Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/xxa6C-pa80quO5ROYbjP391EF1Y.roa
File: xxa6C-pa80quO5ROYbjP391EF1Y.roa (raw, json)
Hash identifier: kO5NzNIL7QO5wmPmlUrjQ/tzsh5UuDfcIRoRWEvLEF8=
Subject key identifier: C7:16:BA:0B:EA:5A:F3:4A:AE:3B:94:4E:61:B8:CF:DF:DD:44:17:56
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 019425FC11FF914A9B5E51F54339BFBF7161
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/xxa6C-pa80quO5ROYbjP391EF1Y.roa
Signing time: Thu 02 Jan 2025 07:47:44 +0000
ROA not before: Thu 02 Jan 2025 07:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46261
IP address blocks: 45.147.63.0/24 maxlen: 24
45.153.239.0/24 maxlen: 24
77.83.44.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:11:ff:91:4a:9b:5e:51:f5:43:39:bf:bf:71:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Jan 2 07:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c716ba0bea5af34aae3b944e61b8cfdfdd441756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:a1:c4:fe:09:19:f2:13:73:35:ea:72:ad:
50:44:01:ff:c5:1d:88:1a:bf:f7:d6:73:8f:30:74:
ed:57:1e:15:f6:1a:d2:52:5e:27:2d:e8:f9:35:33:
3d:c2:91:3e:06:73:55:81:ce:e5:b4:5c:d5:67:94:
aa:46:20:6f:5c:be:30:03:ad:12:f3:71:70:a3:22:
10:82:be:1e:35:5d:17:82:0f:f3:83:ea:a3:60:9a:
d0:19:3e:d0:8c:20:69:50:85:4c:60:58:88:c6:30:
e8:15:37:9c:0e:0a:16:54:62:5b:93:3c:9d:8b:ff:
af:5a:c0:19:28:da:55:82:17:54:7b:8e:d7:ab:03:
e1:12:6e:6a:19:54:79:ce:49:86:b9:51:8f:9f:8a:
58:7f:df:4f:88:d5:f5:aa:d0:df:ce:8b:1b:ec:9c:
f2:11:af:92:47:a4:df:55:0a:9f:8d:01:a0:87:9f:
17:78:e2:0f:1b:ba:20:80:2a:ea:d6:7b:6b:26:71:
be:d5:b2:39:02:38:59:13:ff:d2:1d:7b:36:0a:b4:
8c:77:44:fd:63:97:8e:67:86:02:5d:10:d6:c3:9a:
32:8d:5f:22:e6:70:b0:40:e0:65:2b:25:5c:d1:ff:
ad:75:9c:24:16:e2:03:6f:10:85:c7:ed:15:0d:88:
0b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:16:BA:0B:EA:5A:F3:4A:AE:3B:94:4E:61:B8:CF:DF:DD:44:17:56
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/xxa6C-pa80quO5ROYbjP391EF1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.63.0/24
45.153.239.0/24
77.83.44.0/23
Signature Algorithm: sha256WithRSAEncryption
52:8d:7b:99:22:55:2e:fb:4e:35:ba:fc:a7:2f:80:87:72:0b:
8c:4d:71:0a:97:30:91:fc:19:96:e1:12:2d:dd:37:73:2e:24:
26:95:d4:0d:14:f3:e9:1a:2e:b2:c7:5f:47:f9:4b:7e:0b:cd:
7d:c3:4e:f1:34:4d:bf:34:9d:ff:0b:3e:c8:ce:2a:36:2f:42:
e0:e7:fa:e5:35:0e:8a:56:15:7b:cd:06:3c:5e:9f:c7:f8:93:
41:6c:22:45:75:05:3f:39:15:55:2c:46:b2:48:db:64:3e:0c:
d2:3d:c7:d7:65:0d:9f:97:95:c9:96:fe:2f:c9:ce:67:7b:10:
b1:73:24:12:e8:9e:e6:c0:ff:7e:e3:2f:c4:96:10:da:af:a9:
1c:91:eb:f6:e1:5d:2f:8b:e3:0d:2f:c0:07:4e:8f:a1:99:9d:
0c:75:dc:e1:22:3f:81:cb:87:d5:32:35:7a:09:ec:f5:23:ec:
3d:83:9b:a3:94:1b:c9:73:8c:02:8b:1f:83:69:2c:77:ad:12:
8b:5f:42:b4:60:02:f1:b5:93:58:2c:85:29:ec:7d:90:bb:91:
5e:b2:81:52:d0:ae:f0:04:28:1b:a1:03:ef:b7:2a:2f:c4:9d:
f5:4e:0b:6c:7b:9b:cb:ac:b3:8a:8d:a3:2f:8a:af:05:27:3f:
74:23:a3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:14:48 2025 by rpki-client