Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/FXOQ9DZsOJSoLCmx0MtWYLZoLis.roa
File: FXOQ9DZsOJSoLCmx0MtWYLZoLis.roa (raw, json)
Hash identifier: Vb1pyOLHyXJ0GmUgGbGVYVs6jxiUud7ztRRHO3n5g/A=
Subject key identifier: 15:73:90:F4:36:6C:38:94:A8:2C:29:B1:D0:CB:56:60:B6:68:2E:2B
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 0194221F4AFED5268507E10067F2494AD40E
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/FXOQ9DZsOJSoLCmx0MtWYLZoLis.roa
Signing time: Wed 01 Jan 2025 13:47:43 +0000
ROA not before: Wed 01 Jan 2025 13:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45929
IP address blocks: 45.82.4.0/22 maxlen: 22
45.88.84.0/22 maxlen: 22
45.132.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:4a:fe:d5:26:85:07:e1:00:67:f2:49:4a:d4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jan 1 13:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=157390f4366c3894a82c29b1d0cb5660b6682e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:ef:ad:8e:54:7d:4e:2b:2f:4f:66:e0:c0:
a3:e8:4e:9e:4d:b5:d8:a1:16:f6:e9:a3:d6:06:95:
03:a0:ef:66:4f:a6:7c:51:50:7c:c4:c0:bb:d9:f3:
1a:9e:d1:81:4e:85:2e:e8:3d:80:9b:de:e2:cd:88:
6c:6d:c2:a8:fd:de:68:60:5c:d4:85:d2:ef:85:90:
f7:8b:ba:2f:4d:d6:fe:f9:33:54:d3:39:b8:b6:06:
1b:ae:34:4a:ac:46:3c:0f:26:24:2e:24:bb:9e:34:
31:a8:9f:83:66:f2:b5:eb:eb:81:1a:88:97:e1:a4:
8e:08:81:45:69:f4:f9:47:37:3a:5a:44:37:ae:3c:
bf:54:84:aa:49:f4:83:b1:ea:7a:14:a7:b7:da:33:
3f:b0:ac:58:de:c8:33:73:7a:d9:9b:06:f8:db:c8:
60:98:dd:e9:66:b3:c2:0d:43:24:0c:85:db:65:61:
92:2c:ea:9c:ed:db:86:94:f0:f8:e2:b9:28:e8:5d:
f3:b2:0d:04:23:52:6b:12:fa:57:89:03:5b:29:63:
2d:59:a9:1c:f0:84:8f:61:ce:6b:f1:90:5d:62:01:
5b:0b:a2:7f:17:55:fe:18:72:b6:cf:8a:c6:1d:51:
d7:78:5a:9e:1d:13:41:9c:91:aa:48:ee:79:9e:fe:
2b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:73:90:F4:36:6C:38:94:A8:2C:29:B1:D0:CB:56:60:B6:68:2E:2B
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/FXOQ9DZsOJSoLCmx0MtWYLZoLis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.4.0/22
45.88.84.0/22
45.132.120.0/22
Signature Algorithm: sha256WithRSAEncryption
76:da:bc:b7:9b:45:5b:31:b7:1b:2a:b9:f1:27:cc:a0:2c:57:
cd:73:65:a9:59:d7:c7:b7:be:7c:fe:89:67:68:41:a8:f0:7b:
72:ca:dd:83:37:bf:14:45:38:97:f9:b8:12:7b:ad:87:e9:5d:
e5:84:89:66:55:98:49:4a:e9:ab:c7:f4:59:1c:39:1d:cc:2a:
d9:40:96:41:88:58:2f:1c:df:8d:38:70:80:d5:f3:a5:ed:0d:
56:59:1e:15:0c:27:66:10:f1:00:26:26:01:23:d2:78:8e:a8:
cc:a9:c8:be:a3:17:1d:56:51:19:78:c0:17:f2:57:ce:bf:08:
e1:4c:57:92:76:92:95:b2:ad:b5:27:c2:dc:2a:6a:60:bc:69:
89:6c:38:34:2b:61:a7:e8:a8:9b:64:c1:ae:72:ee:ac:e5:6e:
d6:05:ff:cd:8c:32:c0:3f:bb:fe:27:c0:21:aa:dc:77:63:66:
99:2b:da:82:4b:f2:c4:12:71:c2:1e:7d:db:a4:64:27:91:72:
78:f0:93:b4:f4:b6:3b:c9:58:15:89:1d:c1:f8:4d:b6:b0:ce:
eb:0a:3e:2c:5a:0a:ba:67:34:c7:6b:69:93:50:7c:1f:43:bb:
b8:a8:ca:5e:6b:fb:b6:61:ae:b4:aa:3d:fd:e7:9d:f7:e0:00:
0d:dd:19:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:33 2025 by rpki-client