Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/23KMPeQbWn3Hezr2U3fF6vSsekI.roa
File: 23KMPeQbWn3Hezr2U3fF6vSsekI.roa (raw, json)
Hash identifier: deu59RLm1wKgBqajx/uB4Ha1F2dek3FuvSZTbJeY9N8=
Subject key identifier: DB:72:8C:3D:E4:1B:5A:7D:C7:7B:3A:F6:53:77:C5:EA:F4:AC:7A:42
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A5D7C1549AF8AA355F79366B8FCC2
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/23KMPeQbWn3Hezr2U3fF6vSsekI.roa
Signing time: Wed 01 Jan 2025 19:49:20 +0000
ROA not before: Wed 01 Jan 2025 19:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2687
IP address blocks: 145.30.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:5d:7c:15:49:af:8a:a3:55:f7:93:66:b8:fc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db728c3de41b5a7dc77b3af65377c5eaf4ac7a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e5:3f:97:84:7c:a9:dd:88:0a:51:c5:02:f2:
a9:b7:87:a3:1c:23:e2:e3:98:9b:2d:2f:b7:2a:11:
c7:7c:cc:1c:7f:14:33:0f:ab:c3:93:b3:bd:23:65:
3f:4b:03:19:63:d2:28:4e:fa:9a:6a:e9:d8:6c:ff:
d6:0d:65:a7:86:0e:dc:59:54:84:29:94:c9:9d:88:
b8:b2:b4:85:46:31:c2:65:ea:c4:16:76:31:bc:bb:
5d:4e:0c:41:94:2f:9c:5a:93:78:16:26:36:60:1b:
cd:3e:57:ac:ff:6f:8c:62:23:52:3e:21:c0:95:27:
aa:d8:2c:17:e5:64:fd:af:a3:b3:69:95:b6:c5:c8:
ad:2b:91:c8:fe:fc:ee:5d:9b:f6:34:8b:51:7b:7b:
f5:a5:7c:38:2d:82:03:9e:f0:ba:76:dc:6c:c2:f6:
31:82:1e:91:38:08:46:c0:e2:59:b3:db:ec:e7:18:
56:ba:89:21:e8:05:90:4e:42:b8:52:ac:40:ef:de:
00:78:a4:1c:5b:34:aa:26:50:c9:85:fe:7d:bc:1d:
92:32:11:77:12:0b:d9:8c:80:54:a9:b4:49:e4:10:
8e:2e:fc:33:47:26:f6:cd:1f:24:6d:78:b3:84:3b:
cd:4c:75:cb:de:8b:65:a4:52:d6:8a:26:37:70:43:
41:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:72:8C:3D:E4:1B:5A:7D:C7:7B:3A:F6:53:77:C5:EA:F4:AC:7A:42
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/23KMPeQbWn3Hezr2U3fF6vSsekI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.30.226.0/24
Signature Algorithm: sha256WithRSAEncryption
49:cf:57:a6:e8:3d:a8:84:cc:f1:0a:f1:40:31:18:6c:67:38:
13:f7:2f:73:60:d9:70:99:a7:75:ff:fa:55:cb:dd:e7:f7:01:
87:82:98:9a:f9:57:b8:6b:a2:7c:da:26:3d:99:a8:8c:48:25:
e2:08:90:67:0d:34:13:b8:ba:72:76:a1:ef:79:0b:cd:2c:24:
f1:85:20:cc:e0:76:6f:b1:38:51:40:14:d1:3d:6e:35:e1:19:
39:c6:9a:44:10:aa:fb:b4:ff:56:fa:d2:0e:97:84:65:6c:e5:
fe:67:0b:42:5d:7f:7c:25:7e:5d:19:dd:9d:46:9c:f3:3b:b9:
83:8a:14:61:14:d0:24:5c:fd:6d:12:15:76:a3:ba:64:5d:5f:
6f:91:e4:db:36:b1:61:23:ee:f8:d1:3f:c5:75:1d:bb:89:05:
36:1d:fc:e9:f4:1d:97:a8:29:9a:f0:f1:d3:56:3f:28:91:8c:
87:42:be:ab:b7:b7:c8:70:d1:18:2c:ac:f1:0e:3a:79:d0:99:
03:de:73:64:17:c3:b0:4d:85:06:4d:fc:75:05:ed:fc:73:30:
10:de:41:81:5d:77:87:42:7c:69:5a:46:27:14:08:35:7d:aa:
f5:1d:f7:90:d9:49:7c:95:1d:3a:92:68:b9:94:70:f0:ac:0b:
b3:16:fb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:02:09 2025 by rpki-client