Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Ftl7tdyGkKW2nUWCedAUB2oGkL0.roa
File: Ftl7tdyGkKW2nUWCedAUB2oGkL0.roa (raw, json)
Hash identifier: pIhH0NOajHd/tUR25XjC3ixDD3zZSmCbW1mBvGuDHUQ=
Subject key identifier: 16:D9:7B:B5:DC:86:90:A5:B6:9D:45:82:79:D0:14:07:6A:06:90:BD
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369CD934C73005AEA9177804AB3432E
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Ftl7tdyGkKW2nUWCedAUB2oGkL0.roa
Signing time: Wed 01 Jan 2025 19:48:44 +0000
ROA not before: Wed 01 Jan 2025 19:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50340
IP address blocks: 45.130.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:cd:93:4c:73:00:5a:ea:91:77:80:4a:b3:43:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16d97bb5dc8690a5b69d458279d014076a0690bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7a:52:f0:c9:ca:3b:c8:e5:ab:44:f5:87:eb:
ac:25:6f:45:00:bf:35:c8:47:e6:32:f0:6c:df:3c:
a6:03:c8:8b:e5:98:4f:d5:d4:91:53:70:35:96:3a:
13:20:6d:d1:bf:b3:92:41:17:27:97:70:e4:5a:02:
5f:b3:06:42:12:72:84:1a:77:0f:59:67:a2:a2:8e:
4c:d3:55:f7:b9:a5:b7:e1:96:43:8e:af:11:33:dc:
d0:39:a2:e1:f3:0f:ab:05:b7:30:e0:45:4e:8c:98:
77:13:6a:04:69:74:de:e6:9b:b4:89:89:38:5c:8e:
f0:bb:fd:21:3c:51:f4:c3:48:4f:b2:f8:ff:d4:27:
49:55:18:e3:6b:a8:d0:1d:06:f6:08:32:09:38:d8:
05:35:17:27:f5:30:bb:40:fd:c3:71:1a:9d:2a:d2:
13:7a:a2:ae:8f:37:ed:80:8f:b5:a2:d1:84:08:b0:
46:8f:07:79:86:3f:ad:2b:57:4e:0e:e2:22:b4:b7:
32:5f:4b:c1:3e:8e:af:3e:16:e1:f9:af:50:36:4e:
92:cd:a2:20:c4:a6:28:bd:7a:aa:31:8b:d1:8d:ac:
1c:90:d7:c6:bb:54:7f:e6:20:c4:8d:60:f2:17:50:
1e:af:6f:71:bf:99:02:82:80:d3:be:0e:3e:84:68:
d8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D9:7B:B5:DC:86:90:A5:B6:9D:45:82:79:D0:14:07:6A:06:90:BD
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Ftl7tdyGkKW2nUWCedAUB2oGkL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.145.0/24
Signature Algorithm: sha256WithRSAEncryption
71:20:16:43:a3:40:6c:72:c1:5a:c3:a1:b4:45:16:7d:be:01:
55:22:d8:7c:f2:3c:6e:e5:47:7d:1b:d2:16:3f:6c:27:d1:5b:
0d:74:09:aa:b7:6f:13:02:97:d0:ba:0b:40:5c:45:d2:8a:6a:
32:40:fb:61:14:86:ce:8a:b8:a3:4a:a0:96:8e:2c:4b:79:d6:
3d:a8:1d:e3:26:c1:d0:45:be:22:11:76:d2:ea:1f:15:74:3b:
fa:75:d4:e7:b0:b4:2d:71:e6:e8:47:b5:54:c7:1c:d0:0e:64:
65:22:7c:4a:ff:d5:ad:f5:3d:27:a6:78:a4:b1:55:05:97:1b:
1b:56:ac:67:ff:13:c3:2d:0e:c8:1f:0d:ea:b8:04:c4:d6:19:
e1:b0:db:4a:d4:e7:07:02:86:6a:2e:e2:01:b0:18:da:e1:76:
3a:d9:cd:67:e5:e2:61:2b:b9:27:c0:24:25:8d:ad:d0:ec:de:
7a:c0:18:e5:29:d5:9b:4d:e6:57:06:79:93:07:86:3f:e5:6a:
c1:41:3c:d4:d0:8b:58:6a:ff:d2:5e:96:69:df:f3:90:ab:79:
2f:ca:0a:a2:a9:ce:32:00:70:2a:63:4e:8f:76:12:0c:84:5f:
df:37:2d:ea:69:5a:18:c7:b3:32:20:51:94:0d:cb:e1:33:db:
ea:0f:b1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:54 2025 by rpki-client