Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/9sL18tXf_FQUMHDdhaGgFB6LlgU.roa
File: 9sL18tXf_FQUMHDdhaGgFB6LlgU.roa (raw, json)
Hash identifier: Km4sWphhHruxSkTC55ar2P8+4ohVWoNQTMzIbKPbGMw=
Subject key identifier: F6:C2:F5:F2:D5:DF:FC:54:14:30:70:DD:85:A1:A0:14:1E:8B:96:05
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 019425FC14557185A9EF63EF825402891DF4
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/9sL18tXf_FQUMHDdhaGgFB6LlgU.roa
Signing time: Thu 02 Jan 2025 07:47:44 +0000
ROA not before: Thu 02 Jan 2025 07:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 262287
IP address blocks: 45.11.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:14:55:71:85:a9:ef:63:ef:82:54:02:89:1d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Jan 2 07:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6c2f5f2d5dffc54143070dd85a1a0141e8b9605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c8:41:f7:44:7b:88:85:c8:e5:d9:67:e4:9f:
58:b5:0c:5b:1c:d9:c5:07:7f:3f:33:57:65:90:dc:
67:2c:6d:77:a4:b8:86:5d:63:7a:ea:fa:d2:07:16:
e5:c9:98:72:98:45:bd:40:7d:00:4a:94:24:0d:88:
a6:4b:d4:e3:6f:52:6e:77:16:a1:21:f1:e4:de:39:
2b:75:00:22:24:12:1a:b7:9d:0d:3f:1f:0f:1d:7e:
49:f7:07:e5:55:d7:cb:ae:1e:cb:67:f3:53:43:4c:
2f:04:9f:39:cd:e5:9d:a2:8f:86:1e:0b:44:cd:21:
1a:11:33:40:45:5e:72:f4:97:8a:c2:9b:f0:2f:f3:
33:a1:c5:23:3d:d1:54:d7:d2:0f:5c:6d:d3:df:db:
36:78:e8:dd:72:1a:ae:ca:a5:77:04:f9:c1:cd:85:
37:16:f9:1b:86:47:5f:1e:22:45:bd:38:45:86:42:
27:6f:7b:eb:a7:a5:9d:f1:96:04:2c:d9:0b:05:31:
e3:2b:81:34:ba:8e:fa:ef:ca:48:dc:3a:4e:12:7f:
1a:d8:74:27:41:14:c1:75:23:6b:55:d8:f1:5e:a9:
f6:6d:62:06:a8:56:94:fc:74:0f:3b:6e:c1:71:4d:
94:f3:72:22:7a:7e:30:55:7f:18:f9:07:20:ad:ae:
9a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C2:F5:F2:D5:DF:FC:54:14:30:70:DD:85:A1:A0:14:1E:8B:96:05
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/9sL18tXf_FQUMHDdhaGgFB6LlgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.233.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:2b:35:f4:3e:71:1e:75:32:98:82:07:1c:e9:2a:2b:dd:a7:
5a:88:03:0b:99:64:a0:3a:4b:f5:7c:ed:5a:a1:ad:74:db:b5:
d0:be:51:50:0c:64:8d:8b:15:9f:5c:c1:de:33:3c:11:78:a0:
6e:a0:6f:fd:33:5d:42:75:0e:98:f1:4c:2a:e7:c5:7f:5f:73:
52:6f:5b:6f:41:5d:53:c5:c1:3f:64:4a:ca:cb:92:07:5c:d6:
f2:2c:64:a4:32:ac:fa:b7:2d:1e:c5:99:8f:33:85:94:91:b2:
b3:3b:93:16:8f:d6:bc:4c:7b:a5:9a:50:6f:33:15:b0:58:82:
d4:b5:0b:43:bc:0f:66:8f:15:d4:cc:57:1c:e8:53:ba:a8:b9:
df:1c:5b:d7:95:ad:e4:79:27:ea:74:b8:e5:7a:7e:12:c1:e3:
6a:8c:a2:8c:8e:55:a8:b4:72:da:c3:4c:3e:d7:ab:02:23:af:
32:24:1b:98:b3:f4:08:59:88:78:db:16:eb:d7:1a:a1:6d:ca:
3b:ad:9b:d9:18:9b:02:b2:ee:fd:62:0f:2e:08:63:6d:3a:ae:
56:e4:b6:1c:7b:53:36:11:3e:9a:f0:61:13:38:e2:98:55:f1:
de:30:5a:eb:fe:e3:05:0c:18:23:da:3b:e4:2b:cb:1b:a8:3f:
e6:d3:62:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:34:25 2025 by rpki-client