Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/rQGjF7CS3G8ySkkrwz5hQvGaUtk.roa
File: rQGjF7CS3G8ySkkrwz5hQvGaUtk.roa (raw, json)
Hash identifier: UmfdL/yMHB7LypaEgd2ulm2mGfbyrt6kIxKgT/oReek=
Subject key identifier: AD:01:A3:17:B0:92:DC:6F:32:4A:49:2B:C3:3E:61:42:F1:9A:52:D9
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 0194214389E65396DDB073B466494D1D0C2E
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/rQGjF7CS3G8ySkkrwz5hQvGaUtk.roa
Signing time: Wed 01 Jan 2025 09:47:41 +0000
ROA not before: Wed 01 Jan 2025 09:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200017
IP address blocks: 45.143.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:89:e6:53:96:dd:b0:73:b4:66:49:4d:1d:0c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Jan 1 09:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad01a317b092dc6f324a492bc33e6142f19a52d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f6:f8:9d:71:f1:4e:13:bb:1d:45:5e:62:dd:
5c:3e:ef:05:b7:f1:9e:5d:8f:23:42:dd:54:eb:47:
8f:29:8f:18:f1:18:19:39:d8:d2:81:c3:1f:89:f4:
28:d2:e8:b2:ae:49:ea:c3:d8:c5:c9:78:b3:80:c0:
ba:fa:fc:9e:e6:31:48:30:2a:61:33:c4:00:59:ff:
b5:6d:4f:3d:d3:ce:9c:e9:37:86:3f:2c:5a:4e:c1:
8d:c1:0e:6c:b2:84:5c:c5:63:a2:17:04:43:1c:33:
76:ce:aa:ca:70:21:26:ec:93:82:84:e1:10:e5:d1:
34:db:df:30:4b:7e:d4:76:c7:a1:5e:f1:36:5b:ac:
ef:d7:2e:74:37:14:0a:67:ef:71:7b:a0:c0:61:f5:
3f:32:8e:fe:f7:ab:d8:e6:86:68:46:08:5b:c8:a9:
9e:6d:1e:22:24:be:9a:0d:4e:22:bb:a9:d3:cb:a3:
a6:fa:c7:1e:ef:06:75:19:0a:96:ef:fd:65:1c:58:
ec:3c:8c:c9:32:1a:4b:b4:3c:86:ec:34:63:1c:1b:
a1:1f:22:3d:0d:53:80:7b:41:0e:29:f5:e7:ff:8d:
17:59:37:23:b1:ab:d6:3e:11:c7:e8:28:4a:2a:3a:
66:f8:a6:48:92:ba:9a:61:12:5d:94:4e:cc:d0:40:
45:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:01:A3:17:B0:92:DC:6F:32:4A:49:2B:C3:3E:61:42:F1:9A:52:D9
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/rQGjF7CS3G8ySkkrwz5hQvGaUtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.10.0/24
Signature Algorithm: sha256WithRSAEncryption
17:95:25:30:34:11:aa:74:21:36:ba:e3:06:2d:2a:90:f4:db:
8d:d0:78:75:a3:d0:c6:09:0f:f6:60:20:da:93:0a:47:4b:64:
77:07:31:ea:d6:85:7a:f2:3f:7c:eb:11:a1:b8:83:54:06:3e:
49:3a:a9:0a:21:f0:b8:2d:2c:6f:9d:99:6a:71:e2:67:88:db:
fa:68:ac:fa:d6:c1:a2:81:5c:e9:60:67:a3:f0:1b:e8:fc:d5:
1d:bc:1b:93:5e:f7:48:82:57:cf:70:cc:4f:25:af:dd:17:c1:
fe:f7:60:1f:3f:06:d6:be:94:93:fe:d7:26:5e:2b:a0:c5:e4:
60:af:22:3a:91:04:2f:18:62:16:44:d1:73:0b:4f:61:be:2a:
00:86:4a:f2:7a:95:b7:5e:71:eb:f5:a1:fb:06:02:99:25:84:
f8:35:0f:70:0b:4b:da:59:81:be:aa:65:13:1b:43:c8:e5:73:
a1:0b:71:00:68:bf:88:22:02:a7:f7:36:25:6a:89:99:19:17:
f7:98:6f:03:dc:a0:93:6a:9c:5e:d9:e9:7c:df:bf:66:d3:d4:
c5:04:15:7e:73:d7:08:5f:59:90:15:14:ec:84:b3:e4:15:a1:
46:5d:d1:e9:2f:35:63:87:dd:03:3e:33:32:d8:6a:d1:e3:36:
c1:db:e0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:08 2025 by rpki-client