Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/1-3bDj9neCbaQWw4yQtHya4rokp4.roa
File: 1-3bDj9neCbaQWw4yQtHya4rokp4.roa (raw, json)
Hash identifier: wHpii48/V8AwQkYAqHFtfgQFrRyn7WTmLrq5OaQhFQI=
Subject key identifier: FB:76:C3:8F:D9:DE:09:B6:90:5B:0E:32:42:D1:F2:6B:8A:E8:92:9E
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0194228E369D42DF30328116328143CE339F
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/1-3bDj9neCbaQWw4yQtHya4rokp4.roa
Signing time: Wed 01 Jan 2025 15:48:52 +0000
ROA not before: Wed 01 Jan 2025 15:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22168
IP address blocks: 45.143.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:36:9d:42:df:30:32:81:16:32:81:43:ce:33:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 1 15:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb76c38fd9de09b6905b0e3242d1f26b8ae8929e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:5b:e5:15:d5:b2:79:f2:4a:e5:55:cc:ce:
15:9a:f6:74:35:90:de:62:3d:34:95:3f:92:ec:18:
78:01:82:bf:09:80:d6:7c:dd:0a:20:40:f6:af:f0:
b5:83:35:07:c8:97:30:88:a0:5f:12:eb:08:27:b2:
93:40:5c:53:5a:8f:ac:e7:46:c9:94:04:22:08:22:
15:90:12:ad:4c:65:f2:54:74:c1:63:50:a9:37:cf:
34:29:7e:7c:b4:e7:d1:25:1a:36:53:f8:8c:f3:db:
10:64:59:55:26:1f:41:8a:34:31:42:e5:e6:96:21:
63:22:7a:78:22:16:31:ef:72:9e:6f:82:99:f7:0f:
a8:45:78:4e:fb:7a:fc:bf:b2:ca:31:f8:d8:60:7f:
31:cf:65:17:1f:a4:1d:91:60:8a:a0:70:f2:70:37:
36:49:36:7c:2a:c0:dd:42:bb:0a:20:56:6b:34:d1:
9a:e4:8c:de:50:b9:b0:84:43:8d:d3:b0:7b:50:9f:
bf:6d:6b:dd:bf:50:b7:69:93:10:19:c1:4c:4e:f5:
d0:cf:3b:20:93:f5:34:0c:3d:85:64:0c:e6:a1:97:
ec:c1:52:e9:55:00:47:dc:fd:07:c5:11:ed:0c:94:
f0:34:72:bc:6e:2d:0d:84:6a:90:e7:7a:f6:a1:7b:
d4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:76:C3:8F:D9:DE:09:B6:90:5B:0E:32:42:D1:F2:6B:8A:E8:92:9E
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/1-3bDj9neCbaQWw4yQtHya4rokp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.160.0/24
Signature Algorithm: sha256WithRSAEncryption
03:d5:f0:38:f7:08:4d:41:a7:32:c1:86:3d:e8:8e:b2:72:27:
f1:21:63:1a:d2:40:cb:4f:7c:4c:a9:3d:ed:7b:0a:8a:12:2d:
c9:bf:4a:cf:2d:95:68:ed:3b:9f:2b:41:60:d6:66:61:43:3e:
32:87:94:24:a8:9c:8c:ea:b0:f4:12:37:76:09:4c:a0:c3:2e:
3e:90:ae:4a:32:0a:56:67:9c:64:cb:a2:5a:2d:52:17:6c:7b:
4d:40:76:01:93:b8:34:03:aa:12:fe:0c:66:38:c6:a8:64:9a:
84:14:6e:d6:c7:98:fc:e6:f1:47:cb:d7:67:5d:bd:ea:11:f3:
83:cd:83:c7:81:d5:e6:6c:4b:99:4c:7f:61:32:57:92:0e:10:
7e:21:f1:b6:cd:eb:65:e5:9a:58:54:5b:c0:ac:bf:2a:df:db:
b0:22:e7:22:15:77:fd:05:49:32:97:a7:15:00:e1:f3:5f:09:
08:b0:46:f9:5c:a5:d8:88:d4:a3:b6:43:78:b9:57:d6:a4:04:
48:47:5a:8a:ad:e2:c4:c3:ee:31:33:5d:8c:60:a8:0a:b1:e2:
19:81:6e:18:1a:75:42:bd:ef:4e:d7:07:bc:a0:35:53:a6:f2:
a3:49:85:33:a9:0e:b2:25:49:3c:60:49:65:2c:c0:fe:d3:03:
bf:ad:53:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:44 2025 by rpki-client