:3e:53:6a:94:9e:ea:
d1:78:42:a8:e1:6c:36:40:7f:84:fe:75:7f:7f:3b:
4f:94:01:09:49:0a:82:0e:54:39:54:f6:df:77:59:
7b:62:80:4c:3e:69:70:18:63:24:e4:b5:f9:03:ba:
b7:a3:14:23:35:8d:5b:d1:c9:21:5e:73:8a:46:a4:
43:0d:fe:45:62:78:96:3e:13:78:f7:f8:b0:df:95:
c5:fe:1c:b2:74:f3:7d:34:39:0c:4d:22:cc:ee:12:
e3:73:c3:1e:28:52:da:11:8d:55:0a:97:c5:1c:73:
5f:5e:bf:b0:1f:11:39:c4:c0:27:8c:33:6e:28:58:
a3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:13:B6:EF:5B:5D:AC:D0:02:76:E2:45:62:37:4E:28:6B:4C:FD:54
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/nRO271tdrNACduJFYjdOKGtM_VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.161.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:26:a5:32:ec:b8:c7:f1:c5:9d:88:19:c7:36:84:17:51:1c:
4e:4e:d1:27:cb:45:00:4f:dd:3a:14:6f:e8:44:11:fd:56:82:
04:57:f9:2b:5a:2e:4d:69:7f:db:ee:3c:2c:8c:8b:4b:23:11:
95:cc:30:d5:e0:f0:5b:36:18:b1:36:08:4d:82:b5:53:e1:cc:
54:36:44:74:c8:9d:77:d7:86:6f:8a:f3:fb:c5:fd:23:7f:ff:
10:c0:19:e9:30:15:7e:e2:43:85:7c:23:ac:26:15:43:34:ce:
4f:18:e9:cd:b6:51:b6:a8:cf:50:7b:56:fd:78:06:f1:93:b0:
b9:10:89:c1:db:ed:8d:b3:fe:a6:55:a5:bb:ef:76:e3:4a:d0:
f7:76:35:4f:00:f7:d2:1c:1d:e2:db:81:8d:9c:76:9a:ec:3d:
f0:db:45:6f:1e:e7:f2:30:45:e3:2b:c9:9d:23:db:56:f3:5e:
cc:61:f6:51:a7:16:76:63:77:b4:13:c9:24:cf:7d:10:d2:7a:
98:ca:b2:57:55:c2:c9:77:7e:69:f4:5f:46:64:d4:d6:50:9f:
a0:1c:0c:4a:20:a4:78:cd:02:58:80:5c:a5:bc:14:66:0d:c8:
4c:0c:a0:ae:a7:fc:a7:87:0f:5d:ea:de:a0:4a:ac:55:26:28:
35:d3:55:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:43 2025 by rpki-client