Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/1-_UwL6gJgWy3pN6NrkEbXBFBiRw.roa
File: 1-_UwL6gJgWy3pN6NrkEbXBFBiRw.roa (raw, json)
Hash identifier: g97v9R+PoC4iu0w5rkLd1FzagNbwQyMIzICsh2OGkRc=
Subject key identifier: FB:F5:30:2F:A8:09:81:6C:B7:A4:DE:8D:AE:41:1B:5C:11:41:89:1C
Certificate issuer: /CN=f10101fbfa863fe45eae2bf6b97e0efe7ec83125
Certificate serial: 019421B1EACBE17E7296B07E97DBF79D5A1D
Authority key identifier: F1:01:01:FB:FA:86:3F:E4:5E:AE:2B:F6:B9:7E:0E:FE:7E:C8:31:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/1-_UwL6gJgWy3pN6NrkEbXBFBiRw.roa
Signing time: Wed 01 Jan 2025 11:48:15 +0000
ROA not before: Wed 01 Jan 2025 11:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49223
IP address blocks: 45.67.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ea:cb:e1:7e:72:96:b0:7e:97:db:f7:9d:5a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10101fbfa863fe45eae2bf6b97e0efe7ec83125
Validity
Not Before: Jan 1 11:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbf5302fa809816cb7a4de8dae411b5c1141891c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ef:5e:67:52:55:27:5f:90:05:17:1d:b7:4d:
05:04:e7:75:4f:29:e7:51:e9:c3:e8:2a:b5:3b:95:
bd:70:de:b2:df:4f:b0:60:ae:45:81:bc:7f:ac:61:
52:15:bb:51:45:27:dd:72:c3:d5:a8:e9:b9:b9:29:
3e:b6:4c:f4:65:e7:d7:03:20:09:05:77:be:59:86:
d0:cc:21:ba:bb:15:f9:89:dd:05:fe:6d:66:9b:89:
29:6e:74:51:e8:1a:bb:07:10:ca:45:4e:9b:c4:51:
f9:e3:c8:3a:58:d4:d7:4f:eb:71:c7:26:e7:be:a8:
85:d4:14:ee:60:c7:1c:d6:46:0d:a5:4c:54:a0:aa:
b8:0b:02:f7:e2:ce:bc:3c:7f:31:fd:b5:77:bb:4d:
50:ac:04:42:5b:c1:9a:77:56:9f:8b:8f:60:c6:ee:
51:3c:f4:d4:84:01:4b:a3:45:f1:04:d2:d3:4f:9c:
e3:a4:76:c5:8f:75:3a:d7:0d:a8:3d:36:b6:dc:a5:
a3:77:fa:12:1a:9e:6c:49:19:1c:7d:24:42:b1:7a:
1e:6e:80:e1:14:50:7f:c3:46:00:3d:9e:b4:6f:af:
d6:5d:f3:35:c7:83:fc:19:ea:5e:b6:d9:04:25:f4:
17:81:b1:59:63:b7:bb:3f:c5:90:73:b3:ca:32:35:
79:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F5:30:2F:A8:09:81:6C:B7:A4:DE:8D:AE:41:1B:5C:11:41:89:1C
X509v3 Authority Key Identifier:
keyid:F1:01:01:FB:FA:86:3F:E4:5E:AE:2B:F6:B9:7E:0E:FE:7E:C8:31:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/1-_UwL6gJgWy3pN6NrkEbXBFBiRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.20.0/22
Signature Algorithm: sha256WithRSAEncryption
28:9c:c2:06:fb:74:22:cf:1c:64:3c:6b:59:2a:11:08:7f:f0:
5c:db:57:a3:77:78:d8:14:32:67:5b:9f:59:82:99:2e:b7:cb:
9a:1d:cd:67:da:08:db:72:e2:18:6d:6a:8b:cb:28:c0:5c:8b:
ab:c6:72:57:2e:27:43:29:f9:1c:3c:6f:d9:2c:78:64:55:ad:
72:fd:a7:aa:33:7b:2c:12:8c:b1:37:3c:c3:37:99:9e:45:52:
4e:49:ef:8d:f0:3b:bc:04:58:2b:71:6b:5e:b0:8b:8b:5d:1a:
2a:72:1c:1b:12:37:41:f5:fe:c8:61:88:51:95:dd:53:17:f3:
01:46:31:09:74:8e:98:17:6e:88:ee:0d:4a:ac:4d:e0:a2:1a:
a1:ec:10:a8:f4:f1:a9:40:9a:6f:eb:9c:cc:47:eb:27:ed:65:
d4:c7:9e:c1:97:5c:44:2c:b2:44:b1:f4:e3:09:4d:a0:b6:8e:
c3:d3:82:aa:0e:7e:40:36:4d:bc:86:3d:08:8b:98:bb:42:2a:
03:1a:83:b5:20:8b:36:ff:8b:4b:4d:1a:e2:19:e5:14:1c:5c:
20:f4:30:72:26:aa:44:ee:d8:31:44:a9:61:ec:73:02:77:7d:
05:87:39:4b:56:d3:e8:de:90:84:7d:e0:53:21:36:ba:7c:2f:
7c:59:9c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:44:52 2025 by rpki-client