Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/FA2rdoTSXTpaNGTDT0aW6V9L25M.roa
File: FA2rdoTSXTpaNGTDT0aW6V9L25M.roa (raw, json)
Hash identifier: kkZFYMyw4KlTxS4PayeQH7gSgukCRNxFXWHYmYwHPJM=
Subject key identifier: 14:0D:AB:76:84:D2:5D:3A:5A:34:64:C3:4F:46:96:E9:5F:4B:DB:93
Certificate issuer: /CN=8e7dc7f298bb774a726edc433cf6b03994148b54
Certificate serial: 019422203BB5FA5ABBBF6D1D0BFCD366227C
Authority key identifier: 8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/FA2rdoTSXTpaNGTDT0aW6V9L25M.roa
Signing time: Wed 01 Jan 2025 13:48:45 +0000
ROA not before: Wed 01 Jan 2025 13:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206294
IP address blocks: 145.22.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3b:b5:fa:5a:bb:bf:6d:1d:0b:fc:d3:66:22:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7dc7f298bb774a726edc433cf6b03994148b54
Validity
Not Before: Jan 1 13:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=140dab7684d25d3a5a3464c34f4696e95f4bdb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:cf:e0:e1:ca:30:9d:ec:4e:3e:61:ca:e4:
9a:07:07:61:9b:dc:41:ff:eb:71:67:54:2c:b6:f6:
35:1c:e1:6d:3b:fa:30:33:b0:1e:b8:0b:8a:12:eb:
ef:28:f9:ed:9b:55:25:30:05:2f:5a:a3:d1:cd:9d:
38:c2:7b:fb:f1:72:37:d0:dd:c8:79:58:0d:fe:30:
c8:a1:40:8c:a5:f7:bd:85:ed:61:db:3c:11:70:f8:
a8:26:d4:da:b8:d1:cd:14:d0:16:91:d4:56:2f:eb:
1b:9c:3e:36:9c:39:a9:74:7e:e1:d7:c9:10:03:6f:
b4:3e:a0:31:5b:a6:9c:d0:4f:82:87:06:59:7a:95:
59:ea:54:51:42:76:ad:1b:8d:0b:9c:1d:a4:0f:f9:
54:6b:b4:73:12:0c:04:48:0f:1d:26:a6:30:ab:05:
bb:dd:a6:5c:28:e3:3e:f6:16:20:ea:74:de:d5:74:
e9:27:98:6f:36:44:5c:86:9a:09:8e:c2:2e:03:44:
34:b2:2b:d0:f2:37:98:54:e9:75:61:00:3d:d8:f1:
66:21:a6:a0:b1:c4:c9:28:31:92:34:9c:f5:b6:c7:
04:40:9c:2d:d2:7d:ac:73:c5:73:5b:fd:4e:82:d2:
75:16:37:5f:ac:98:fe:69:c5:f5:59:93:ef:8b:1b:
8c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0D:AB:76:84:D2:5D:3A:5A:34:64:C3:4F:46:96:E9:5F:4B:DB:93
X509v3 Authority Key Identifier:
keyid:8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/FA2rdoTSXTpaNGTDT0aW6V9L25M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.22.254.0/24
Signature Algorithm: sha256WithRSAEncryption
88:bb:ef:7b:ca:61:43:20:f0:cf:7d:1e:60:f5:b7:f4:a7:e5:
eb:48:81:f5:27:41:b6:c8:a2:2a:31:cb:32:1c:88:8e:e7:2e:
76:1e:4d:bb:c6:35:50:f3:c9:a6:d9:47:66:ee:43:3a:2b:24:
23:c1:53:a9:e7:19:44:0d:a6:8d:12:5c:7b:9c:09:cd:49:d2:
74:e8:be:e3:9c:77:e4:50:b4:a8:63:b7:61:10:c4:43:04:9b:
4b:a8:f7:9c:31:59:39:8d:56:b6:bc:f0:04:16:e2:ed:db:90:
26:c1:cd:54:09:cf:b3:01:df:7a:85:0e:b0:e5:4f:1a:db:ba:
ce:2b:0b:2c:19:a8:37:f6:00:ce:c2:99:b7:f4:e4:74:bb:c5:
2e:8a:99:5a:c1:14:70:58:e2:be:78:f2:db:83:a9:82:86:e1:
8e:59:19:2f:ad:9f:57:76:97:5f:78:4f:70:c5:a1:ab:69:f5:
d4:1a:e2:4b:3f:0f:a5:cc:c0:0b:2a:57:e9:ce:79:e8:bf:b7:
77:4e:1f:af:eb:51:20:0c:03:1d:b7:26:c5:37:44:73:4b:f6:
a0:b5:75:62:5d:92:68:6d:f0:8f:9a:3d:a2:93:2e:c1:66:a7:
04:d3:93:e8:1f:7f:6e:f4:e2:cb:b6:4a:62:69:ab:71:21:ed:
cc:0b:bd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:33 2025 by rpki-client