Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/R7plklNZbkVdwgnk5lol7iBrg5s.roa
File: R7plklNZbkVdwgnk5lol7iBrg5s.roa (raw, json)
Hash identifier: mPUS3PTRHBz7zH2dn7Vp8XCxZA/mkCKC+stlugPKGTc=
Subject key identifier: 47:BA:65:92:53:59:6E:45:5D:C2:09:E4:E6:5A:25:EE:20:6B:83:9B
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01951C9CF40C544685C759480465624951E4
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/R7plklNZbkVdwgnk5lol7iBrg5s.roa
Signing time: Wed 19 Feb 2025 05:10:02 +0000
ROA not before: Wed 19 Feb 2025 05:10:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53356
IP address blocks: 45.151.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1c:9c:f4:0c:54:46:85:c7:59:48:04:65:62:49:51:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 19 05:10:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47ba659253596e455dc209e4e65a25ee206b839b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:27:85:2d:2e:af:e3:a0:a1:da:7d:08:87:1d:
56:0c:e4:4d:18:18:eb:25:ad:fa:8b:10:1d:9d:33:
db:5e:42:12:89:53:df:6b:ff:cc:9c:7d:d4:26:4f:
9c:44:42:7b:91:00:ae:43:77:7c:0a:f5:a7:26:e7:
e6:56:52:b0:e3:18:0b:68:04:de:0d:b2:c5:73:5d:
e9:d9:e3:3c:2f:4b:2a:ef:8f:02:4f:07:1e:13:00:
5d:e4:b4:a4:04:32:83:b4:41:f0:77:d2:af:20:2e:
70:f5:32:6d:80:43:42:0a:1d:c5:a5:b8:20:0e:35:
6d:fa:3b:2e:bf:f2:46:8b:6d:ac:5d:82:84:ed:f5:
88:a4:0e:f1:56:78:d4:56:fe:50:d4:86:ca:7c:f9:
34:01:49:7d:6b:c3:d4:2b:4d:3d:07:5c:b6:25:14:
f5:48:55:fe:47:65:e7:08:a0:ff:4f:8e:8f:dc:d3:
92:ee:bf:79:56:ed:42:1a:c4:0a:3b:55:e6:72:d6:
d4:cb:d7:7a:3c:64:04:e2:2c:3b:d2:12:38:ac:9d:
df:8d:f2:f2:b5:bc:a5:2a:74:a0:21:44:5e:9b:63:
52:38:c2:da:b2:37:cd:28:15:38:b2:45:65:4a:4a:
08:f9:59:f5:79:f8:55:87:c8:81:ed:72:74:cf:4f:
b2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BA:65:92:53:59:6E:45:5D:C2:09:E4:E6:5A:25:EE:20:6B:83:9B
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/R7plklNZbkVdwgnk5lol7iBrg5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.141.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:e5:1f:3c:71:db:b3:2d:e2:7e:41:51:26:5d:f1:69:1a:66:
26:28:46:28:f7:e8:b7:84:76:4c:2a:70:d2:cb:cd:44:6f:04:
d9:85:3d:de:5b:55:67:1c:c2:3f:65:61:eb:9a:bc:43:dc:0f:
8c:4d:cf:8d:00:4f:bd:e9:c8:e0:ba:c0:7b:41:21:ce:e1:c6:
47:0b:aa:21:c0:2a:16:8f:c4:a5:bb:1f:f7:35:30:a3:02:10:
92:59:e0:ec:cf:96:db:01:dc:da:d2:ae:c2:70:99:71:9c:43:
05:69:a2:3f:64:73:aa:a6:4b:aa:f5:93:23:05:6e:d8:05:92:
d8:08:a6:55:a2:76:c6:8b:95:c2:d7:c9:d7:f6:b7:e8:05:e6:
b6:95:79:3f:ff:db:07:49:af:11:5b:c0:ab:5c:af:29:be:4f:
2d:56:af:21:15:dd:b5:72:7f:3f:9b:c2:c0:5a:92:1b:99:99:
48:bb:14:15:7a:2c:6b:7a:1d:4b:8f:88:df:17:da:51:40:1f:
03:07:72:43:9b:ea:fb:12:74:6d:0f:56:08:6b:a9:de:33:04:
a8:65:da:ba:92:ba:f3:0e:6e:7b:6c:a2:8c:cc:b6:fa:e8:a0:
fd:44:eb:b9:05:8e:c4:90:a5:0a:6c:4f:f4:bc:ee:b1:78:30:
e7:17:df:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:37:08 2025 by rpki-client