Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/fD8GIH6z46Fe4jXM5zFhzDh2XyA.roa
File: fD8GIH6z46Fe4jXM5zFhzDh2XyA.roa (raw, json)
Hash identifier: 2gGDcWr1z9OKvXcdR3D8qcYgZBgggJEEN+hEEGnbSmc=
Subject key identifier: 7C:3F:06:20:7E:B3:E3:A1:5E:E2:35:CC:E7:31:61:CC:38:76:5F:20
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 0194266B95A51E91A482320D64820EF267BC
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/fD8GIH6z46Fe4jXM5zFhzDh2XyA.roa
Signing time: Thu 02 Jan 2025 09:49:32 +0000
ROA not before: Thu 02 Jan 2025 09:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212335
IP address blocks: 45.143.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:95:a5:1e:91:a4:82:32:0d:64:82:0e:f2:67:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Jan 2 09:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c3f06207eb3e3a15ee235cce73161cc38765f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:c8:47:c3:41:bc:7e:6b:ae:09:54:bc:b6:
c1:d5:32:2a:f9:c7:4a:4c:cc:81:be:6f:10:66:f1:
82:03:ea:aa:1e:8f:c9:b1:93:06:68:ee:0e:5b:19:
cc:d4:e7:6f:cd:39:6f:e6:4b:e4:44:ae:3f:e6:68:
69:64:61:b7:ae:e3:e0:78:7d:87:7f:0b:cb:65:97:
e7:ff:e4:4c:b6:74:b7:36:3f:97:bf:4a:fc:33:24:
b1:c0:48:1e:c5:f8:30:03:75:27:ca:d4:01:60:96:
7c:56:68:ff:02:fd:31:f5:0e:1c:a1:af:e3:94:6b:
e1:e3:6e:ea:24:0e:8f:9d:9d:4b:73:59:76:63:fc:
65:e6:92:b7:2c:e8:38:47:88:b8:99:8a:63:2b:9a:
ff:fe:24:f6:69:23:cf:89:6c:b8:97:7b:6c:c2:cc:
d1:05:2a:a3:bb:d9:93:9e:fa:84:52:2f:bd:0f:16:
d9:6c:3f:d7:ef:2b:06:b2:2a:44:17:a3:af:c5:80:
5c:ab:ce:c7:ce:25:87:b7:4f:df:66:e2:25:36:ca:
99:4d:48:f4:f7:00:49:f1:fe:d1:b1:d8:0c:2f:c6:
00:d5:68:58:2b:2c:df:78:40:e8:97:67:18:74:cb:
7b:0e:38:5b:65:6b:fa:ec:dc:d6:00:0c:d6:2c:b0:
c9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3F:06:20:7E:B3:E3:A1:5E:E2:35:CC:E7:31:61:CC:38:76:5F:20
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/fD8GIH6z46Fe4jXM5zFhzDh2XyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.7.0/24
Signature Algorithm: sha256WithRSAEncryption
46:e4:a5:72:3f:29:71:2f:8d:15:91:d8:ef:21:51:3b:1d:b7:
bb:60:8c:ef:ae:0f:41:fa:84:8e:25:86:e6:32:39:f9:9a:2e:
0f:b4:75:50:c1:75:ca:03:0d:24:8e:e7:7c:ea:f9:25:6f:20:
fb:52:b9:68:69:28:8d:3d:1e:00:24:d4:16:aa:cd:d3:86:8c:
05:57:31:0c:66:b0:59:e1:e3:d4:1b:e4:e3:be:3f:09:08:2c:
34:24:bc:4d:53:07:03:63:51:fc:f6:20:fe:45:10:23:5c:25:
26:7e:9c:ac:e7:cd:9b:d0:b1:fc:73:ce:98:31:15:73:54:0c:
bb:91:6d:e0:9a:a5:b6:37:a9:6a:de:a6:72:7e:16:60:a4:f1:
16:42:ee:fb:48:70:67:58:ca:a2:ba:73:3e:42:71:8d:ac:52:
b2:0e:13:34:23:c6:a8:7c:da:70:c7:23:28:12:38:f3:14:ea:
27:86:61:54:87:8e:88:ab:e3:01:21:7a:db:3c:fc:60:42:10:
c2:e4:63:30:e7:75:8f:7e:c0:56:ab:45:46:b6:94:e4:78:bd:
c6:2c:2b:c0:72:b5:f9:a7:3c:b1:a7:65:9d:0f:57:1b:f2:0f:
73:a6:7f:1c:6f:c5:10:3b:5b:71:67:57:b5:99:2d:00:be:f5:
33:10:88:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:12:35 2025 by rpki-client