Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/7X53oJLqGOE0xx3KdPazgPnRT3U.roa
File: 7X53oJLqGOE0xx3KdPazgPnRT3U.roa (raw, json)
Hash identifier: uSzYsB4qy63qJbEIyuqElP6d6MoCw1DtIo1FVml3qr0=
Subject key identifier: ED:7E:77:A0:92:EA:18:E1:34:C7:1D:CA:74:F6:B3:80:F9:D1:4F:75
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 0194266BCAD3D05B07BA34838217AB1E7619
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/7X53oJLqGOE0xx3KdPazgPnRT3U.roa
Signing time: Thu 02 Jan 2025 09:49:45 +0000
ROA not before: Thu 02 Jan 2025 09:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213971
IP address blocks: 45.146.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ca:d3:d0:5b:07:ba:34:83:82:17:ab:1e:76:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 2 09:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed7e77a092ea18e134c71dca74f6b380f9d14f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f3:1a:07:17:87:c9:cf:44:03:88:bc:67:fa:
21:67:2b:5e:73:bf:95:56:35:2d:35:7a:bd:12:9b:
22:b8:26:8d:7f:da:8e:04:a0:1a:b8:31:cb:84:6d:
01:e7:52:27:a9:34:82:c7:1a:b7:95:37:02:95:c2:
ee:2b:d3:3f:4f:88:fd:3a:ca:ae:d9:33:00:d2:57:
49:59:3f:93:8f:3f:e6:75:59:d6:09:c7:22:e2:9c:
d3:45:89:f3:f3:73:b7:27:e7:9a:ed:70:2d:6f:c4:
78:4c:e1:0c:26:7b:29:08:22:d0:d4:70:7f:a1:c3:
b2:a9:37:7e:b2:47:57:b6:41:cb:a3:c0:db:c4:d9:
55:43:68:7e:3e:05:1d:cf:bb:f0:d7:e3:e3:ad:e0:
9f:6f:6d:d6:bd:ef:38:a3:30:c8:88:8b:a3:62:d3:
cd:b0:1f:a1:ea:5c:ce:f6:bb:f7:a8:0c:7c:a4:02:
8a:cd:51:4b:8c:30:26:46:01:1a:58:e7:62:39:d7:
f5:4b:5a:55:75:d0:10:28:c5:76:4d:9c:71:37:79:
06:51:eb:88:23:d4:31:f0:b4:c6:20:c2:37:22:56:
c8:fa:1f:4b:2a:67:03:05:45:ca:28:62:9c:4c:1d:
ba:61:3b:b9:92:66:ab:52:ac:39:b5:04:42:a7:3f:
0b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7E:77:A0:92:EA:18:E1:34:C7:1D:CA:74:F6:B3:80:F9:D1:4F:75
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/7X53oJLqGOE0xx3KdPazgPnRT3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.203.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:3d:11:d2:4d:dd:85:fe:47:aa:c6:3d:43:fd:38:60:15:e3:
1c:c4:9d:2e:a0:4b:b9:3c:a4:f6:2d:66:01:7e:eb:b5:9d:f3:
4c:83:b7:26:a4:a9:8a:b6:bf:70:92:74:2d:a3:89:9c:cb:02:
15:21:39:79:e5:34:c6:a3:74:71:fd:60:ed:ce:ef:57:b2:95:
98:70:cf:17:48:b0:92:b4:81:21:92:13:38:20:7f:53:7f:04:
9a:97:85:76:69:0b:e8:d3:8b:fe:e5:5d:87:23:0a:5e:d4:2c:
2a:21:3e:07:01:be:d0:16:38:5d:1a:58:50:ae:82:d8:16:1f:
60:36:45:fb:99:8b:1d:5c:50:71:2c:20:ed:1a:9d:31:4f:de:
67:1c:a2:33:8b:3e:02:3e:7b:db:6e:38:ec:58:1f:66:0e:02:
c2:b9:53:38:66:65:7e:b3:19:21:d4:3c:f0:e5:ee:8a:c4:86:
88:c5:ee:1c:de:5c:02:63:48:1d:63:5c:eb:21:c5:7c:c0:c1:
fa:4c:79:fa:aa:67:24:f6:3a:a0:39:84:10:bf:ae:0f:2b:4d:
3d:0f:0d:05:9e:4c:23:f1:f7:e6:6c:2d:bc:5a:e2:92:80:c7:
5c:ef:c5:b5:a9:e8:33:7f:cd:4f:b6:5d:a0:03:ca:db:19:8f:
d3:58:c4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:55 2025 by rpki-client