Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/fuMrSOrjtC2Pjn0DbbjzzEXmpIM.roa
File: fuMrSOrjtC2Pjn0DbbjzzEXmpIM.roa (raw, json)
Hash identifier: 82A1cuez1ZD0Bc+8PeFu3N5JKG3dUU8f0mhUHsfa/b0=
Subject key identifier: 7E:E3:2B:48:EA:E3:B4:2D:8F:8E:7D:03:6D:B8:F3:CC:45:E6:A4:83
Certificate issuer: /CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Certificate serial: 019424449C3BAB8C0263AECF87B44538571C
Authority key identifier: 4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/fuMrSOrjtC2Pjn0DbbjzzEXmpIM.roa
Signing time: Wed 01 Jan 2025 23:47:43 +0000
ROA not before: Wed 01 Jan 2025 23:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35453
IP address blocks: 45.67.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9c:3b:ab:8c:02:63:ae:cf:87:b4:45:38:57:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Validity
Not Before: Jan 1 23:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ee32b48eae3b42d8f8e7d036db8f3cc45e6a483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dc:96:c6:9c:95:68:28:4d:14:24:dc:d9:b6:
fa:3f:04:1a:a4:7f:47:1b:9c:61:5d:0a:91:0a:24:
ff:2a:d4:7a:31:04:a5:b9:ea:07:7d:08:2f:56:9e:
51:aa:a0:7b:4f:7c:78:2d:45:d7:c9:96:db:e9:87:
af:0f:47:d9:98:bd:ea:1f:6f:c1:76:27:99:74:a9:
c7:85:f9:9d:71:29:ca:32:6d:9f:53:be:21:28:ce:
67:73:14:73:fa:f9:a5:04:02:16:c0:30:f3:63:0b:
36:a6:f9:4a:25:f7:0a:50:b9:e1:18:de:96:cd:a5:
fc:c2:62:d1:8d:c6:3d:67:9e:9d:ac:12:bb:79:94:
0f:a0:fd:95:aa:5f:86:98:40:4f:8b:5f:6e:f1:34:
f0:00:d3:fc:64:0f:3e:41:e4:1b:42:c8:f3:01:02:
12:9e:c0:b0:5f:51:d6:4f:84:c6:4d:77:b7:e6:ec:
3b:c8:23:6d:c7:2b:dd:40:d7:71:e7:c0:ba:91:3f:
ae:14:e7:a5:47:85:14:05:4e:4b:21:21:8d:a5:b5:
fa:d3:6d:f0:21:ec:4f:32:97:60:1b:a2:5c:71:59:
fc:fe:70:44:d4:39:f7:c1:e7:b0:20:7a:b9:8f:d0:
ff:a0:63:39:64:e6:24:a8:a1:dc:5d:da:e3:6c:79:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E3:2B:48:EA:E3:B4:2D:8F:8E:7D:03:6D:B8:F3:CC:45:E6:A4:83
X509v3 Authority Key Identifier:
keyid:4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/fuMrSOrjtC2Pjn0DbbjzzEXmpIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.64.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:f8:1f:1e:4c:1b:8b:e7:24:f5:55:58:32:80:4d:60:8d:b5:
ee:1e:20:84:77:89:ec:b5:94:93:1e:43:cf:b6:be:06:65:33:
ab:f1:b0:16:55:e1:13:af:f6:29:cb:10:f6:38:1b:ac:90:a7:
bb:0a:b7:43:77:59:ff:de:7f:1f:db:6f:46:d6:b2:bd:14:34:
fb:ca:eb:d6:4b:ef:fd:13:35:7f:7d:a1:04:75:f3:c0:0e:d9:
04:2d:01:0e:96:9f:b6:e9:0c:00:25:13:07:b4:51:24:5e:87:
f0:c1:ce:d3:1e:54:a8:20:2e:83:10:d5:5c:d4:8f:93:57:08:
f5:a3:a2:3a:f9:ba:2e:5a:f5:45:e9:6c:aa:0d:d6:0b:ef:95:
62:00:b5:11:ac:33:70:4e:71:c3:e1:36:ff:bf:e9:7e:55:ea:
3c:7b:31:cd:58:fc:f8:b2:b5:c3:4d:0a:2f:fe:d4:b3:43:25:
ca:0a:6e:ff:27:4b:7d:97:36:42:d7:5e:81:89:48:3b:00:58:
97:00:73:37:7e:47:cb:63:3c:6c:5f:e6:90:06:04:72:11:b9:
1f:b0:ec:1e:67:bf:ec:a5:8b:e5:ab:fd:60:cd:7c:fc:ca:92:
73:a1:03:e8:2b:e3:c6:24:4c:f2:2b:29:60:b6:d6:35:ab:67:
a8:cd:30:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:30 2025 by rpki-client