Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/7YB1xyOkXG3V2tFQOrFtzwWj-W4.roa
File: 7YB1xyOkXG3V2tFQOrFtzwWj-W4.roa (raw, json)
Hash identifier: MTxbM2wbHktDLPQ2XWg8zIxRyoHI6s+Z9jbKHh76FIs=
Subject key identifier: ED:80:75:C7:23:A4:5C:6D:D5:DA:D1:50:3A:B1:6D:CF:05:A3:F9:6E
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A6500898D3D4C9462FD1BEA6E8CF1
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/7YB1xyOkXG3V2tFQOrFtzwWj-W4.roa
Signing time: Wed 01 Jan 2025 19:49:22 +0000
ROA not before: Wed 01 Jan 2025 19:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203952
IP address blocks: 145.15.40.0/24 maxlen: 24
145.15.41.0/24 maxlen: 24
145.15.112.0/24 maxlen: 24
145.15.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:65:00:89:8d:3d:4c:94:62:fd:1b:ea:6e:8c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed8075c723a45c6dd5dad1503ab16dcf05a3f96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:c9:3c:ce:e6:ba:e8:5f:f4:a4:c5:04:95:
03:be:ae:bb:69:28:e5:25:a8:fc:37:e1:27:31:1e:
f7:9d:d7:2e:75:36:7c:64:43:83:c0:d5:c7:5e:37:
58:6f:f0:a6:d6:2b:68:36:9e:87:3e:c0:aa:45:80:
c4:42:ee:8c:45:93:39:2e:2c:f2:b5:c7:fc:c6:c0:
21:56:f7:79:47:3b:bd:ff:67:44:84:0b:29:63:0a:
d5:f6:51:6c:ad:d7:1f:a9:85:8c:bb:2f:ca:9f:18:
0e:31:0a:3e:8a:31:6d:99:a4:4f:ac:68:4a:d0:ed:
fc:07:44:89:5a:57:3f:93:4f:48:2c:18:56:31:4f:
c4:2c:79:f3:2d:35:4f:cf:3e:76:ed:49:40:8e:e0:
c7:aa:e7:a7:19:1b:4c:4c:9d:b6:16:db:58:d5:3b:
38:b3:97:c5:e6:1e:53:bd:ac:f9:97:17:ad:97:36:
9b:3f:80:9d:fb:3b:54:40:d5:d6:99:8d:9a:d5:c6:
79:02:99:f5:c2:7e:c1:a8:f1:a3:49:e5:31:7c:c4:
4c:7d:2b:83:a9:a5:35:35:82:c1:6b:dc:ca:20:41:
c9:6e:49:2b:c9:23:7e:c8:57:9b:52:e8:b2:4e:de:
ec:12:64:96:c2:b1:d6:0e:a8:38:e1:03:b5:ff:50:
91:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:80:75:C7:23:A4:5C:6D:D5:DA:D1:50:3A:B1:6D:CF:05:A3:F9:6E
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/7YB1xyOkXG3V2tFQOrFtzwWj-W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.15.40.0/23
145.15.112.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:b2:ea:ba:01:f3:d7:2b:b1:07:6a:20:02:11:a8:54:ed:3e:
3a:c1:37:a8:c8:8c:f8:6d:47:2d:9f:3c:ae:90:f5:bc:0a:f4:
1f:93:3a:f2:0f:99:73:5c:7c:b1:56:e9:25:ea:49:15:d2:3d:
d0:b9:91:ef:6f:11:94:57:60:60:22:1d:d5:ea:8a:78:d7:c9:
17:15:cf:a8:2f:bd:16:5c:6a:f4:89:90:d0:ad:3c:93:ae:b7:
6f:ce:ad:77:d9:2a:9f:d9:3c:f4:f3:91:5a:58:2a:43:59:de:
fb:96:f8:50:c2:76:a7:25:db:f6:47:5d:67:f9:0c:8e:52:cc:
bf:80:f7:59:f7:c2:98:f2:35:12:a2:7e:05:34:d5:df:5c:1c:
fa:66:c9:49:85:10:72:1d:74:90:d5:1e:45:f1:e7:50:e7:29:
31:fc:c0:91:87:c2:95:ca:3e:0a:56:da:88:d2:70:bd:db:f9:
1a:82:a2:7e:58:79:3f:33:ca:b2:89:c7:bf:e2:16:19:1b:bb:
20:46:b9:8b:bf:21:49:e8:14:72:57:5e:5e:bc:b0:a8:13:88:
fe:54:53:3c:72:63:ab:a1:cd:2f:50:4a:43:98:d0:96:3e:1c:
2c:26:72:20:c7:b2:d2:d7:c0:82:f0:0c:99:f6:1c:3d:55:aa:
83:f7:bf:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:20:06 2025 by rpki-client