Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1b7i4vHUI6u7TtushD2Z2ujyKME.roa
File: 1b7i4vHUI6u7TtushD2Z2ujyKME.roa (raw, json)
Hash identifier: Aqp+hK+/mgWQ6Jze87XL9y5Ltn1GCIYSTswzbFSN7jI=
Subject key identifier: D5:BE:E2:E2:F1:D4:23:AB:BB:4E:DB:AC:84:3D:99:DA:E8:F2:28:C1
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B249AD71ACCBD29BC4627E422568F1
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1b7i4vHUI6u7TtushD2Z2ujyKME.roa
Signing time: Wed 01 Jan 2025 11:48:39 +0000
ROA not before: Wed 01 Jan 2025 11:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208796
IP address blocks: 45.15.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:49:ad:71:ac:cb:d2:9b:c4:62:7e:42:25:68:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5bee2e2f1d423abbb4edbac843d99dae8f228c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:1a:52:73:a9:b5:4a:92:ce:d7:28:01:35:
bd:d2:fd:89:cf:eb:bb:c2:c5:1d:24:c9:28:37:4b:
d8:3f:51:49:4e:ec:5f:e2:a1:47:8d:9d:ba:63:27:
01:e3:a7:db:b0:75:1f:8a:9d:95:6f:7a:61:3f:f1:
12:a1:a1:b9:a1:89:eb:48:9b:70:3b:87:80:39:ca:
8b:7a:52:ac:b8:2b:3d:e6:4f:43:58:0b:af:f0:6c:
e9:10:cd:ea:2d:de:d3:51:f8:59:26:32:93:1b:bb:
7b:51:24:fd:36:a6:0e:7c:c7:16:4d:b6:49:ef:13:
41:e1:44:82:8d:c5:c0:91:89:ac:bd:a3:81:29:38:
54:d2:0f:c6:e0:c1:0b:97:e3:6a:a9:0e:8c:a7:81:
f8:29:b8:b0:49:dc:19:71:77:2a:23:50:fc:49:cd:
6a:e9:12:56:c4:69:f6:3c:af:f0:82:aa:1f:5d:43:
03:7f:99:fd:44:36:68:a6:27:1a:f6:ac:0f:bd:12:
35:d4:b7:18:93:d3:29:e9:62:4f:eb:c1:dc:94:2d:
69:fd:98:aa:f1:50:19:16:d4:13:9c:e7:21:72:8c:
e2:7a:ef:e7:42:d6:ab:c7:5a:0f:53:92:eb:2c:cb:
8a:95:0f:3f:86:93:fc:a8:63:12:f7:3c:2c:7f:79:
83:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BE:E2:E2:F1:D4:23:AB:BB:4E:DB:AC:84:3D:99:DA:E8:F2:28:C1
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1b7i4vHUI6u7TtushD2Z2ujyKME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.177.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:5b:45:96:99:bf:ea:fd:9a:9a:f3:04:c2:ad:a5:7e:99:eb:
91:78:d7:64:fb:6d:47:6c:d2:aa:3b:d1:74:57:f2:f9:92:22:
18:97:b8:0f:ab:d4:b7:48:0f:b3:a4:c8:1f:e8:ff:5b:2e:87:
8f:f6:cb:54:32:cb:e4:1b:ed:f6:75:75:2a:06:97:8a:e3:ab:
fd:2e:73:d9:42:43:cd:f6:24:47:bb:3c:ea:8d:45:05:60:02:
e0:b5:28:cf:91:64:0c:fb:7d:9c:a2:59:41:8b:f4:f0:09:f4:
fc:be:40:4c:ea:d9:5a:15:e7:f9:45:73:a9:81:92:81:89:c4:
e5:58:e7:70:ba:10:61:7e:f8:1a:6b:94:c4:44:72:64:5a:fa:
89:82:bd:66:50:47:08:04:ac:4d:36:cb:40:cf:95:45:9d:79:
18:f7:60:96:05:df:0e:a1:c8:80:15:2d:77:6a:9c:1e:f3:c4:
a8:b5:d9:42:6c:a5:e4:1d:75:3f:3f:36:5d:6d:6b:92:47:af:
92:24:0d:cd:c0:6e:09:54:b4:ea:70:f7:6e:4d:57:30:aa:6e:
29:24:fb:c9:bc:7f:8d:05:97:96:fc:70:76:c1:08:ae:14:bc:
fa:1b:42:17:2b:d1:f7:f3:63:94:52:82:91:63:cd:0d:ec:fa:
36:65:bd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:42 2025 by rpki-client