Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/Fbl_8WGI1C7f1wPZHGK7S3gLZaQ.roa
File: Fbl_8WGI1C7f1wPZHGK7S3gLZaQ.roa (raw, json)
Hash identifier: NL0QIjIou+OxKzKIsDqTkRFSewfY3uHwVOF761s8FKo=
Subject key identifier: 15:B9:7F:F1:61:88:D4:2E:DF:D7:03:D9:1C:62:BB:4B:78:0B:65:A4
Certificate issuer: /CN=78356c6a831680e9b8b7c95514953007a9407e87
Certificate serial: 0194266B94265234E2F63A1065935C1319D8
Authority key identifier: 78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/Fbl_8WGI1C7f1wPZHGK7S3gLZaQ.roa
Signing time: Thu 02 Jan 2025 09:49:31 +0000
ROA not before: Thu 02 Jan 2025 09:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34997
IP address blocks: 45.87.156.0/22 maxlen: 24
45.87.156.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:94:26:52:34:e2:f6:3a:10:65:93:5c:13:19:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78356c6a831680e9b8b7c95514953007a9407e87
Validity
Not Before: Jan 2 09:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15b97ff16188d42edfd703d91c62bb4b780b65a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:cf:61:92:17:73:18:1c:62:5c:93:2a:be:
d0:1e:d9:8f:fe:d6:19:d1:cc:c5:11:1d:d9:34:c9:
32:02:8a:ea:13:ab:ad:ae:de:36:94:fc:56:39:e5:
ef:e7:88:68:54:a7:6a:06:cc:9e:5f:f5:3f:28:3b:
8e:bf:3d:62:2b:a5:90:b8:e3:40:e9:7e:73:f6:64:
b2:94:1c:c2:1b:15:1a:1a:15:97:d5:df:e6:c1:9a:
ad:ec:00:a5:37:ec:63:81:ff:16:42:7f:8e:24:b1:
4a:46:eb:3e:c4:56:b2:10:63:de:f2:29:26:e9:2a:
42:4a:23:16:b7:fe:b6:70:2e:07:bb:af:a2:cd:30:
67:b2:1b:b9:d0:1f:90:de:d5:c9:06:c9:e4:c9:47:
bc:0c:b4:59:33:3a:ad:7b:dd:86:53:e5:27:04:1b:
82:35:bc:b6:9d:2e:9c:30:37:10:af:cc:aa:ad:8e:
81:0f:05:f4:db:1a:56:9c:56:40:cb:f7:07:bb:81:
9b:91:bf:62:2b:bc:9d:eb:4a:c8:8b:d6:f9:a2:ff:
64:4b:14:ff:42:0f:52:7f:a5:f8:92:e2:c3:cd:ee:
6c:ef:67:4e:dd:a2:f9:ae:91:41:16:c6:d5:5b:72:
28:18:de:fb:d9:e9:ea:a5:0d:33:4d:6f:dc:a3:0a:
bd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B9:7F:F1:61:88:D4:2E:DF:D7:03:D9:1C:62:BB:4B:78:0B:65:A4
X509v3 Authority Key Identifier:
keyid:78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/Fbl_8WGI1C7f1wPZHGK7S3gLZaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.156.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:b5:5b:bc:b5:20:d6:a9:dc:27:2c:23:44:e8:52:7f:4b:85:
49:1c:85:5d:c7:e5:13:6a:fa:1c:c3:8d:e7:51:85:87:71:05:
44:17:ac:2c:61:46:7d:b9:8c:23:99:1c:64:ff:17:9f:ea:1d:
fb:ee:23:16:81:19:24:0e:3a:5e:d8:ee:02:e7:64:ba:07:4e:
d4:b1:73:b8:e7:8f:90:22:9a:ad:f5:bb:e4:aa:85:89:dd:d1:
f8:73:6e:09:55:b3:42:ac:f6:95:d5:68:da:af:c0:35:d2:f8:
b8:c7:24:47:7c:42:81:bd:3a:c2:80:b1:26:b4:0e:dd:4e:9e:
10:aa:2f:53:95:4c:f4:31:5e:d9:60:5f:1d:99:c3:8e:64:72:
a6:ac:d7:56:9d:29:c3:1d:f9:93:a1:75:b7:95:d6:f5:7f:44:
f1:2f:cb:d3:3e:c6:5a:b4:4c:9c:94:d1:9d:3e:8d:2e:9b:7c:
86:3d:a7:d0:12:e3:22:b1:14:2f:d5:bf:51:57:32:cd:46:a7:
dd:7b:47:64:2d:85:2a:d5:ee:ae:2c:e6:59:c9:9f:e6:9e:97:
80:20:74:13:0d:8c:44:fe:0c:4c:d1:81:83:af:16:22:c4:b1:
c9:b2:69:3f:47:91:49:26:d1:61:1c:bc:75:e1:23:e1:bf:a7:
08:cb:c4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:01:12 2025 by rpki-client