Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f2ce1b-ca1e-4ec7-8864-30b36d66ab41/1/J33B9JGoYnYAPwcrR8Pu_1WV2yw.roa
File: J33B9JGoYnYAPwcrR8Pu_1WV2yw.roa (raw, json)
Hash identifier: PKvxwk1kImLGwoWE4MGbONsPjXa7ejRi6Zsr1cuON7w=
Subject key identifier: 27:7D:C1:F4:91:A8:62:76:00:3F:07:2B:47:C3:EE:FF:55:95:DB:2C
Certificate issuer: /CN=15dcfce97d55f155cc7cbd6906e668d4f930296c
Certificate serial: 0185707042ADAA5FF61F53D92D96A53BD9E4
Authority key identifier: 15:DC:FC:E9:7D:55:F1:55:CC:7C:BD:69:06:E6:68:D4:F9:30:29:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fdz86X1V8VXMfL1pBuZo1PkwKWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f2ce1b-ca1e-4ec7-8864-30b36d66ab41/1/J33B9JGoYnYAPwcrR8Pu_1WV2yw.roa
Signing time: Mon 02 Jan 2023 03:04:43 +0000
ROA not before: Mon 02 Jan 2023 03:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202913
IP address blocks: 45.148.198.0/24 maxlen: 24
45.148.196.0/23 maxlen: 23
45.148.199.0/24 maxlen: 24
45.148.196.0/22 maxlen: 22
45.148.196.0/24 maxlen: 24
45.148.197.0/24 maxlen: 24
45.148.198.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:42:ad:aa:5f:f6:1f:53:d9:2d:96:a5:3b:d9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15dcfce97d55f155cc7cbd6906e668d4f930296c
Validity
Not Before: Jan 2 03:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=277dc1f491a86276003f072b47c3eeff5595db2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:49:f1:a9:9f:f7:cb:ec:f9:b5:d6:dc:c4:e9:
37:9a:7a:54:2d:03:f7:10:8c:ee:f5:4a:71:f2:62:
08:8d:ca:2f:dd:1a:ba:c6:0b:d9:7f:a2:3f:69:cb:
c7:ce:64:cc:9c:1f:fe:8d:b8:72:be:61:18:0f:32:
64:7d:a8:08:43:85:cf:53:aa:13:24:fd:02:4e:7d:
93:ec:1c:7c:fa:33:5c:e8:93:09:19:e0:a8:44:fc:
93:69:46:ff:e8:31:37:1c:0f:a7:26:60:0a:0b:3a:
6c:3c:ba:39:01:57:ef:a8:5e:75:82:65:83:62:9e:
d0:1c:dc:f1:4c:7b:77:8a:01:58:9c:84:d0:53:9b:
26:ac:fd:75:c2:82:c9:31:33:46:b1:d5:72:99:81:
e5:fb:bb:45:32:66:aa:a3:ba:7d:01:4f:0f:22:1a:
83:19:5f:97:c2:64:8b:b6:ee:cc:fc:f2:3b:0c:07:
a4:32:c5:c1:08:24:16:a8:97:12:3c:20:eb:36:45:
46:e4:e9:80:d2:75:75:19:38:08:ee:2f:8c:6b:51:
ea:ea:fc:3d:6e:89:c0:14:c3:7b:25:f7:47:b7:8e:
70:77:b0:60:cc:f8:28:6c:21:80:49:bb:52:6e:09:
7e:ee:01:0c:1a:75:9c:e8:ee:58:1d:25:6b:c9:cf:
67:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7D:C1:F4:91:A8:62:76:00:3F:07:2B:47:C3:EE:FF:55:95:DB:2C
X509v3 Authority Key Identifier:
keyid:15:DC:FC:E9:7D:55:F1:55:CC:7C:BD:69:06:E6:68:D4:F9:30:29:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdz86X1V8VXMfL1pBuZo1PkwKWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2ce1b-ca1e-4ec7-8864-30b36d66ab41/1/J33B9JGoYnYAPwcrR8Pu_1WV2yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2ce1b-ca1e-4ec7-8864-30b36d66ab41/1/Fdz86X1V8VXMfL1pBuZo1PkwKWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.196.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:8f:7e:18:ca:a3:92:1e:36:ff:f7:04:bf:7f:3d:46:a2:d8:
10:8e:0f:09:6d:7d:51:38:50:4c:75:56:ae:eb:8c:09:ea:03:
b7:c4:0f:ef:a5:50:c9:b8:a0:c3:09:6a:1c:20:aa:98:c2:51:
47:b5:c9:26:e5:fe:0d:81:8c:ed:d7:07:c2:a2:5d:cd:02:fc:
e1:fc:50:40:68:d4:ae:b0:06:f0:c4:1a:a9:73:41:44:68:96:
c7:3b:39:4f:33:f3:82:8a:34:2c:4d:ff:12:56:6c:98:36:bf:
f4:15:e2:91:5d:69:aa:ad:62:cf:59:1a:7a:1c:ad:ec:ef:41:
d4:41:73:11:da:de:63:9b:31:f1:1a:59:1e:9e:46:b6:0c:d1:
ba:df:0c:6c:8f:f5:e2:f8:18:c8:fa:c6:e3:e9:61:ff:0f:84:
8e:6c:9b:3e:ff:ae:d9:6e:cd:b6:95:7f:dd:4c:78:30:35:f0:
6f:04:36:03:f6:1c:de:2e:a2:d5:15:c7:f3:ce:ad:a3:58:1b:
31:ad:22:28:6a:08:1c:5d:c4:fa:8d:fa:d5:30:81:b5:4b:c4:
b2:21:00:4c:de:eb:ca:b6:17:ad:34:f2:b1:aa:35:7c:41:c6:
40:52:c1:51:fc:3b:8c:1e:97:6f:33:63:d7:1c:98:54:ba:c8:
5c:6f:d8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:49:11 2025 by rpki-client