Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/QXuReFuFnm4r5YfXqKS-RkBXarA.roa
File: QXuReFuFnm4r5YfXqKS-RkBXarA.roa (raw, json)
Hash identifier: pUUucPhRyENqlrukVYu+Ay5+vKGTKkXyK3KLmXDcylU=
Subject key identifier: 41:7B:91:78:5B:85:9E:6E:2B:E5:87:D7:A8:A4:BE:46:40:57:6A:B0
Certificate issuer: /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial: 019424B390EB169640B9BF44DBC2F8532934
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/QXuReFuFnm4r5YfXqKS-RkBXarA.roa
Signing time: Thu 02 Jan 2025 01:48:55 +0000
ROA not before: Thu 02 Jan 2025 01:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208074
IP address blocks: 45.154.63.0/24 maxlen: 24
2a0f:b100:300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:90:eb:16:96:40:b9:bf:44:db:c2:f8:53:29:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Validity
Not Before: Jan 2 01:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=417b91785b859e6e2be587d7a8a4be4640576ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:28:a9:f9:64:1e:c4:f6:4e:29:6f:54:a1:41:
0f:8d:b9:d9:19:38:48:b9:92:1e:e7:bf:64:03:eb:
31:b6:aa:99:02:fb:f8:65:43:a8:19:0c:85:d5:c3:
e5:59:7b:4e:95:69:d2:18:8a:59:80:e0:f6:0f:99:
54:91:f1:18:c3:54:10:17:92:df:4f:99:86:9b:ef:
0c:be:4c:28:f2:10:f1:f5:e5:e0:71:15:7e:a1:b4:
e4:bd:b5:75:32:a0:77:de:f3:a4:80:d7:64:95:68:
ea:46:b6:c5:fb:f4:c0:6e:44:0b:78:10:0f:59:5c:
5b:d7:bf:b4:43:97:b5:04:1d:f9:1c:87:bf:8e:67:
9b:59:0f:90:79:51:c6:9c:98:13:73:20:c3:64:b7:
fd:0c:f4:05:95:99:cf:61:82:2e:38:55:49:ea:05:
7c:d6:09:74:7a:e0:71:d0:27:ac:e4:4b:8f:4e:d9:
8d:95:c0:27:d1:c1:ba:68:76:8f:6b:fc:e8:ad:ea:
70:f6:3e:20:48:3c:a6:8a:25:05:60:b1:1b:3d:a0:
27:b4:22:50:2a:ff:c6:f7:08:ce:9a:70:e8:f6:7e:
b1:ca:10:1c:19:96:c1:10:be:1f:4d:6f:f5:03:3c:
39:f5:33:83:e7:44:3a:1e:8f:e9:09:74:44:35:6b:
55:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7B:91:78:5B:85:9E:6E:2B:E5:87:D7:A8:A4:BE:46:40:57:6A:B0
X509v3 Authority Key Identifier:
keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/QXuReFuFnm4r5YfXqKS-RkBXarA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.63.0/24
IPv6:
2a0f:b100:300::/40
Signature Algorithm: sha256WithRSAEncryption
d3:ea:4e:b2:d0:ab:76:7e:f8:3b:67:58:8e:b9:1f:ee:ab:29:
dc:a3:a1:b4:2e:19:04:6f:c3:b0:08:bf:c7:96:f0:ed:65:63:
48:df:f6:ba:5b:01:8b:21:4a:92:e4:36:34:64:14:c8:a1:6f:
80:16:02:97:16:6f:dd:20:d2:68:52:85:22:b5:07:b6:6c:24:
69:1c:b9:72:3c:3a:c4:90:87:05:77:63:2a:9c:5b:3f:c4:e2:
0b:11:31:1e:2e:76:d7:f1:a0:bc:59:0a:f6:50:21:92:e8:45:
ef:70:25:1f:39:18:09:80:c1:eb:ea:97:b2:63:c1:06:f4:9f:
27:fd:d0:e7:0d:e4:4c:39:a7:5a:da:46:1b:0b:46:ac:7f:d4:
19:86:1e:be:27:84:22:44:82:e1:57:3d:51:d5:63:45:4a:4c:
16:6e:4c:d0:ae:f1:c7:f9:7e:4e:e7:47:b4:41:d9:c9:14:e1:
dd:15:f3:97:c0:42:97:73:43:61:8c:04:d6:29:ff:9f:ac:b1:
94:f2:e3:ae:c0:65:4c:a0:98:3a:47:f9:a3:87:fa:27:3f:68:
23:e1:9a:7c:4d:76:da:68:81:53:ec:9f:1a:df:85:c0:d0:b7:
44:10:6f:c5:86:37:7e:6a:3b:7f:03:48:a7:8d:98:47:98:64:
05:fa:ee:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:43 2025 by rpki-client