Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/AfbEpvSxDrrh1OtrSyVSOg3Z58I.roa
File: AfbEpvSxDrrh1OtrSyVSOg3Z58I.roa (raw, json)
Hash identifier: qRfkpcOlj3PZtsJVcCyJBCiG146OagAfcAawvELhwBk=
Subject key identifier: 01:F6:C4:A6:F4:B1:0E:BA:E1:D4:EB:6B:4B:25:52:3A:0D:D9:E7:C2
Certificate issuer: /CN=1db853b861973fc506e64714cca796d15ccace51
Certificate serial: 082B2EB0
Authority key identifier: 1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/AfbEpvSxDrrh1OtrSyVSOg3Z58I.roa
Signing time: Sun 17 Apr 2022 16:05:38 +0000
ROA not before: Sun 17 Apr 2022 16:05:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208575
IP address blocks: 45.128.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137047728 (0x82b2eb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db853b861973fc506e64714cca796d15ccace51
Validity
Not Before: Apr 17 16:05:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01f6c4a6f4b10ebae1d4eb6b4b25523a0dd9e7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b2:7d:77:2e:51:41:71:be:b6:4d:b8:2f:c8:
62:dd:34:51:b7:f3:07:d9:e5:5d:fd:ab:00:b6:36:
14:a9:e9:19:00:ed:08:a3:9c:95:8a:32:37:d8:f8:
a3:5c:bf:50:78:6d:59:aa:00:f0:46:d0:01:62:dd:
85:23:99:f3:42:fa:b3:29:02:51:63:b8:d8:7b:b6:
b1:52:cb:db:4c:d9:6d:97:2d:2d:9a:69:27:f8:99:
a0:5b:7a:f7:a9:80:6a:22:ea:87:f0:23:a1:21:bb:
e8:b3:e7:03:f4:52:ee:56:18:64:ee:91:25:47:f4:
42:39:89:0d:1b:6c:e0:b1:e6:4f:56:53:af:c3:ed:
fa:0a:d8:b7:05:0f:95:d5:c5:24:8b:83:37:34:71:
ea:56:14:68:ff:03:6d:31:ba:33:58:02:fc:5d:61:
b0:14:44:16:55:ee:48:d1:35:1f:ea:9e:fc:d8:2a:
62:56:bf:32:a3:af:bb:81:92:5f:d2:ef:72:a5:d3:
bb:5d:9d:be:46:a2:1e:d8:a1:3f:62:32:3f:72:3c:
58:92:71:a2:71:a8:48:3e:25:92:78:b3:88:8c:c6:
ef:3c:cd:e5:96:04:6c:ae:d1:88:61:6f:f3:30:37:
7f:d3:33:8f:7f:cf:7b:8d:8a:63:1f:95:3b:60:18:
ee:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F6:C4:A6:F4:B1:0E:BA:E1:D4:EB:6B:4B:25:52:3A:0D:D9:E7:C2
X509v3 Authority Key Identifier:
keyid:1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/AfbEpvSxDrrh1OtrSyVSOg3Z58I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/HbhTuGGXP8UG5kcUzKeW0VzKzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.17.0/24
Signature Algorithm: sha256WithRSAEncryption
62:6a:be:cf:ed:4b:70:44:35:ae:1c:66:06:ef:db:48:8a:e9:
db:06:b2:7e:8b:3e:77:f3:5f:9c:32:ec:33:ac:2d:1f:37:d0:
d8:70:14:15:b4:29:d0:7c:27:5c:1c:b0:3d:e4:83:51:84:c9:
2e:ba:ee:fb:d6:38:d1:fd:db:68:e5:26:1f:e2:57:10:13:40:
39:74:7d:93:b6:67:83:3e:a9:9c:3e:3b:e3:4e:4c:0a:26:20:
3b:05:40:e0:80:72:47:72:62:fe:11:49:d9:8d:55:d1:9e:c6:
18:d6:72:9b:d0:ad:aa:d9:a3:4b:2b:fc:27:2f:af:06:9a:6d:
1f:c1:4e:e7:09:0c:e4:a2:1f:89:1d:f9:82:fc:1c:b4:c0:0c:
5c:a4:d2:7f:d1:2a:b3:ee:19:f4:ed:63:b7:7d:0a:93:39:3e:
ba:3d:11:9f:b3:4f:3d:8a:2b:c7:8c:82:84:a1:fe:be:67:9b:
c0:ef:34:e9:1c:90:11:ba:7f:07:f9:ef:f5:f2:d8:93:11:1c:
a9:2e:d9:2b:71:43:6f:dc:f5:2f:52:83:19:01:95:4b:8f:0c:
fd:85:5c:ea:c7:90:0b:36:45:05:4b:81:24:b0:6b:88:e8:59:
7c:dd:0b:d9:21:24:57:4d:21:ea:1c:a0:f6:b9:fd:bd:18:c4:
c7:19:49:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:38:56 2025 by rpki-client