Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/ffHd2Ruair9ltxVERYk4w2zsaNM.roa
File: ffHd2Ruair9ltxVERYk4w2zsaNM.roa (raw, json)
Hash identifier: VnPUAyYKwhFfhmNOrOW74LPAJWypgZpyGJcY3RIeMSM=
Subject key identifier: 7D:F1:DD:D9:1B:9A:8A:BF:65:B7:15:44:45:89:38:C3:6C:EC:68:D3
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0194F7C7053691D14FCE044751E9976EEBCC
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/ffHd2Ruair9ltxVERYk4w2zsaNM.roa
Signing time: Wed 12 Feb 2025 01:30:02 +0000
ROA not before: Wed 12 Feb 2025 01:30:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209043
IP address blocks: 45.149.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f7:c7:05:36:91:d1:4f:ce:04:47:51:e9:97:6e:eb:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Feb 12 01:30:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7df1ddd91b9a8abf65b71544458938c36cec68d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:c1:29:86:72:2f:34:ae:be:57:d6:f8:99:
64:39:8f:38:44:61:11:c7:dd:a4:36:db:c0:2c:39:
ec:25:60:51:d0:1b:8e:8c:16:1a:f0:92:7d:ac:05:
05:4a:a2:5d:74:bf:93:1c:d7:19:f4:fb:8a:d8:08:
fc:54:5e:a0:4e:42:e6:ed:5b:28:da:86:cb:b5:0c:
09:34:33:12:18:e3:f9:d8:6c:d3:89:24:81:e1:bb:
b4:2e:bb:c5:24:4a:ba:b3:d1:58:4a:57:4e:e7:ca:
9d:83:f7:48:4d:8e:d2:93:37:c5:26:e2:7c:c6:6d:
ff:55:f7:1a:38:4f:44:66:09:f5:42:e7:19:3e:58:
b9:06:43:44:86:89:b1:4b:a2:31:aa:dd:f6:8a:f1:
68:79:ac:ee:a3:af:cb:6b:1b:22:1e:34:58:d5:2d:
cb:ac:50:ce:68:21:8b:aa:37:37:5f:af:f2:ea:33:
9b:46:39:c0:9a:ce:dc:12:8f:d2:f6:31:1e:3b:f7:
b8:ee:0e:fe:ff:ad:bb:db:9a:1a:ab:78:c8:0a:8b:
68:50:dc:cd:c5:50:44:17:55:3b:c2:0d:67:f2:b7:
13:82:24:37:e9:a1:fc:9c:19:71:ee:12:58:a6:40:
fd:c7:9b:0f:7d:01:27:21:78:6d:49:ec:1f:d2:77:
37:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F1:DD:D9:1B:9A:8A:BF:65:B7:15:44:45:89:38:C3:6C:EC:68:D3
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/ffHd2Ruair9ltxVERYk4w2zsaNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.165.0/24
Signature Algorithm: sha256WithRSAEncryption
35:7a:65:b9:6c:52:7e:55:b4:5e:ad:0e:c0:93:f7:b0:62:6d:
4b:8d:a1:4e:35:29:0a:4b:ef:85:cf:34:31:ff:94:4e:d4:ae:
1a:a1:be:36:18:ac:eb:1d:79:f1:ba:7b:da:d5:03:f4:fc:3b:
a1:ff:6a:3c:76:88:d0:23:01:17:a2:47:9b:2d:cd:96:8e:40:
73:de:91:ff:1a:e5:bd:6d:cc:f0:f6:39:64:db:27:87:ce:f1:
dc:36:73:5a:21:db:1e:83:33:4c:fd:a7:7b:63:e4:ee:c4:ba:
17:71:56:e3:bf:60:df:ee:a4:8c:87:67:ef:26:6e:2b:bd:20:
24:57:58:67:ba:32:b2:38:63:99:ea:4a:c9:9d:68:16:09:21:
b5:8a:5a:69:68:44:af:0a:9d:47:cd:29:b5:c6:d8:5e:e4:c6:
e2:c3:5f:7f:e8:e9:37:1b:30:69:f0:fc:33:34:23:7b:03:ce:
3e:6a:f8:db:48:06:bf:b6:bb:b0:89:38:07:f5:18:71:14:81:
a3:f5:f7:27:08:03:89:e3:68:05:76:ba:89:a1:a7:4e:3b:aa:
23:20:a0:7c:28:40:d9:cb:40:7d:a3:1b:5b:83:77:2a:99:d8:
d8:28:fa:10:5e:19:8e:57:da:4e:81:cf:a5:a9:cb:53:2f:2e:
4d:9b:e0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:30 2025 by rpki-client