Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/fB3zFlody1nthwMkhJVJflJzOIE.roa
File: fB3zFlody1nthwMkhJVJflJzOIE.roa (raw, json)
Hash identifier: J7sG0dYSoVKmJxeiq5++oBkxzchZIPPLFfINpg3QbHs=
Subject key identifier: 7C:1D:F3:16:5A:1D:CB:59:ED:87:03:24:84:95:49:7E:52:73:38:81
Certificate issuer: /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial: 019424B3C5A326F9DC49B9FA54534B552F17
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/fB3zFlody1nthwMkhJVJflJzOIE.roa
Signing time: Thu 02 Jan 2025 01:49:08 +0000
ROA not before: Thu 02 Jan 2025 01:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52088
IP address blocks: 185.45.108.0/23 maxlen: 24
2a02:22f0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c5:a3:26:f9:dc:49:b9:fa:54:53:4b:55:2f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Validity
Not Before: Jan 2 01:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c1df3165a1dcb59ed8703248495497e52733881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:91:35:0e:24:f0:85:48:c9:1a:3f:cd:0e:92:
03:4c:b3:da:f3:2b:74:9e:62:aa:df:70:5b:12:c0:
e3:91:bb:bd:6a:80:ae:98:ab:84:9e:79:72:e9:f2:
9a:ff:e9:bf:43:3e:12:61:6c:0b:e6:d8:6e:97:e2:
12:da:5f:30:53:f0:4e:35:5b:a8:2f:c5:d8:53:b8:
c1:31:47:4c:06:1a:9f:ae:ab:b5:67:f0:e5:e4:43:
3a:ae:37:e1:29:48:41:aa:14:6f:96:8a:66:3f:24:
ac:39:91:82:d8:96:c8:dd:18:c3:65:35:95:81:f7:
35:19:77:d0:46:79:ce:a3:d7:07:ea:61:8c:9b:8e:
4d:ae:00:04:a8:01:92:57:6e:fa:0f:36:24:3e:a9:
a1:7a:d7:fa:5c:ba:83:0f:37:69:b3:53:af:4a:b8:
fc:28:90:8d:bc:fe:93:3c:e1:72:33:c7:e0:ea:8f:
66:d8:ae:83:11:a6:db:de:80:4d:d1:ab:51:1e:5b:
c3:7c:76:cb:75:b3:a6:8f:25:ee:be:cc:53:8f:67:
00:6e:79:30:02:bb:c4:cf:42:f9:a5:ae:03:44:9b:
fd:fa:e8:0f:ef:18:4c:50:10:42:7b:c9:78:5c:50:
5c:c2:7f:f0:03:88:e0:bd:2e:79:a0:2e:b1:fd:f7:
99:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1D:F3:16:5A:1D:CB:59:ED:87:03:24:84:95:49:7E:52:73:38:81
X509v3 Authority Key Identifier:
keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/fB3zFlody1nthwMkhJVJflJzOIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.108.0/23
IPv6:
2a02:22f0::/32
Signature Algorithm: sha256WithRSAEncryption
7b:0d:2a:76:d1:b9:89:79:78:2e:31:b4:f8:67:c2:d2:b8:37:
c5:3f:54:03:49:9f:38:e5:c9:dc:43:52:d4:b5:ff:cb:d2:2b:
e0:a1:4a:9f:34:22:ab:22:10:90:0d:4f:58:da:ba:02:d9:06:
7a:e1:d1:e5:cc:e5:96:b6:86:0b:26:28:2e:09:a0:31:b9:86:
3b:c2:6d:9c:b1:95:8f:91:66:77:4f:7d:c6:02:6d:9f:58:7e:
cd:9d:fb:d3:aa:46:22:e1:97:48:48:04:18:af:ce:b2:b2:83:
49:ef:b6:aa:d8:2a:c7:af:5a:00:89:56:62:ba:2e:25:68:3e:
c9:81:45:95:97:85:08:51:02:e0:99:fa:02:b2:12:bb:0f:73:
15:e9:51:25:08:d1:65:24:62:92:69:f0:27:74:eb:24:22:4c:
cc:f4:8b:49:d3:46:7f:d4:01:77:04:1d:6c:08:44:0e:2e:ad:
a0:39:bf:47:2f:2a:b7:79:da:a9:b5:f2:a3:3f:44:bc:43:a8:
81:2f:a0:21:42:79:7b:ad:e4:75:25:5f:23:c6:40:b6:dd:d0:
4a:43:19:c1:0b:37:06:78:93:6a:b6:34:50:ec:f9:d3:8f:07:
b1:3e:cf:ad:a6:61:c1:a7:f8:89:23:fa:7c:3f:ac:0a:60:22:
e5:07:c8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:54 2025 by rpki-client