Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/IOLW6-jD0y2arMH-zMIZVJRZbkE.roa
File: IOLW6-jD0y2arMH-zMIZVJRZbkE.roa (raw, json)
Hash identifier: S6NprCW0AToClI49KC50pRU+q6xv1zGZktKZWElDFQU=
Subject key identifier: 20:E2:D6:EB:E8:C3:D3:2D:9A:AC:C1:FE:CC:C2:19:54:94:59:6E:41
Certificate issuer: /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial: 019425FDA1D1446235C4A10A4A8322DF38EB
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/IOLW6-jD0y2arMH-zMIZVJRZbkE.roa
Signing time: Thu 02 Jan 2025 07:49:26 +0000
ROA not before: Thu 02 Jan 2025 07:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197730
IP address blocks: 45.145.5.0/24 maxlen: 32
45.152.87.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a1:d1:44:62:35:c4:a1:0a:4a:83:22:df:38:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Validity
Not Before: Jan 2 07:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20e2d6ebe8c3d32d9aacc1feccc2195494596e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:16:a3:81:a8:2b:5c:4f:77:52:ee:43:df:
e6:87:83:ec:24:48:76:08:0e:ab:56:30:24:d7:1e:
35:76:99:c1:d8:06:45:61:de:c8:2c:b8:0a:c1:32:
ac:ad:92:7e:df:93:0c:54:bf:c3:d3:18:97:6d:63:
df:13:fb:03:f2:cb:66:d4:d9:14:4f:47:86:a8:90:
bb:56:f4:6d:2a:30:e2:d7:cf:df:96:ee:62:9a:cf:
11:f0:8d:4a:e2:1a:0a:10:4f:60:12:22:e5:83:10:
4b:d8:0c:f5:9b:8a:0d:73:64:e1:49:b7:dd:c5:20:
03:e7:e6:7d:ea:c2:c9:82:48:f2:bf:26:89:c9:fc:
19:6a:3e:8a:62:62:64:74:74:52:e8:48:ea:16:eb:
0a:3f:f2:30:a5:a8:fd:bb:17:ae:58:df:38:b8:31:
f0:11:a7:52:a9:ca:20:19:12:62:a3:55:bd:65:28:
f4:32:6e:89:49:9a:05:f5:67:75:cb:3a:e0:b7:fb:
28:f0:b6:ea:9b:b6:00:c7:5b:6e:49:47:48:91:78:
88:a3:8f:17:72:0e:9f:05:99:78:b4:02:ad:3d:0d:
34:a9:b1:a8:6a:02:d6:b8:a0:f4:2d:31:2f:1d:62:
94:e6:2b:5a:ce:dc:43:eb:f5:37:0c:5a:5f:96:01:
96:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E2:D6:EB:E8:C3:D3:2D:9A:AC:C1:FE:CC:C2:19:54:94:59:6E:41
X509v3 Authority Key Identifier:
keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/IOLW6-jD0y2arMH-zMIZVJRZbkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.5.0/24
45.152.87.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ae:5f:83:45:d8:de:c1:bb:80:65:d3:01:a3:8b:8c:8e:e4:
5c:6d:27:4e:5b:b0:e6:19:e4:79:0a:e4:6a:e0:88:58:50:a7:
a2:8a:0e:73:d8:38:68:cc:61:47:06:06:fb:85:6c:80:0a:82:
94:db:9a:92:1f:64:2c:17:64:69:7a:e8:72:39:22:02:fa:16:
90:38:2b:ec:11:d6:15:1c:9f:9f:cf:20:c7:1f:e8:c3:4b:9f:
e2:e8:30:da:41:81:51:58:33:2c:e2:be:58:86:c3:dc:17:29:
74:36:bf:fe:51:4e:9d:5d:a4:6c:b8:7e:82:f8:81:56:48:7c:
52:5a:86:a1:d7:82:ea:82:d7:22:43:e0:f1:3c:9a:28:20:27:
03:b3:e1:08:6c:8a:64:5f:98:5b:6f:b1:23:ac:ba:b3:09:83:
61:c1:b1:d6:69:eb:1e:ca:06:b2:b9:86:3e:12:06:c5:51:36:
6b:71:62:ab:ac:5b:f1:0b:57:17:7e:37:be:67:67:28:5b:27:
f5:11:c2:36:c6:5f:9d:b5:47:af:bb:1c:50:7a:52:8f:52:62:
11:93:8d:a9:5d:71:21:81:9b:3d:4b:63:ae:1b:3f:44:02:fb:
ab:57:03:f2:fd:63:72:c6:9f:b1:c7:67:59:95:10:e4:d3:b2:
8f:a5:7a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:16 2025 by rpki-client