Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/_i4kbEgnRaObzrIxHLeMfsZzJj0.roa
File: _i4kbEgnRaObzrIxHLeMfsZzJj0.roa (raw, json)
Hash identifier: FXIMt8wDsGKhQbdfCohzo1ncgT4vPY1SHckDqJ4K3wE=
Subject key identifier: FE:2E:24:6C:48:27:45:A3:9B:CE:B2:31:1C:B7:8C:7E:C6:73:26:3D
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0183E567418B4700810A59D6CC94187A311A
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/_i4kbEgnRaObzrIxHLeMfsZzJj0.roa
Signing time: Mon 17 Oct 2022 10:04:52 +0000
ROA not before: Mon 17 Oct 2022 10:04:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50673
IP address blocks: 45.148.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e5:67:41:8b:47:00:81:0a:59:d6:cc:94:18:7a:31:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Oct 17 10:04:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe2e246c482745a39bceb2311cb78c7ec673263d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:7c:a9:8c:ab:ff:43:f5:8e:d3:53:c9:3d:
dc:e1:a7:06:8a:45:02:34:26:01:29:e1:76:3f:a0:
41:15:37:2e:94:a2:d6:0f:d8:5f:7c:6b:c0:fe:52:
21:3b:59:6c:f8:06:ee:af:f8:c2:5b:7e:7d:ab:5d:
b9:56:df:90:9d:d0:7d:40:98:6d:b3:6c:18:4a:02:
66:29:35:49:bb:be:f9:13:28:24:88:b4:3e:d4:a1:
99:54:39:52:3b:cd:ca:18:c4:34:01:51:4f:7d:be:
6d:dc:f1:54:8e:31:df:7d:59:69:36:13:ff:7f:ad:
6a:2f:7e:5f:fb:ac:c3:6a:14:87:3d:da:fd:e4:b2:
e4:82:2a:4c:30:30:51:0b:d7:71:cf:40:44:4a:e4:
b1:4d:54:9b:14:9b:5d:c0:cf:3f:d0:a3:9e:18:70:
20:38:c0:8b:ad:d2:d7:ff:af:c4:c8:ec:34:a1:07:
5f:00:ea:ec:c3:69:d8:6b:5d:37:2f:91:ae:d0:b9:
22:d9:9c:f4:05:6a:ac:9f:ff:e9:22:ac:f8:7a:50:
b8:5d:2b:a6:a3:e8:74:99:1c:8c:c5:9f:fa:5e:82:
df:89:5c:41:2e:f7:ad:a9:f6:d8:fb:5e:15:a2:3c:
92:c3:92:e6:21:3f:c3:32:fe:5f:4c:6f:87:95:1d:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2E:24:6C:48:27:45:A3:9B:CE:B2:31:1C:B7:8C:7E:C6:73:26:3D
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/_i4kbEgnRaObzrIxHLeMfsZzJj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.141.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:0f:dc:ff:de:ad:ec:7a:3a:2f:41:2a:0b:ed:66:26:0d:e5:
5f:fa:2b:cf:0a:dd:ad:93:61:ba:fe:a6:66:25:c7:0e:ed:12:
03:ad:70:21:13:48:fa:69:5e:44:d0:b2:8c:fa:c9:5e:19:22:
d8:41:00:00:11:9b:08:8a:0d:df:d1:98:62:82:51:fa:ad:de:
13:3d:eb:48:51:96:ea:80:8b:5c:5f:b0:01:ab:4b:ea:89:96:
bb:04:fe:be:4d:bd:f8:e0:9e:d4:e5:17:65:a1:93:c6:55:19:
d3:d2:c5:f5:b6:bb:66:8d:eb:57:69:9f:35:9b:c7:33:6e:56:
ae:16:73:96:e8:37:67:90:54:99:6c:84:df:b5:43:ac:2b:0f:
61:99:f9:18:e4:87:a7:d9:ca:ff:09:d8:9c:15:78:af:ea:00:
5a:36:2c:04:1d:e8:9d:68:c4:ec:23:af:70:05:4a:04:4c:11:
83:a7:2e:c5:10:22:83:1a:c4:cf:f8:80:9d:75:96:f8:71:48:
a5:fe:bb:d5:61:88:7a:3f:c6:8e:64:83:08:74:f0:41:f2:59:
70:c6:dc:cf:a4:f5:84:a0:df:1f:49:87:a9:45:e3:21:a3:d9:
e8:9e:74:be:8c:15:0b:9e:d7:19:83:f9:39:f7:27:dd:60:f1:
a0:cd:b8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:34:28 2025 by rpki-client