Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/fxTpm-3t5hEAIDhn-iIHCUzaiHQ.roa
File: fxTpm-3t5hEAIDhn-iIHCUzaiHQ.roa (raw, json)
Hash identifier: 0B3ICK8FBArsaIFDSgjk+Hj/+4/tuPh5uJ6hn3hTWfY=
Subject key identifier: 7F:14:E9:9B:ED:ED:E6:11:00:20:38:67:FA:22:07:09:4C:DA:88:74
Certificate issuer: /CN=b06c430b61be7a380191cd5dfd105c3af21482fc
Certificate serial: 01ACDBE6
Authority key identifier: B0:6C:43:0B:61:BE:7A:38:01:91:CD:5D:FD:10:5C:3A:F2:14:82:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGxDC2G-ejgBkc1d_RBcOvIUgvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/fxTpm-3t5hEAIDhn-iIHCUzaiHQ.roa
Signing time: Thu 23 Jun 2022 15:08:30 +0000
ROA not before: Thu 23 Jun 2022 15:08:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59432
IP address blocks: 45.156.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28105702 (0x1acdbe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06c430b61be7a380191cd5dfd105c3af21482fc
Validity
Not Before: Jun 23 15:08:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f14e99bedede61100203867fa2207094cda8874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a3:4d:1a:ca:14:d7:9f:dd:23:e6:33:76:f7:
36:69:e6:74:99:d2:82:0f:cc:d0:46:6d:75:e7:13:
ef:da:ea:14:3d:c7:94:4e:0a:a9:a7:34:46:bd:00:
3b:e0:17:3a:27:66:14:61:0a:6e:42:96:a8:6a:b3:
bc:2a:d2:b3:ae:3c:be:eb:de:ca:46:d8:4e:2d:cc:
43:31:b5:21:54:6c:a1:0f:3d:5e:bf:4e:fd:9e:c3:
b4:7c:98:61:17:25:6e:ab:21:a4:7d:70:62:ac:73:
ab:3b:cd:51:51:e5:02:3f:cb:f5:b7:4e:fb:fc:f8:
29:1c:45:d2:22:06:00:d4:8e:bb:a5:1f:24:31:11:
41:fd:a4:ee:74:eb:06:7e:95:a6:21:61:79:37:e9:
e6:57:67:2b:ea:01:2b:4a:df:a4:cf:9a:e0:87:0f:
ff:28:97:5d:b5:0f:91:34:25:a9:80:7b:d4:bd:ed:
4e:c3:98:7c:aa:99:98:dd:09:33:b8:65:70:23:e4:
12:07:45:86:09:53:ec:42:41:02:55:d8:cf:00:91:
bd:9d:3e:98:40:e7:e0:ef:3d:35:03:63:fe:9f:6f:
2d:24:41:33:ce:79:09:3d:5c:f7:9d:c4:f5:24:a5:
30:90:1d:33:43:5d:18:d3:21:42:f1:06:0b:62:66:
5d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:14:E9:9B:ED:ED:E6:11:00:20:38:67:FA:22:07:09:4C:DA:88:74
X509v3 Authority Key Identifier:
keyid:B0:6C:43:0B:61:BE:7A:38:01:91:CD:5D:FD:10:5C:3A:F2:14:82:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGxDC2G-ejgBkc1d_RBcOvIUgvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/fxTpm-3t5hEAIDhn-iIHCUzaiHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/sGxDC2G-ejgBkc1d_RBcOvIUgvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.116.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:7c:46:54:b6:8e:7b:ca:ca:43:37:f5:c6:a7:11:ba:71:2d:
73:0b:a6:d7:d4:b7:76:fc:4b:1f:ab:26:c6:53:ee:4e:46:e6:
5d:fa:9b:5a:44:94:63:1d:15:3f:ed:8f:1a:e0:da:d3:d0:48:
fd:d2:52:17:e7:f6:cb:78:9e:64:0c:1b:b2:a2:99:4e:c5:76:
22:2a:86:03:60:39:35:87:5e:15:a5:13:8d:d1:a8:42:59:d1:
2f:ac:2b:be:6d:93:35:73:69:97:f3:92:ac:cd:8b:07:a3:b1:
83:f5:c1:57:20:9e:9f:0a:34:3e:8d:89:40:fc:91:53:70:6a:
a0:5a:aa:02:92:28:d5:b6:94:b0:96:d8:ef:ce:9c:8b:d9:b7:
5a:77:a0:88:39:2b:8d:e8:06:2f:3a:fe:ae:0e:ba:21:db:91:
ef:be:e4:29:6e:c3:ef:07:63:05:7a:db:ac:08:a2:6d:fb:de:
e6:51:b6:f8:16:2b:7a:83:dd:22:4a:00:9e:c1:2c:a5:3d:02:
14:0e:7b:d4:95:78:c1:be:ab:e7:ab:18:5d:d9:02:83:a2:2f:
50:56:7c:8f:6e:5d:45:99:8c:7f:18:28:0b:49:f3:0a:c4:b8:
a7:c6:df:fd:d7:cc:ff:27:f5:b2:0e:8b:b8:01:9a:d1:6e:a8:
6f:37:ca:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:48:21 2025 by rpki-client