Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b8badc-b15d-4558-b58e-c6e68c8e8e3e/1/7PQrPbvL_UNSUDhOx98EyHdXCEQ.roa
File: 7PQrPbvL_UNSUDhOx98EyHdXCEQ.roa (raw, json)
Hash identifier: OzKRmfQB7Q1mReHjsMDbIFEmMMUHT0XJbL2nAU3vkok=
Subject key identifier: EC:F4:2B:3D:BB:CB:FD:43:52:50:38:4E:C7:DF:04:C8:77:57:08:44
Certificate issuer: /CN=49324f3d95d1b9b96d0faf0df92dafa849ad4796
Certificate serial: 01835E1A129DB49E2F5C2C2AD4F4CFB5AC30
Authority key identifier: 49:32:4F:3D:95:D1:B9:B9:6D:0F:AF:0D:F9:2D:AF:A8:49:AD:47:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STJPPZXRubltD68N-S2vqEmtR5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b8badc-b15d-4558-b58e-c6e68c8e8e3e/1/7PQrPbvL_UNSUDhOx98EyHdXCEQ.roa
Signing time: Wed 21 Sep 2022 03:31:50 +0000
ROA not before: Wed 21 Sep 2022 03:31:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136933
IP address blocks: 45.149.17.0/24 maxlen: 24
45.149.19.0/24 maxlen: 24
45.149.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5e:1a:12:9d:b4:9e:2f:5c:2c:2a:d4:f4:cf:b5:ac:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49324f3d95d1b9b96d0faf0df92dafa849ad4796
Validity
Not Before: Sep 21 03:31:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ecf42b3dbbcbfd435250384ec7df04c877570844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:05:c8:8b:a2:4e:cd:9d:d2:37:d6:61:d3:59:
88:1a:aa:b5:da:37:04:6f:e3:8f:23:1c:31:76:42:
23:36:12:b5:b5:61:ed:e7:77:33:85:b1:49:70:a4:
50:14:d6:3b:09:61:68:fc:42:0f:bd:1d:f2:9d:e4:
4a:15:67:61:98:aa:cb:28:45:dd:90:6f:ae:28:80:
e3:6a:90:48:c6:98:16:68:3a:3c:95:cb:b1:4c:db:
9d:39:f1:71:1d:f8:60:a1:4d:68:12:45:a6:3b:b9:
b7:93:a2:bb:cb:df:cc:93:e3:60:50:b3:82:bb:4d:
2e:90:6e:02:bb:88:a5:be:02:43:13:5b:eb:3e:32:
44:10:13:6f:c6:23:7a:00:07:a5:d8:9a:b3:a0:7e:
e0:0e:33:9f:08:72:be:a9:e2:0a:d3:5a:ad:af:2b:
2f:24:3e:72:29:b5:f3:47:9d:39:be:bd:2b:9b:7c:
75:1f:17:bf:7e:45:4a:02:cd:5a:0d:c9:e5:78:5c:
b9:d7:77:dc:a8:7c:30:d8:9d:9d:81:7b:5a:d3:d5:
26:15:3a:45:7f:2e:aa:ec:e3:40:a9:43:f5:74:28:
32:5c:1f:d9:bd:cd:16:0d:9f:9c:e8:a6:a7:58:28:
89:3e:01:7f:cc:bd:a7:53:5e:3e:44:67:98:85:48:
24:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F4:2B:3D:BB:CB:FD:43:52:50:38:4E:C7:DF:04:C8:77:57:08:44
X509v3 Authority Key Identifier:
keyid:49:32:4F:3D:95:D1:B9:B9:6D:0F:AF:0D:F9:2D:AF:A8:49:AD:47:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STJPPZXRubltD68N-S2vqEmtR5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b8badc-b15d-4558-b58e-c6e68c8e8e3e/1/7PQrPbvL_UNSUDhOx98EyHdXCEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b8badc-b15d-4558-b58e-c6e68c8e8e3e/1/STJPPZXRubltD68N-S2vqEmtR5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.17.0-45.149.19.255
Signature Algorithm: sha256WithRSAEncryption
56:54:6a:04:bd:29:1b:78:b2:01:c4:0d:d6:b5:75:67:0a:24:
a7:f9:38:40:e4:28:19:f9:09:6d:80:1d:fc:4c:0d:88:59:9f:
27:3d:0e:7f:89:24:00:74:25:ed:17:21:1e:7c:fd:f8:e8:79:
7a:bf:4f:d2:30:bd:80:b5:31:e7:98:98:73:95:32:b2:fb:17:
1f:7f:4e:34:9b:61:f3:fe:ff:15:f2:40:80:b1:73:2d:67:40:
35:2e:65:6c:bc:14:5c:32:e8:26:43:96:77:ae:8a:ef:fd:40:
61:13:ab:dd:dc:e2:f4:c0:47:cb:9e:ea:d1:0b:f7:5a:f4:53:
1b:ae:f5:d2:a9:96:1e:de:88:8a:7d:3e:ca:b0:73:05:e0:5d:
ca:25:20:e1:00:71:02:c8:c4:70:0b:a6:95:54:7a:8e:b6:b8:
b4:94:1a:f2:30:c3:75:10:2b:71:dc:0f:13:82:e6:3a:b5:55:
a5:e0:68:57:92:13:0c:bc:f8:e9:8c:8c:68:4d:90:89:ae:13:
6a:0d:a6:26:1c:1d:6e:b2:2b:a6:9e:97:bf:18:cd:3d:51:2d:
11:23:67:af:4f:d2:4b:20:64:0e:98:0f:76:ee:10:52:9f:3f:
32:3a:32:a0:87:ad:5d:38:70:6d:b7:87:b3:f7:21:c8:94:88:
bc:28:fb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:19:16 2025 by rpki-client