Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/Ud44FA6nXN0aIWmGBdx3TpPYy2A.roa
File: Ud44FA6nXN0aIWmGBdx3TpPYy2A.roa (raw, json)
Hash identifier: 5c0KA4lb0FkrJNeNHBkTh/r7Ks2iW2eBYrhOZ8+264o=
Subject key identifier: 51:DE:38:14:0E:A7:5C:DD:1A:21:69:86:05:DC:77:4E:93:D8:CB:60
Certificate issuer: /CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Certificate serial: 018736A00D7EBBED3762B73335E40BE7BBC1
Authority key identifier: DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/Ud44FA6nXN0aIWmGBdx3TpPYy2A.roa
Signing time: Fri 31 Mar 2023 07:44:31 +0000
ROA not before: Fri 31 Mar 2023 07:44:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 45.15.17.0/24 maxlen: 24
2a0e:1c80:18::/48 maxlen: 48
2a0e:1c80:16::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:36:a0:0d:7e:bb:ed:37:62:b7:33:35:e4:0b:e7:bb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Validity
Not Before: Mar 31 07:44:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51de38140ea75cdd1a21698605dc774e93d8cb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:db:65:c6:72:c2:15:19:31:d0:7a:29:2f:93:
58:9a:b0:1f:26:9b:50:0a:bd:c5:e1:80:ce:ae:d3:
d0:59:c6:ae:22:30:55:80:c3:d8:e6:4f:d8:85:f6:
02:ee:75:3c:e2:d6:30:26:ab:c3:d1:ab:c5:34:e4:
35:20:86:06:7d:ed:d8:8c:72:e3:4b:db:b9:c4:38:
75:15:e0:d3:4f:35:dd:00:d0:5c:7a:58:4a:0b:bd:
84:6e:fb:5e:a4:c9:07:3c:60:a1:41:9d:c8:01:c8:
6e:b1:f3:19:ba:17:e9:27:1e:e1:a3:44:1c:0e:a1:
ca:1c:ae:52:98:61:28:cc:09:3d:9a:7d:c2:13:ea:
c6:d8:a8:a9:1d:91:0a:dc:b3:01:1d:a1:00:50:05:
cd:3b:ec:71:64:09:29:7c:aa:30:26:8e:b3:7e:42:
b5:a3:22:47:06:c0:8f:2b:23:28:3d:1b:ae:d0:3e:
44:00:6c:64:af:da:51:f3:6c:b2:e3:76:4e:bb:b8:
2f:48:8a:c4:49:62:f1:45:7f:e8:9c:32:f0:50:db:
bc:da:b5:ec:c3:d7:26:c5:88:c0:f2:0a:c6:b5:44:
f2:12:d9:6b:d2:15:4c:01:af:48:50:3d:f2:0d:c4:
03:39:68:9c:38:a9:0d:c2:0f:98:ba:3c:a3:41:a9:
39:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DE:38:14:0E:A7:5C:DD:1A:21:69:86:05:DC:77:4E:93:D8:CB:60
X509v3 Authority Key Identifier:
keyid:DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/Ud44FA6nXN0aIWmGBdx3TpPYy2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.17.0/24
IPv6:
2a0e:1c80:16::/48
2a0e:1c80:18::/48
Signature Algorithm: sha256WithRSAEncryption
2a:ad:8d:ec:a3:cb:2d:0d:78:47:ce:4d:53:f0:28:e0:a0:c2:
7e:22:70:9b:14:6f:04:91:fc:82:ce:83:9d:5f:2c:eb:d9:e2:
76:23:ce:b9:55:f2:7a:58:28:56:6b:e0:61:42:7b:b8:2b:c8:
9a:cc:2d:d2:f2:79:fb:3f:90:e0:eb:8b:3e:30:06:5d:87:19:
81:fc:b8:9b:cc:6b:e2:b7:ea:70:d7:38:36:83:97:90:22:d4:
12:cf:2f:c5:c7:9a:38:de:86:84:c6:74:2c:cf:95:75:77:7e:
91:a1:47:b6:89:07:f2:d4:55:7d:5d:de:57:16:31:14:ad:d7:
0c:4e:7e:f6:e5:db:98:e9:4a:7d:f0:d9:0c:6d:2d:fd:99:d0:
22:39:91:f9:60:fe:4f:b9:75:5a:6c:ee:af:c5:58:ce:8b:ae:
af:4d:13:ee:02:46:03:e2:85:94:7e:86:9c:b9:2b:5f:ba:69:
3b:41:41:1b:1e:a1:24:1a:db:a7:16:b3:0b:71:9a:e6:ef:1c:
2e:19:90:9a:bb:f3:cd:45:37:cd:ab:91:db:4f:66:81:cf:33:
10:2f:19:d8:a8:6c:75:73:84:3c:9d:dd:27:49:9f:ea:6a:cf:
d1:69:1d:a4:07:8c:20:11:90:5b:d0:ba:84:40:f2:6f:2a:41:
45:90:f6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:01:07 2025 by rpki-client