Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/FwySP1jVKL7DmmlRNwZnvOJofjw.roa
File: FwySP1jVKL7DmmlRNwZnvOJofjw.roa (raw, json)
Hash identifier: F8V8HLYupPXjwfMEbx0g1ieMP6WPPz1HmoVO8jTtRCg=
Subject key identifier: 17:0C:92:3F:58:D5:28:BE:C3:9A:69:51:37:06:67:BC:E2:68:7E:3C
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 019425FC111EB2CC0FDB8386DEA1C9206468
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/FwySP1jVKL7DmmlRNwZnvOJofjw.roa
Signing time: Thu 02 Jan 2025 07:47:43 +0000
ROA not before: Thu 02 Jan 2025 07:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15440
IP address blocks: 45.153.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:11:1e:b2:cc:0f:db:83:86:de:a1:c9:20:64:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Jan 2 07:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=170c923f58d528bec39a6951370667bce2687e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5f:d0:08:c5:a6:c8:36:ea:bb:b5:eb:a6:2d:
66:04:09:30:9c:48:12:06:de:ee:4f:ac:bf:09:5d:
34:11:39:3e:ec:67:0f:ab:4e:c3:46:06:26:85:fc:
fb:f0:2f:b9:e4:ca:de:9d:dd:a7:2a:07:7d:91:48:
18:f2:c8:05:d0:ae:78:68:c0:70:ca:5d:d6:36:46:
30:e3:4d:e1:0b:c7:32:0b:97:fb:30:d7:51:52:cb:
ab:36:72:00:a8:c6:3f:01:79:70:f9:7a:a3:81:15:
42:15:15:73:d8:c6:67:08:9a:ee:ce:ea:5f:21:2f:
2c:1c:a2:8f:07:11:f7:2d:d3:6e:f5:91:ce:d7:b6:
19:fb:68:25:28:33:ff:8b:7f:df:d4:83:a9:96:be:
e0:07:85:f8:61:ce:a9:29:99:da:33:21:7c:d9:eb:
6d:05:8c:d8:ae:da:03:99:09:b5:a0:7f:1e:29:22:
4d:2a:3e:e4:6f:16:d4:7b:d9:4d:27:6d:3c:4b:8e:
b7:ec:78:20:28:43:ec:1a:c7:ad:c2:66:af:ba:52:
99:7e:57:14:94:ca:0a:e1:03:0c:4f:d4:ff:39:93:
f2:3e:8b:b9:67:8b:c6:b5:0e:89:2b:ce:97:b6:05:
96:ea:f3:e0:ae:91:53:0d:82:05:ab:f6:13:eb:90:
49:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0C:92:3F:58:D5:28:BE:C3:9A:69:51:37:06:67:BC:E2:68:7E:3C
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/FwySP1jVKL7DmmlRNwZnvOJofjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.237.0/24
Signature Algorithm: sha256WithRSAEncryption
92:5d:04:db:74:5d:3c:0f:b7:7e:94:59:5a:c9:77:b7:f9:c6:
88:39:ce:8d:f9:00:44:ec:3f:77:1a:c5:e4:71:8e:59:8c:17:
ea:0a:0e:ce:79:19:30:b7:01:53:a3:c0:1e:7d:52:22:bb:fa:
88:3c:12:de:f1:e7:74:88:ef:f3:91:f5:10:ff:7b:96:8b:5a:
2f:0e:21:f8:3d:87:41:62:ae:88:38:a2:6b:fe:b8:90:3b:d9:
6c:15:37:58:06:42:ee:fb:49:09:6f:bf:4f:c2:52:bc:e6:14:
93:fb:07:b3:20:4f:5e:bc:54:97:15:5d:b4:8b:4e:7b:35:4b:
58:dd:dc:27:3e:8c:28:bc:52:06:00:ee:06:2d:89:1b:13:5a:
2a:36:ed:35:2d:3b:74:96:4a:17:a3:a9:63:2f:88:b9:ce:da:
7e:de:2c:20:d2:b3:c1:d9:f8:e5:0c:7e:05:ab:20:59:49:df:
07:c4:23:41:de:9c:ec:a9:9c:75:de:cc:2e:b1:98:45:3f:c2:
18:77:31:4d:87:80:81:6f:66:94:83:08:b7:87:47:de:e6:12:
21:00:78:9f:e3:ab:47:e5:0c:7d:20:10:8b:8b:90:6e:7a:d2:
f9:f3:3c:bd:1e:ab:43:10:d1:75:ba:34:81:66:3f:2b:3c:c0:
61:7c:e6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:12:28 2025 by rpki-client