Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/fGIY8YHdNWwzhJx3ikoRAMgnPuw.roa
File: fGIY8YHdNWwzhJx3ikoRAMgnPuw.roa (raw, json)
Hash identifier: 28gFmZmHqptl7sCCfNJhDhWI9ZQKOET/7qvAVv/S5j4=
Subject key identifier: 7C:62:18:F1:81:DD:35:6C:33:84:9C:77:8A:4A:11:00:C8:27:3E:EC
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 0194274644A5878E1C3E5AD85ED30E50779E
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/fGIY8YHdNWwzhJx3ikoRAMgnPuw.roa
Signing time: Thu 02 Jan 2025 13:48:24 +0000
ROA not before: Thu 02 Jan 2025 13:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207713
IP address blocks: 45.82.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:44:a5:87:8e:1c:3e:5a:d8:5e:d3:0e:50:77:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Jan 2 13:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c6218f181dd356c33849c778a4a1100c8273eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:de:38:49:b1:03:85:08:4c:e0:d0:b8:d9:
13:99:47:39:5b:92:ee:c8:28:56:12:15:1a:d2:9f:
98:df:f0:21:0a:d3:c9:49:77:98:63:c5:f5:ff:13:
8c:f2:6d:57:e5:ec:5e:6d:1f:a8:47:62:be:de:b0:
fd:13:87:e0:7d:94:72:3e:d0:b1:2f:b0:95:d7:29:
5a:a3:cb:dd:96:72:bc:ff:be:e2:b1:f8:e7:e0:ec:
ac:99:60:96:aa:af:74:20:b7:02:4e:dc:9e:8e:5e:
33:d9:2c:a4:b1:0c:04:c0:33:83:26:a6:24:7c:18:
80:b7:a8:13:48:0e:8f:68:f7:64:84:5b:c3:d7:a0:
3c:6c:a3:69:e5:71:2a:e0:04:fe:64:03:07:fb:49:
31:09:22:f4:fa:3a:c0:b4:5f:97:da:fe:31:a0:dc:
3a:b7:42:f3:29:86:1e:ea:5d:dc:e4:62:35:f3:04:
5c:21:9c:4c:30:58:4a:38:35:c3:9a:87:25:ac:a2:
2c:ca:a9:13:8c:ba:5f:6e:03:4d:08:66:97:3c:7e:
6d:24:7b:bb:2d:d0:1b:ee:13:1a:38:74:8b:1f:57:
6f:16:90:da:5e:7d:c6:23:40:1d:7e:2d:c9:c8:06:
95:b1:27:ca:89:a8:0e:5c:0d:00:85:14:1b:a3:f9:
f2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:62:18:F1:81:DD:35:6C:33:84:9C:77:8A:4A:11:00:C8:27:3E:EC
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/fGIY8YHdNWwzhJx3ikoRAMgnPuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.13.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:d0:c5:4f:6e:a7:4c:59:24:9c:2d:85:b7:79:50:cf:28:11:
1c:13:47:5e:05:69:61:70:5c:e9:37:85:66:af:69:98:7b:c2:
18:d8:55:a1:d6:0b:78:01:51:5b:ee:b3:36:91:7b:93:24:88:
3d:70:93:82:b2:25:9c:1b:c8:56:74:72:c5:fd:80:a0:5a:84:
10:23:ec:ba:48:b1:8c:d5:4d:98:a0:45:64:22:af:1e:40:37:
7d:5a:ae:86:ff:50:df:e7:19:0e:91:6d:81:a6:85:a9:9c:13:
86:89:aa:1f:2b:76:01:59:47:08:fa:de:10:b6:a9:9d:a5:4d:
f9:41:af:1c:08:1c:5b:85:9f:8a:9c:18:c3:6c:09:ec:ad:46:
46:01:4d:cd:9d:e3:dd:8d:ce:d3:9c:f7:22:5a:c6:1c:b5:55:
c6:50:f4:e1:7a:d4:da:83:93:16:1e:5a:01:35:5b:09:7b:ee:
bf:de:d4:d2:9b:35:f5:8e:a3:28:dd:e4:8e:10:1a:db:0d:22:
cf:3e:20:a1:6c:07:a9:5d:95:01:9b:c3:52:2c:41:12:b0:80:
48:68:c7:21:9a:d2:14:f8:c5:4a:2e:e1:52:6c:17:94:b6:33:
69:52:21:f7:2d:4b:14:fa:34:f2:43:7d:3c:c9:de:cf:ab:6f:
ed:f9:c8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:34:27 2025 by rpki-client