Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/FDqbE0eHZEv_ERsX7kXHHF5RRQk.roa
File: FDqbE0eHZEv_ERsX7kXHHF5RRQk.roa (raw, json)
Hash identifier: j140J+F2FieGPuclb2mIxRwUBHdQxhpr5HBQnLeYiuY=
Subject key identifier: 14:3A:9B:13:47:87:64:4B:FF:11:1B:17:EE:45:C7:1C:5E:51:45:09
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 01942746453A3187297EC8D3E96DD16CC481
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/FDqbE0eHZEv_ERsX7kXHHF5RRQk.roa
Signing time: Thu 02 Jan 2025 13:48:24 +0000
ROA not before: Thu 02 Jan 2025 13:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 45.82.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:45:3a:31:87:29:7e:c8:d3:e9:6d:d1:6c:c4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Jan 2 13:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=143a9b134787644bff111b17ee45c71c5e514509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f0:9f:c5:5a:c7:0f:53:61:85:38:36:f7:4c:
7f:42:b2:7a:a4:e0:14:0e:87:9e:a5:d0:06:d1:9e:
fc:2f:86:2c:76:29:e2:cd:5d:1e:09:be:87:3a:c2:
c7:e9:1f:b3:41:8a:76:40:d9:9f:b4:e1:3f:7a:71:
1b:4f:3e:10:d8:56:04:60:a5:c6:3f:06:70:b5:07:
c9:fb:de:ba:e4:a5:20:89:90:b8:de:6d:01:a2:9f:
4a:bd:25:a9:26:ca:7b:32:56:dc:58:34:79:62:21:
cf:db:bd:58:13:2a:21:e3:3d:11:7e:f0:27:8d:81:
2e:53:c0:55:98:49:b3:8d:af:42:1b:a8:23:6b:82:
ec:77:8c:d8:82:eb:ef:d8:3c:86:f0:46:25:9a:5c:
1a:58:ff:34:fa:6e:bd:13:23:ab:23:9e:17:cf:f5:
22:9d:73:2a:cc:7f:34:db:0d:d9:c4:64:c4:72:ef:
ce:2e:3c:d8:db:9e:d8:ca:24:d3:1c:d8:99:fc:72:
9a:d3:53:19:3a:c7:8d:7c:5c:41:18:51:11:43:d4:
f5:c8:51:4c:4d:2c:aa:30:37:b2:6e:bd:ce:e6:ee:
66:d6:f1:9e:b4:1e:ba:33:60:f2:8b:ee:d8:a3:06:
53:33:60:20:36:0d:9b:94:ed:d8:7f:c5:fb:ea:6f:
f5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3A:9B:13:47:87:64:4B:FF:11:1B:17:EE:45:C7:1C:5E:51:45:09
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/FDqbE0eHZEv_ERsX7kXHHF5RRQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.13.0/24
Signature Algorithm: sha256WithRSAEncryption
39:d3:56:51:32:15:d6:3c:b3:6a:4e:1b:1a:3c:e1:46:bc:be:
6a:3a:8d:b0:f1:ca:d9:e6:48:b3:62:c6:33:e4:c5:f1:c6:92:
fc:7c:9f:39:2f:68:6b:6a:14:d5:78:9f:26:2f:38:76:73:f5:
ff:44:c8:e0:46:2b:a6:25:16:4d:c9:44:b3:2b:ae:69:12:d3:
87:d6:95:a0:e1:2e:1d:b4:a9:c5:2a:7f:40:25:0c:a9:cb:8c:
cc:30:49:d4:7d:4d:82:3a:23:59:f2:22:8b:91:91:4e:fa:25:
f1:96:3e:15:ef:3c:eb:12:9b:aa:9c:c7:4d:05:f0:83:be:c7:
c5:63:f2:d2:24:b9:ea:19:8e:88:6b:55:5a:07:89:44:20:92:
c2:ae:67:aa:05:d8:49:0e:e1:a2:34:08:04:7d:2c:bb:20:fc:
d4:c7:a6:a5:5a:b9:3e:07:53:a0:51:e6:60:62:5e:b6:72:28:
99:f3:60:a0:11:f9:bf:db:8b:5c:a9:3c:7a:b0:db:a3:98:6a:
ca:a8:e1:c5:54:36:32:ab:e6:67:be:bd:9e:b2:c2:f9:8a:6e:
b2:1c:5e:89:7c:3a:b6:19:3e:2d:56:0a:70:2c:73:ff:b6:92:
41:16:3c:b2:9b:c4:bb:81:5b:d7:5f:02:cb:b4:17:bf:49:5e:
82:1e:33:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:04:41 2025 by rpki-client