Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/r47m3eotHrMfZKa0-yAY8glxtLY.roa
File: r47m3eotHrMfZKa0-yAY8glxtLY.roa (raw, json)
Hash identifier: mRtglxssp+DT8qOyFoRUQ5mLUPm3H45BSG3whqlcJGc=
Subject key identifier: AF:8E:E6:DD:EA:2D:1E:B3:1F:64:A6:B4:FB:20:18:F2:09:71:B4:B6
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01941FFA09A0519074C7E65FE6EEF1C9CC2E
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/r47m3eotHrMfZKa0-yAY8glxtLY.roa
Signing time: Wed 01 Jan 2025 03:47:47 +0000
ROA not before: Wed 01 Jan 2025 03:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212093
IP address blocks: 45.151.138.0/24 maxlen: 24
194.113.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:09:a0:51:90:74:c7:e6:5f:e6:ee:f1:c9:cc:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 1 03:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af8ee6ddea2d1eb31f64a6b4fb2018f20971b4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:9c:8c:48:44:63:3f:78:ce:62:50:86:ec:
01:a3:2d:bf:c1:8b:78:9b:5f:3c:01:e9:13:b3:0e:
7f:5d:76:16:af:4d:73:1f:db:1d:1c:2e:0e:1d:03:
af:4c:d9:72:dc:80:62:b5:27:ac:88:8e:d7:5b:95:
ed:58:0e:ec:b5:89:8a:ee:e0:9a:41:5a:1e:57:a1:
f4:70:95:c2:e5:4d:0c:7e:00:30:56:da:5d:6e:09:
a1:f6:a0:1c:c8:f1:57:49:79:85:a1:80:25:62:5c:
fc:ad:f6:68:11:b8:28:b3:0d:9c:72:e5:e1:f5:69:
7a:c8:bc:48:7b:4b:1b:22:13:b4:be:7c:8e:45:a8:
a5:68:85:3e:ae:cf:07:16:1b:50:d8:d4:27:ca:3e:
57:6b:4d:4a:d2:0a:84:fe:ad:bf:0d:8e:38:c3:8f:
5a:1a:18:ed:d6:6a:24:2f:b8:af:e1:e1:a3:02:c5:
c7:01:2f:05:d6:95:8e:16:ed:f2:9e:dd:12:9c:2e:
d6:03:fa:ec:96:da:5a:e6:b3:34:cb:c5:10:83:69:
b5:b8:47:bf:14:04:78:15:fd:8d:97:63:2a:90:b8:
09:67:62:4d:80:32:2e:db:92:c6:d3:4d:8e:ab:e7:
5b:05:20:b9:ab:0a:05:5a:26:cb:9d:4b:e2:de:05:
42:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8E:E6:DD:EA:2D:1E:B3:1F:64:A6:B4:FB:20:18:F2:09:71:B4:B6
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/r47m3eotHrMfZKa0-yAY8glxtLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.138.0/24
194.113.105.0/24
Signature Algorithm: sha256WithRSAEncryption
84:0c:90:0c:16:01:4f:10:47:02:a5:b8:c1:91:f7:21:0c:c2:
ce:f3:21:57:00:d4:ec:d6:09:a0:07:7e:88:04:a1:ee:dd:75:
4e:2c:14:88:05:2a:fb:89:fb:58:84:6e:13:07:f2:71:d9:89:
c8:67:10:2b:56:8b:88:a4:c7:58:68:04:33:e3:93:9e:81:aa:
a8:be:e1:a0:b4:3d:5f:48:e9:72:30:28:1c:26:2f:ec:4a:cd:
8c:73:f2:aa:4e:e3:26:5d:72:66:18:70:06:38:d6:a2:17:bf:
6a:b8:79:9b:13:d5:22:9b:3a:62:f8:5b:ea:8e:d2:4a:a5:33:
fa:e7:4b:b4:19:5a:6b:a2:0e:4e:8a:c3:00:9a:a1:1b:76:05:
5f:17:db:8b:38:ec:e2:62:fd:e5:db:37:20:9c:df:e0:09:3b:
eb:cb:48:6d:59:02:44:a3:49:ac:74:8d:65:65:b1:f5:2b:6f:
27:47:6f:e3:01:9d:5a:a1:19:f4:0d:c0:4e:db:cd:c7:bc:0d:
00:b9:70:72:d0:a2:9e:38:cb:c1:b4:36:fb:ce:ed:dc:03:cc:
5b:18:72:34:3e:4b:02:11:f2:81:49:f9:aa:94:20:ae:a1:37:
3c:74:10:e1:72:70:37:b5:91:44:ed:0f:98:81:ea:bd:d6:cc:
8e:87:fe:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:05:18 2025 by rpki-client