Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F8WU_74rkrWhnZ3FfxwPU5l1OhM.roa
File: F8WU_74rkrWhnZ3FfxwPU5l1OhM.roa (raw, json)
Hash identifier: 3sAv7c80QsoBEqF1PHBbGPC1BtLUUku1p/3QMLXD1bE=
Subject key identifier: 17:C5:94:FF:BE:2B:92:B5:A1:9D:9D:C5:7F:1C:0F:53:99:75:3A:13
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01957F975F7C0B8B16FCFA58BBF0ECF6E2F7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F8WU_74rkrWhnZ3FfxwPU5l1OhM.roa
Signing time: Mon 10 Mar 2025 10:26:21 +0000
ROA not before: Mon 10 Mar 2025 10:26:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211955
IP address blocks: 45.148.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:97:5f:7c:0b:8b:16:fc:fa:58:bb:f0:ec:f6:e2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 10 10:26:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17c594ffbe2b92b5a19d9dc57f1c0f5399753a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ec:1f:8f:27:5f:ed:a2:92:12:4b:a1:fc:1d:
0a:ee:19:65:7d:7d:08:f3:cb:94:5f:0d:6b:1f:65:
28:87:b3:28:0b:cd:90:0e:4a:84:70:6d:f4:72:4d:
e0:b7:13:4c:64:36:82:f7:ea:93:39:7a:4e:20:15:
5a:5b:cb:4a:5e:48:db:00:58:7c:c7:ba:3e:62:0c:
41:3d:f4:b2:9c:df:5e:7b:dc:e6:5d:ce:9b:e3:35:
05:48:f3:46:06:c6:2d:06:ec:a7:b8:cf:fa:29:1d:
b4:46:8c:bc:8b:b8:56:dd:12:34:dc:d9:83:0e:96:
e9:ed:20:c6:81:30:d3:fd:72:1d:21:5b:57:36:6c:
01:27:49:51:78:a9:95:66:f1:fb:8d:99:fb:ee:30:
e6:58:4b:7a:1d:dd:49:2c:69:df:24:07:8c:9f:61:
c4:fb:42:de:d5:e0:49:95:09:e5:2d:45:55:7e:d7:
b6:8f:27:4e:de:bc:f7:ff:fb:2d:50:ba:2a:68:91:
23:bf:01:de:5a:36:bd:c8:ea:71:f7:48:b4:ea:85:
a0:fb:82:68:d1:44:82:ae:ed:e3:d8:f1:6c:3f:4c:
de:18:01:7b:1d:64:6d:7d:2a:b9:61:75:ae:03:e8:
92:b2:94:f2:16:dd:60:f9:10:1f:b5:1f:41:77:73:
0e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C5:94:FF:BE:2B:92:B5:A1:9D:9D:C5:7F:1C:0F:53:99:75:3A:13
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F8WU_74rkrWhnZ3FfxwPU5l1OhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.117.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ca:35:80:b1:7b:b2:43:e9:92:4b:26:56:b0:3a:01:d9:f1:
10:f0:8d:99:aa:ed:0e:27:a6:71:8e:3c:63:dc:01:6f:9d:5b:
4f:24:38:2b:0f:8b:3f:49:60:d7:33:9c:9a:66:a0:ac:4b:7b:
f3:2c:5a:46:02:3e:b1:50:6b:22:3c:9c:3f:a3:c9:ef:17:11:
08:6e:b1:29:1d:b4:4d:66:41:cf:8a:6f:1a:63:61:80:d7:67:
09:d9:b2:97:9a:8d:b0:ba:19:5e:4a:a4:a2:b5:f6:73:b5:3f:
47:43:c6:5d:8b:ba:3a:78:57:52:62:e6:6f:66:1e:b0:cc:3d:
94:38:09:ef:d6:4c:d2:bd:6a:9d:39:41:4d:5d:16:95:59:62:
d6:8b:10:4a:3d:70:eb:7f:6b:86:a4:aa:10:31:a3:c3:f0:83:
4c:bc:cc:11:86:f5:4d:56:73:9f:56:4c:bb:a3:65:55:43:54:
c3:6b:5d:29:f7:99:09:26:ac:3d:99:21:59:a9:50:ea:a7:87:
e9:9a:b5:2a:49:85:d7:da:f2:aa:2e:c3:38:84:4d:a7:e1:55:
7a:74:96:27:fc:2b:7b:96:1b:16:02:50:31:a9:8c:0a:7c:a1:
4f:8a:2a:8e:13:45:c2:a2:ef:84:99:da:4c:a9:41:b3:be:31:
a0:2b:89:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:14:09 2025 by rpki-client