Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_E7x5C8PZ9CrdRTE0WEzPFyKO-4.roa
File: _E7x5C8PZ9CrdRTE0WEzPFyKO-4.roa (raw, json)
Hash identifier: LarpC9gDwqmAgFKE0QDOl4BJsq0fEVH+PAH6+CXeZB4=
Subject key identifier: FC:4E:F1:E4:2F:0F:67:D0:AB:75:14:C4:D1:61:33:3C:5C:8A:3B:EE
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01956D631ED358DB4B6C35ACC016B113B4F6
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_E7x5C8PZ9CrdRTE0WEzPFyKO-4.roa
Signing time: Thu 06 Mar 2025 21:36:07 +0000
ROA not before: Thu 06 Mar 2025 21:36:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.8.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6d:63:1e:d3:58:db:4b:6c:35:ac:c0:16:b1:13:b4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Mar 6 21:36:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc4ef1e42f0f67d0ab7514c4d161333c5c8a3bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:15:80:d8:d7:fe:4d:62:66:74:b9:b9:8f:
f9:4a:2d:77:85:0a:33:1e:f9:87:cf:f8:4b:03:8e:
e7:45:59:cf:9c:6f:3d:bb:85:87:e9:97:b6:6a:cc:
4e:04:37:9b:af:3a:ac:a1:65:f4:99:0a:1e:84:65:
05:e9:7e:30:ce:5e:5b:f2:43:91:aa:93:37:99:12:
73:2b:07:ae:42:ff:4c:d5:6d:05:d1:c5:a1:d0:d2:
2d:25:f6:43:10:86:ff:49:86:1a:4a:2b:ca:0c:65:
54:c7:76:5c:8e:b7:71:d6:93:a5:35:c1:14:0d:14:
6b:3d:09:91:51:fd:7d:38:2e:b4:60:75:5f:f7:85:
26:52:b7:1e:d2:d3:ac:d8:48:77:84:c8:ed:f6:7b:
be:b9:fe:57:1a:87:ad:f4:22:e4:83:75:28:ac:14:
66:ad:00:1c:f5:10:1b:c7:9e:20:b8:1f:c0:d3:ef:
4d:e7:4e:7e:ca:2f:da:52:1c:5f:a7:19:81:86:7b:
60:50:0c:15:b8:8c:7c:51:65:04:a8:e1:c6:c4:4e:
df:fc:b0:df:0f:9f:f7:eb:65:b7:54:4f:21:b0:6d:
65:e1:c3:03:d4:59:13:59:15:96:d0:c2:53:cb:58:
4b:ef:d4:7d:28:41:fd:8d:b2:ac:f6:cb:da:02:16:
81:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4E:F1:E4:2F:0F:67:D0:AB:75:14:C4:D1:61:33:3C:5C:8A:3B:EE
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_E7x5C8PZ9CrdRTE0WEzPFyKO-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.252.0/24
Signature Algorithm: sha256WithRSAEncryption
95:0e:b9:ec:14:3c:ef:33:08:08:ea:86:de:c0:b9:54:40:a4:
42:50:ab:5a:aa:35:d8:54:d3:aa:1a:7b:82:d8:7c:2e:26:9d:
e2:73:2d:cb:ce:a5:47:aa:7e:4e:ca:59:ab:e6:73:72:b1:a1:
26:1f:e4:e6:61:86:4a:9a:74:a4:7e:de:8f:4b:75:b2:91:d3:
24:78:8c:a6:b4:ff:06:0e:ee:1b:7e:c4:4f:28:83:c8:c7:e1:
bb:49:4b:92:36:53:42:2c:d9:bf:e5:ea:50:d1:89:95:e7:fc:
88:26:0f:2c:55:c4:e2:76:c4:0d:51:fb:65:59:5e:d1:8a:48:
24:5a:6c:e2:ec:f6:0d:ab:d3:fa:e3:21:dd:8a:f5:5d:13:fb:
49:23:bc:fe:48:ff:20:94:91:3c:5e:b2:ad:31:da:f1:44:0e:
3c:44:17:7f:07:79:af:92:11:b3:13:f3:f6:f4:07:42:fe:ef:
93:bb:72:80:d1:88:85:b8:0b:46:d3:6d:c3:00:01:04:d4:82:
3f:11:07:88:b7:96:94:d9:2d:75:2f:5a:35:67:8a:13:e8:be:
01:77:27:54:d6:1e:e5:cc:33:46:4f:eb:21:78:5c:9d:2b:a4:
7f:4a:61:9a:78:f7:11:ae:17:1c:68:15:85:ed:14:29:65:ce:
3e:69:d7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:04:02 2025 by rpki-client