Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/Fw_E1L4Nw5Hr77P4PSs-fCdld4o.roa
File: Fw_E1L4Nw5Hr77P4PSs-fCdld4o.roa (raw, json)
Hash identifier: 02j0pLQbdlE9MH5ggabxr1xIMQYmyzEOYjg+Z13q0BA=
Subject key identifier: 17:0F:C4:D4:BE:0D:C3:91:EB:EF:B3:F8:3D:2B:3E:7C:27:65:77:8A
Certificate issuer: /CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Certificate serial: 01941F8C0B6C830692F0E0612AB2A7FE0076
Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/Fw_E1L4Nw5Hr77P4PSs-fCdld4o.roa
Signing time: Wed 01 Jan 2025 01:47:39 +0000
ROA not before: Wed 01 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49544
IP address blocks: 45.153.18.0/23 maxlen: 23
45.153.18.0/24 maxlen: 24
45.153.19.0/24 maxlen: 24
2a00:1e29::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0b:6c:83:06:92:f0:e0:61:2a:b2:a7:fe:00:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=170fc4d4be0dc391ebefb3f83d2b3e7c2765778a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:80:cc:7f:8f:24:64:b0:22:97:e2:88:3a:
d4:21:09:42:fa:a8:a6:54:57:57:ef:b3:68:b8:6a:
b1:63:27:1f:48:eb:57:76:85:31:d5:7b:6d:9d:50:
b8:0e:d9:d3:13:86:c6:57:da:f3:79:d1:65:0a:39:
76:ca:71:55:e3:c4:97:ce:0a:ce:e1:e0:5a:58:3f:
40:0f:81:0d:b7:0a:81:07:f4:08:18:dd:57:e1:70:
43:21:85:5c:4e:3e:b1:7c:51:2f:ee:38:27:55:02:
6d:37:47:97:80:84:dd:67:00:49:a2:8e:91:73:15:
0f:59:98:46:9c:04:6f:30:cc:d8:a9:a4:5e:d5:ce:
63:a4:9a:3e:ed:42:f1:cc:94:a2:02:6b:40:c2:bd:
34:40:ba:73:e1:ce:ae:53:3b:d5:b7:58:c1:a5:09:
22:95:de:2e:21:4b:18:5e:d5:82:c8:77:8c:88:cb:
78:2d:68:3d:ba:b2:20:12:10:c2:63:e6:d3:a5:cb:
9a:62:1e:57:79:6f:02:0d:54:d2:c1:b0:52:aa:b9:
0f:58:23:5b:1e:51:e8:99:cf:60:37:2f:5e:54:20:
cb:38:a5:38:da:84:a6:53:1a:05:cf:7d:55:b1:59:
9b:a7:79:c4:d0:d1:f0:1f:fd:cd:6d:09:7d:4d:91:
c0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0F:C4:D4:BE:0D:C3:91:EB:EF:B3:F8:3D:2B:3E:7C:27:65:77:8A
X509v3 Authority Key Identifier:
keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/Fw_E1L4Nw5Hr77P4PSs-fCdld4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.18.0/23
IPv6:
2a00:1e29::/32
Signature Algorithm: sha256WithRSAEncryption
1d:49:2f:7f:5a:28:4a:f6:c0:d5:6e:ec:14:16:32:d4:74:fa:
f6:36:a7:ef:84:4f:fe:ad:c8:20:36:36:53:d3:24:43:0d:51:
45:44:bd:c2:ad:4a:80:ca:30:0a:06:70:74:35:b9:f2:c4:72:
fa:ca:72:52:0d:da:85:6b:45:09:73:b1:54:68:d1:ee:70:e7:
ca:c8:35:9a:3e:a1:26:ff:72:49:81:59:80:e4:79:f9:de:63:
f8:2f:14:9d:a8:91:91:f1:4f:ae:63:7c:30:60:e0:7e:23:61:
6d:3e:9c:c0:25:86:c9:7e:75:0c:f5:5f:d8:44:b6:a2:86:87:
51:c6:ed:06:f2:f0:33:29:25:65:bc:ce:11:e2:ec:b3:e0:a5:
c4:7f:cb:14:96:9b:1d:25:6f:3f:0a:2c:e3:ab:11:06:d8:9f:
0b:60:c9:94:85:6c:61:f0:2b:be:70:9e:e6:37:76:c4:05:58:
0c:38:bb:38:60:35:e5:86:b3:af:dc:3f:c2:1e:96:c7:b1:f3:
f9:22:12:24:b9:e2:00:d8:dc:ba:8d:81:1d:3b:b1:b0:62:d6:
fe:3b:10:7e:ed:15:9a:1b:31:64:f4:37:38:a7:53:a6:10:db:
55:c0:33:a0:32:74:05:64:d3:5e:34:c5:e7:6b:49:54:71:59:
6e:e3:7d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:41:41 2025 by rpki-client