Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/d_P2C7-8KzXEXKrYSD9DOI8LiWE.roa
File: d_P2C7-8KzXEXKrYSD9DOI8LiWE.roa (raw, json)
Hash identifier: Yd4prnJa4gstJKWN3oZHIXfbfrVyLQkl2GQSNyCI7uQ=
Subject key identifier: 77:F3:F6:0B:BF:BC:2B:35:C4:5C:AA:D8:48:3F:43:38:8F:0B:89:61
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 019425FC140E76D9A84CAEFC08589AEE6EEE
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/d_P2C7-8KzXEXKrYSD9DOI8LiWE.roa
Signing time: Thu 02 Jan 2025 07:47:44 +0000
ROA not before: Thu 02 Jan 2025 07:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213772
IP address blocks: 45.153.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:14:0e:76:d9:a8:4c:ae:fc:08:58:9a:ee:6e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Jan 2 07:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77f3f60bbfbc2b35c45caad8483f43388f0b8961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:d7:77:ff:a2:7f:6d:21:c0:45:1f:81:c0:
9a:ca:e1:d0:d1:1c:d1:6f:af:f4:3b:73:b3:69:33:
2d:d6:77:86:8e:de:8b:2e:7e:6a:fe:cc:29:3c:f3:
09:e5:f8:b7:ef:ff:87:69:c0:b6:1a:dd:3e:77:68:
a9:aa:66:50:95:a6:08:74:94:61:33:34:35:ac:82:
4f:f9:ec:c4:69:c5:73:0e:16:73:a7:17:bf:15:75:
55:dd:86:6f:d1:c2:8b:86:0d:8c:99:7d:1b:0f:9a:
5c:37:fc:62:7c:aa:d5:cb:6e:53:56:25:b8:86:07:
44:d2:a5:23:9b:33:77:60:04:5e:e0:6d:0d:03:0f:
16:58:f5:af:df:6e:ad:8d:54:73:70:61:ea:c1:94:
ea:1f:b3:97:57:0c:31:f7:30:9b:ac:3d:35:f6:5b:
26:4e:23:6f:43:9b:4b:d4:85:03:46:ac:2d:4e:2b:
68:8f:7e:52:e6:82:70:b7:4b:e9:a1:f3:96:d0:0d:
e8:50:dc:49:2e:e2:60:9f:e1:ec:6d:eb:60:6a:15:
3c:c4:cc:ca:b7:2c:a7:aa:77:d9:55:95:a1:eb:eb:
2d:e1:6c:04:d7:6e:22:c3:ca:04:35:23:9b:a0:ab:
a6:9e:5b:d4:57:b7:a6:68:a1:7e:47:7f:b8:79:9c:
cf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F3:F6:0B:BF:BC:2B:35:C4:5C:AA:D8:48:3F:43:38:8F:0B:89:61
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/d_P2C7-8KzXEXKrYSD9DOI8LiWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:fe:28:56:e4:0c:38:5f:2b:c1:b4:67:e4:37:57:f1:d5:79:
7c:4f:7a:1b:22:4e:72:ca:17:11:91:5c:18:7d:58:3a:dc:7b:
d1:77:70:44:2b:1d:bf:93:1a:ff:4d:e4:05:d2:b5:41:18:9e:
9d:bd:3d:47:a9:cb:1e:28:a7:3e:fb:9a:e7:5a:77:e6:ea:f6:
74:5a:f3:05:4c:a1:68:c1:06:4a:da:48:d2:f4:e1:97:7b:f2:
3f:de:6b:a1:b3:bc:7d:be:78:13:c3:fc:b8:08:03:b0:8a:e1:
f0:5f:cc:bf:1f:d8:f3:12:d2:ee:f5:ac:e8:7b:1e:84:49:8a:
85:ab:e5:0b:10:50:9c:1e:7a:ea:03:da:db:9e:cc:27:e8:4a:
4c:99:9b:a2:3e:ec:45:1d:74:4f:70:44:0d:f1:77:86:57:b6:
cc:a3:db:d0:8a:8e:0a:be:26:35:e8:e4:46:ac:e7:e9:5b:9a:
1d:c4:d8:46:18:00:67:7b:a7:be:2c:86:69:f0:b4:e9:16:b8:
b1:45:39:5f:d2:06:73:6f:f2:ce:b7:78:8f:e2:62:b4:7c:76:
68:3b:54:67:10:64:f8:01:11:f0:d2:ed:60:62:6c:9d:77:e8:
65:bb:be:bb:3d:97:1a:34:8d:0e:75:23:4b:bb:32:67:a0:22:
86:00:1c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:58:03 2025 by rpki-client