Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/1-oXSUr0wwWM6bUdeuL56OFYZDI0.roa
File: 1-oXSUr0wwWM6bUdeuL56OFYZDI0.roa (raw, json)
Hash identifier: ncbwn+oJ9xxudk0G2RRlfn6p7YnDM2Topv72cCblM78=
Subject key identifier: FA:85:D2:52:BD:30:C1:63:3A:6D:47:5E:B8:BE:7A:38:56:19:0C:8D
Certificate issuer: /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial: 0194258FC236A8E01AC3A0F4586F1D22FB03
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/1-oXSUr0wwWM6bUdeuL56OFYZDI0.roa
Signing time: Thu 02 Jan 2025 05:49:25 +0000
ROA not before: Thu 02 Jan 2025 05:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 145.46.168.0/24 maxlen: 24
145.46.169.0/24 maxlen: 24
145.46.170.0/24 maxlen: 24
145.46.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c2:36:a8:e0:1a:c3:a0:f4:58:6f:1d:22:fb:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
Validity
Not Before: Jan 2 05:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa85d252bd30c1633a6d475eb8be7a3856190c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:3c:5b:2a:dc:b6:85:4d:16:c0:40:89:1f:
6e:fb:76:37:33:0e:53:19:a6:f9:92:14:45:d6:91:
de:f8:49:d8:34:21:cb:5b:26:c8:cf:2c:67:8a:58:
f0:c5:f3:3d:13:0d:67:9d:75:ab:5c:fd:07:da:35:
fc:8b:5e:14:2f:0f:39:33:f6:e9:51:c0:9f:ef:62:
02:16:b8:fa:96:de:9d:a4:80:c0:0f:9e:5f:69:c2:
0a:61:27:eb:5d:95:cb:4e:3e:a1:01:23:7c:f5:9e:
5c:32:6c:f4:f5:1e:f5:77:0d:66:3f:3c:88:90:4d:
33:79:04:98:d4:b3:b8:02:56:77:77:8f:07:9c:a5:
f5:00:78:0b:b0:3e:74:9e:e9:4e:18:06:ae:7c:00:
85:35:fa:2e:95:ca:dd:8f:ce:c2:f0:78:fb:1c:24:
3a:f5:49:bb:14:8a:12:4b:56:8e:32:24:8c:2e:ef:
08:65:e9:8b:68:84:dd:18:aa:54:59:da:2f:b0:87:
b6:dc:ad:4e:a0:d0:27:34:50:8d:77:22:cb:5f:da:
c7:47:61:12:19:38:23:39:e3:59:d5:fc:53:6f:81:
a4:78:f7:c2:9e:e3:a6:10:9f:7c:d7:5a:48:ad:10:
69:80:fc:3d:cd:e8:80:22:db:60:bb:ed:6f:6d:63:
45:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:85:D2:52:BD:30:C1:63:3A:6D:47:5E:B8:BE:7A:38:56:19:0C:8D
X509v3 Authority Key Identifier:
keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/1-oXSUr0wwWM6bUdeuL56OFYZDI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.46.168.0/22
Signature Algorithm: sha256WithRSAEncryption
99:19:d6:ef:01:d3:05:2b:4f:a3:fa:16:62:ac:0d:7a:87:20:
92:6b:00:e9:f1:d3:da:ea:99:01:f8:10:4f:18:cd:1c:10:90:
e7:78:76:97:c5:b0:eb:86:77:3a:c8:01:ec:ba:0f:6d:ea:ec:
e6:87:29:62:16:a3:fe:d6:2c:ce:15:11:01:33:f1:d2:e6:fe:
6f:cf:27:74:3e:4b:0a:08:14:93:78:ad:d1:35:89:2c:5d:67:
ec:42:95:36:76:29:69:ef:d3:1a:82:16:5f:d0:3a:aa:84:25:
42:ad:c3:c2:76:53:98:41:50:6f:f4:1e:4d:b2:17:22:95:d7:
39:7b:c0:c3:18:ae:d9:e7:63:82:16:85:1a:21:34:0a:67:e6:
08:00:7f:3a:4a:de:5b:ff:e1:d8:31:39:8e:be:7e:2b:83:63:
8d:8e:51:3b:54:e6:75:d8:7d:3c:60:6f:e7:4d:dd:1f:c3:3a:
30:f1:5d:63:d2:1e:a0:38:f9:0e:e6:6e:40:6b:6b:bd:9a:15:
fb:fa:42:d1:eb:0f:76:34:d6:9e:d9:83:cc:c9:e6:63:e0:59:
fa:00:e1:73:40:b7:3d:19:d9:a3:b3:26:1e:7f:6a:4a:2c:2c:
4e:1d:5d:af:f0:16:05:93:d6:9d:4f:63:dc:1d:54:ec:29:4d:
f4:a2:23:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:40 2025 by rpki-client