Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/s3eE-P6KHaZhEFtp-p4OcOMIO5k.roa
File: s3eE-P6KHaZhEFtp-p4OcOMIO5k.roa (raw, json)
Hash identifier: M2Uo4Gpb+a0DQhYTKJ2pCUBjR72TE2YaQI7XFu5tfN4=
Subject key identifier: B3:77:84:F8:FE:8A:1D:A6:61:10:5B:69:FA:9E:0E:70:E3:08:3B:99
Certificate issuer: /CN=156d70330ec51e9ff1f7727b1781c47a7a9aa56d
Certificate serial: 0194258F2F39280AA92E41C1E3EB2508C61B
Authority key identifier: 15:6D:70:33:0E:C5:1E:9F:F1:F7:72:7B:17:81:C4:7A:7A:9A:A5:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FW1wMw7FHp_x93J7F4HEenqapW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/s3eE-P6KHaZhEFtp-p4OcOMIO5k.roa
Signing time: Thu 02 Jan 2025 05:48:48 +0000
ROA not before: Thu 02 Jan 2025 05:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199524
IP address blocks: 45.147.160.0/24 maxlen: 24
45.147.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:2f:39:28:0a:a9:2e:41:c1:e3:eb:25:08:c6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156d70330ec51e9ff1f7727b1781c47a7a9aa56d
Validity
Not Before: Jan 2 05:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b37784f8fe8a1da661105b69fa9e0e70e3083b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:e5:a1:21:59:46:73:bc:d7:e9:4e:33:dc:
bd:55:f6:87:cd:11:19:8d:51:87:c3:2a:a4:e1:2d:
73:cc:f5:b1:64:95:00:18:75:8b:8f:dc:36:dd:e6:
f4:d4:9e:d4:7f:3c:03:e5:cd:3f:ee:ad:25:72:c0:
1e:dc:25:23:71:96:10:4f:fc:66:da:70:b4:3a:85:
b4:5b:9f:c4:a5:30:e8:f6:9f:ad:28:6a:1d:c9:4f:
1a:aa:12:91:3b:52:5d:2a:1a:de:b3:50:e1:56:59:
8d:d6:0d:5d:06:8d:a9:46:00:37:a3:f6:21:60:fe:
3f:2e:93:fe:b4:70:85:b2:1f:c6:dc:14:43:e8:b5:
9b:f4:07:21:e4:4d:1a:22:3f:41:30:c2:39:fb:62:
9d:28:27:5c:b5:a2:e6:36:ea:c7:9e:1c:d6:40:6a:
90:85:e0:b7:ea:55:a1:b3:d1:32:4c:8a:fd:41:3e:
bd:39:80:ea:aa:54:3b:9b:ac:3a:29:3c:da:0a:e3:
23:87:e6:33:89:82:6e:0b:b1:fb:cc:44:86:e4:ce:
fe:28:98:37:b4:94:cc:21:c8:ee:b1:bf:b5:fb:02:
93:95:82:24:d3:f1:ed:f9:a5:96:06:2c:b0:d8:17:
1b:87:33:82:3c:62:11:fa:dc:7b:17:4a:85:e7:87:
71:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:77:84:F8:FE:8A:1D:A6:61:10:5B:69:FA:9E:0E:70:E3:08:3B:99
X509v3 Authority Key Identifier:
keyid:15:6D:70:33:0E:C5:1E:9F:F1:F7:72:7B:17:81:C4:7A:7A:9A:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW1wMw7FHp_x93J7F4HEenqapW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/s3eE-P6KHaZhEFtp-p4OcOMIO5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.160.0/23
Signature Algorithm: sha256WithRSAEncryption
69:60:b3:d8:0c:42:18:8f:60:65:62:74:24:e9:22:d5:2e:75:
ba:e5:3e:5c:41:18:ad:37:c2:3d:5d:b3:d9:2d:a2:b6:bb:2a:
41:fd:15:5c:a1:36:2f:c8:3d:53:a4:04:e1:1e:d7:ab:7f:2e:
25:f6:6e:ac:fd:2d:22:13:19:c2:65:9c:4d:cc:04:22:d9:e9:
64:92:0f:51:3b:44:5c:83:f4:13:19:17:eb:e1:be:ab:52:a4:
95:ca:cb:55:2a:23:ce:bb:e1:c0:70:86:05:36:dd:fa:3c:c6:
87:d8:1d:47:e0:1c:ac:7b:7d:26:55:56:cf:c6:af:23:f6:b1:
57:75:a6:fa:03:dc:e4:47:97:e6:5a:28:7f:e9:f6:c5:8c:a6:
de:4f:be:1b:a5:c9:63:52:bf:b9:b9:2e:22:1e:6e:39:fa:fe:
94:98:f0:f3:cb:eb:97:84:ec:d9:82:7c:dd:eb:7e:7e:90:c3:
21:20:89:9d:78:c5:bd:06:1d:44:9f:b4:69:2d:ba:77:49:7d:
fd:d0:a8:27:b4:64:03:38:3e:54:46:90:89:a2:d8:7c:97:0d:
34:31:aa:e1:e2:e3:c5:4a:a9:6a:91:48:4f:3d:d4:8f:5b:90:
a4:e4:e4:c2:94:03:a3:59:0c:02:fb:5a:bf:b5:62:08:81:8b:
e1:89:46:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:29 2025 by rpki-client