Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/f4hIaIpBe2uj_P7WnwZdZXU2kNM.roa
File: f4hIaIpBe2uj_P7WnwZdZXU2kNM.roa (raw, json)
Hash identifier: r9inBCbaMnpafZ/V8WyTAmWxF/0oxnkbtMD4hiM0OCk=
Subject key identifier: 7F:88:48:68:8A:41:7B:6B:A3:FC:FE:D6:9F:06:5D:65:75:36:90:D3
Certificate issuer: /CN=b960b14746c5875244ae3b694162ec6d8c63255e
Certificate serial: 019426D919FAF8C75ED24885F82A2E6EEE88
Authority key identifier: B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/f4hIaIpBe2uj_P7WnwZdZXU2kNM.roa
Signing time: Thu 02 Jan 2025 11:49:09 +0000
ROA not before: Thu 02 Jan 2025 11:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41960
IP address blocks: 45.135.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:19:fa:f8:c7:5e:d2:48:85:f8:2a:2e:6e:ee:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b960b14746c5875244ae3b694162ec6d8c63255e
Validity
Not Before: Jan 2 11:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f8848688a417b6ba3fcfed69f065d65753690d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:42:1c:4e:34:6f:63:af:47:e4:44:ab:cc:
98:04:29:45:83:07:87:1e:3f:d3:7d:5d:ae:7d:d3:
06:d0:74:29:b1:46:1e:3d:08:4d:8b:25:5e:b5:76:
e4:72:b3:99:96:02:06:b9:01:c7:07:fb:df:a7:5f:
0f:34:e2:7b:9d:75:e8:7d:d6:8f:cc:6e:8d:03:eb:
72:a9:76:06:b6:f2:05:94:7a:4b:15:75:8d:9d:64:
4f:7f:e5:39:4b:c0:07:37:c2:d0:2b:64:88:6a:04:
f0:ec:b9:ff:b4:7d:83:0f:2b:ea:a2:79:f7:ed:09:
cc:2d:0e:e8:f5:69:ee:5e:94:61:b9:8d:bc:ad:f8:
ee:e4:30:b5:d4:a7:6b:ad:7e:73:8d:ee:1b:fe:2b:
37:f7:1c:63:58:92:85:0e:27:07:9a:8f:f6:80:29:
db:ae:4f:10:7b:9d:58:e6:8f:dc:4f:cb:68:28:3a:
30:31:9d:d6:f1:d0:22:82:5c:05:be:49:69:2c:9a:
0e:52:3b:3b:56:63:e4:f3:1d:82:1e:ae:3e:fc:24:
96:4f:78:1a:8d:a1:84:6d:56:83:68:21:83:21:3a:
ee:67:7e:f0:14:5a:f7:f4:12:40:3f:67:38:32:e5:
0e:05:c4:d1:33:3e:f6:a3:b9:01:bd:d2:8e:7f:69:
62:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:88:48:68:8A:41:7B:6B:A3:FC:FE:D6:9F:06:5D:65:75:36:90:D3
X509v3 Authority Key Identifier:
keyid:B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/f4hIaIpBe2uj_P7WnwZdZXU2kNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.211.0/24
Signature Algorithm: sha256WithRSAEncryption
59:a5:19:5e:f9:19:41:1a:8f:73:08:d7:a4:1b:fc:29:09:a7:
f4:a8:6f:8e:ac:d0:05:11:1d:b3:7b:07:d1:0c:ad:ce:84:db:
dc:a9:84:e6:d3:28:de:5d:a1:22:f4:bb:e8:6d:ac:b2:9d:83:
59:7a:13:a0:0d:05:7e:c3:7b:85:20:2a:32:68:53:4f:b2:44:
c7:51:de:71:c9:34:03:b4:67:4e:e7:d0:c7:47:8a:d7:30:9c:
8f:b9:ef:0d:a8:55:d0:9c:52:bb:e2:36:a8:95:00:28:47:7f:
c7:11:25:df:4f:5c:79:8b:ef:0e:f1:f6:47:d3:e8:dc:b9:e3:
2a:21:0c:a6:0b:a3:8f:06:d7:f2:a2:80:b3:e4:04:30:e5:cf:
c5:97:87:9f:3b:eb:05:99:35:df:ee:c7:31:bf:bc:be:8f:df:
05:2c:e9:01:41:d3:e0:7f:72:21:7a:91:ec:14:e9:45:ad:b9:
c9:24:ea:ad:85:fc:83:e7:bd:f5:aa:ef:4a:82:cb:1f:e3:6b:
e1:e9:43:a0:c0:fc:23:86:8a:a4:68:b7:e9:d9:b7:30:00:9d:
c7:13:99:cc:dd:ed:cc:29:87:dd:75:f1:7c:c0:72:c9:5d:d3:
61:2d:c7:f3:88:2e:56:78:3f:9b:64:d1:6c:87:8f:ff:2e:d6:
a6:ff:0d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:02:02 2025 by rpki-client