Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/M4-IvB3UC8rtS0rxe63VoL01Zfs.roa
File: M4-IvB3UC8rtS0rxe63VoL01Zfs.roa (raw, json)
Hash identifier: FzHFKr4ajR6Cy6lwE7ivk6gzufkDJ/eaCAEEUs6kLAg=
Subject key identifier: 33:8F:88:BC:1D:D4:0B:CA:ED:4B:4A:F1:7B:AD:D5:A0:BD:35:65:FB
Certificate issuer: /CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Certificate serial: 01856E5D760E5FBA20027718705F158A322F
Authority key identifier: DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/M4-IvB3UC8rtS0rxe63VoL01Zfs.roa
Signing time: Sun 01 Jan 2023 17:24:56 +0000
ROA not before: Sun 01 Jan 2023 17:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 45.15.18.0/24 maxlen: 24
2a0e:1c80:15::/48 maxlen: 48
2a0e:1c80:e::/48 maxlen: 48
2a0e:1c80:11::/48 maxlen: 48
2a0e:1c80:14::/48 maxlen: 48
2a0e:1c80:12::/48 maxlen: 48
2a0e:1c80:a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:76:0e:5f:ba:20:02:77:18:70:5f:15:8a:32:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Validity
Not Before: Jan 1 17:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=338f88bc1dd40bcaed4b4af17badd5a0bd3565fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:16:f9:56:f7:b5:ae:a7:9e:aa:f6:79:41:c0:
26:41:3f:e6:c9:68:76:c1:35:5a:34:31:c2:d3:10:
da:bc:a1:9d:aa:dc:ed:85:52:f3:60:21:87:4b:38:
12:59:12:3c:3c:fd:29:0a:7c:b7:e5:37:da:b2:b6:
f2:a4:64:9a:18:13:a8:d5:f2:40:f5:8b:f6:98:b8:
e7:48:df:a6:3c:ff:38:9f:7a:e6:b5:b0:82:f2:40:
56:2a:7b:e5:bb:39:37:9e:6e:99:8c:0f:0b:c9:d4:
2a:28:d7:42:1c:d2:55:ef:83:25:7a:f4:23:d1:b5:
db:50:95:36:25:bc:6b:b7:87:14:79:e7:11:2d:4a:
f1:ef:16:9f:50:b5:a7:7b:cd:1f:a3:3a:f9:5f:29:
f7:9e:31:01:76:3b:18:8e:8c:b7:83:27:5d:09:04:
c8:a1:01:b5:92:4f:97:45:c7:1a:93:8f:4a:78:c3:
af:0f:2a:c7:c9:04:3b:f6:43:aa:ac:8d:6b:4d:d5:
d2:d9:7c:5d:40:d1:59:f1:ee:e2:db:b2:35:d3:18:
99:20:0a:e1:05:cd:26:90:0f:cf:a4:7b:f5:c0:1e:
f3:31:75:9b:7d:6b:36:ea:5e:eb:e9:4b:c6:72:3c:
db:fe:66:61:04:57:85:51:0a:8f:22:b3:8e:ef:5b:
b7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8F:88:BC:1D:D4:0B:CA:ED:4B:4A:F1:7B:AD:D5:A0:BD:35:65:FB
X509v3 Authority Key Identifier:
keyid:DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/M4-IvB3UC8rtS0rxe63VoL01Zfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.18.0/24
IPv6:
2a0e:1c80:a::/48
2a0e:1c80:e::/48
2a0e:1c80:11::-2a0e:1c80:12:ffff:ffff:ffff:ffff:ffff
2a0e:1c80:14::/47
Signature Algorithm: sha256WithRSAEncryption
02:61:80:bc:6f:b2:d3:50:2b:ae:c3:8f:09:d3:cd:4e:e0:f6:
c1:bc:77:0b:dc:bb:cf:a1:cd:6d:5a:8c:cc:84:b3:0c:a6:cf:
b0:3f:c5:a3:59:e7:ce:8b:90:e6:7b:3a:91:98:e7:49:a0:fa:
a1:81:75:ff:1d:af:a4:21:0b:98:bd:9d:41:0c:7d:67:4d:97:
81:fe:7f:92:5e:81:30:cf:79:11:d3:b9:d9:ef:a5:9b:25:eb:
c9:8d:38:3f:7d:f1:b9:25:ef:24:02:e4:fc:24:a6:f5:46:a4:
7d:70:b4:23:c5:1b:ee:42:e9:29:2f:17:28:ca:a7:1d:92:11:
e1:c8:b4:df:4f:f4:da:55:6d:91:3c:87:db:6f:e0:30:ee:90:
0e:03:e4:1d:f6:65:b0:91:16:a1:14:1a:1b:3f:1b:56:13:f1:
51:2f:c8:15:a0:52:c7:47:f2:03:c0:7d:84:0a:e7:d0:83:df:
c4:b4:b7:b5:10:b9:be:a4:68:c2:02:ba:29:35:83:14:9c:49:
a8:71:83:66:07:99:05:a7:bc:6e:e1:cf:0f:23:f0:98:80:31:
22:48:ca:3c:ea:9f:d9:79:a4:51:26:ae:28:a4:35:ae:9f:48:
04:b7:1b:4c:bf:97:14:9f:29:4e:88:69:32:38:4a:fe:7c:aa:
20:69:92:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:49:58 2025 by rpki-client