Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/RzMFlxkjd3ZMyy1IWXN69UbPl8Q.roa
File: RzMFlxkjd3ZMyy1IWXN69UbPl8Q.roa (raw, json)
Hash identifier: 1apNRsmUbEEXrFhDoSrll6TEn0eL+zg3qgao8Q3U0kk=
Subject key identifier: 47:33:05:97:19:23:77:76:4C:CB:2D:48:59:73:7A:F5:46:CF:97:C4
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A5B43068A55BA70DB0327A086FF76
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/RzMFlxkjd3ZMyy1IWXN69UbPl8Q.roa
Signing time: Wed 01 Jan 2025 19:49:20 +0000
ROA not before: Wed 01 Jan 2025 19:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1161
IP address blocks: 145.116.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:5b:43:06:8a:55:ba:70:db:03:27:a0:86:ff:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47330597192377764ccb2d4859737af546cf97c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:98:a3:00:41:9a:24:a4:70:dd:6b:51:ae:
bb:20:f5:d9:1f:ef:f5:a0:1d:7c:2f:35:64:9f:d2:
42:83:fa:6e:41:bd:8c:6e:d5:81:e0:44:7b:38:9d:
0c:75:3a:0e:20:f4:51:0a:6f:fa:c4:14:d4:74:02:
64:7c:7a:62:89:e8:b3:9f:95:5b:81:41:1b:ac:4e:
16:be:ee:75:34:cc:fe:b4:f5:49:ea:98:59:0c:6e:
05:89:e8:b4:fb:e2:49:e3:2b:3e:98:42:03:e0:26:
96:94:6b:49:03:d1:37:16:e2:91:d2:ab:6d:01:c5:
7d:c1:fa:86:8b:15:11:9f:ff:db:08:7b:d4:92:dc:
0e:9c:9f:8b:97:10:d4:21:ac:f3:14:bc:66:5f:a4:
56:96:10:44:f0:c0:c8:a9:06:dd:24:71:ea:2b:3e:
f0:06:73:7b:70:a6:a9:82:4b:2a:c5:65:83:df:dd:
2c:a6:5f:b3:5a:e6:2e:81:77:52:26:f2:9b:d6:88:
4e:8b:1d:0c:fe:e3:dd:b3:25:0c:d6:e4:ce:1b:eb:
bd:df:00:3d:35:1b:e5:b8:35:5b:e1:d5:f5:df:6d:
93:73:80:f8:fe:2f:3b:68:7f:23:f2:8c:dc:69:f7:
98:74:b1:b3:4d:3b:bc:09:c8:e7:e7:23:a8:7e:02:
84:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:33:05:97:19:23:77:76:4C:CB:2D:48:59:73:7A:F5:46:CF:97:C4
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/RzMFlxkjd3ZMyy1IWXN69UbPl8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.116.32.0/20
Signature Algorithm: sha256WithRSAEncryption
49:ee:12:e2:85:bf:2c:05:fc:e7:78:41:a2:a8:10:65:10:6b:
eb:a5:31:7d:78:c2:15:30:c9:a4:91:a1:ae:b9:03:51:12:ab:
cc:bb:30:3d:4e:65:84:9d:7f:51:a6:43:e1:48:a7:05:b5:80:
16:b3:ea:8b:b2:dc:5b:65:d3:1f:df:5e:43:1b:42:cd:46:65:
fd:fe:85:f2:dc:74:e2:9d:74:95:35:d1:4c:af:61:4d:6a:47:
35:c6:78:50:91:07:dd:6d:e6:05:50:55:91:61:1b:3d:13:1e:
a3:5d:f9:dd:fe:d3:6b:bf:55:71:b6:dc:c0:5a:b9:b3:24:68:
98:05:83:b3:d1:a4:64:d8:82:1c:4d:85:f5:84:5d:77:01:08:
b2:36:49:77:80:03:9b:ce:e1:bc:04:35:30:f7:bf:02:cf:9b:
3c:70:2c:0a:1f:e0:31:63:3d:5b:41:65:79:ca:de:95:26:64:
db:36:70:87:0b:20:71:ae:79:7e:3b:46:04:9d:5d:4c:36:dd:
c2:1d:0b:17:3d:de:2a:bb:59:d4:c6:a8:c5:56:b0:8f:32:5b:
b7:9e:df:cc:71:a0:ab:e7:74:7d:ab:7a:86:95:f2:7d:8c:87:
3d:b6:95:d2:90:9b:17:f6:e2:a9:39:c6:42:e9:36:0e:7e:40:
73:8a:ed:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:51:29 2025 by rpki-client