Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/7HPt5nannhv2gwbAHwaRC5RFFDM.roa
File: 7HPt5nannhv2gwbAHwaRC5RFFDM.roa (raw, json)
Hash identifier: UBw+74e6x0xFF9XFftGKU2o22p62byiADLv5iJRfz1g=
Subject key identifier: EC:73:ED:E6:76:A7:9E:1B:F6:83:06:C0:1F:06:91:0B:94:45:14:33
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 019427B4890F65C337CE7222B6FC3E3FCED3
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/7HPt5nannhv2gwbAHwaRC5RFFDM.roa
Signing time: Thu 02 Jan 2025 15:48:50 +0000
ROA not before: Thu 02 Jan 2025 15:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 45.151.61.0/24 maxlen: 24
81.17.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:89:0f:65:c3:37:ce:72:22:b6:fc:3e:3f:ce:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Jan 2 15:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec73ede676a79e1bf68306c01f06910b94451433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4a:f9:25:59:1f:ed:47:6e:d4:4e:6a:13:dc:
69:83:05:69:b4:2b:06:65:ee:2d:45:f3:72:26:74:
76:f6:f7:ee:56:7a:47:8a:a4:71:d1:54:84:36:c7:
18:ec:cc:6b:27:25:13:03:8f:ac:87:26:30:ce:c2:
23:62:af:19:5a:e9:63:2b:dd:5c:08:3a:e5:c1:05:
b1:45:86:ce:ba:bf:32:54:1b:45:f2:a6:d6:92:18:
ba:a3:c3:0f:f7:0a:91:99:e7:89:e2:09:59:4c:af:
64:75:ee:d8:85:32:63:8d:49:16:d8:f9:4e:99:5a:
28:94:6e:4c:2b:97:d2:52:ab:16:2d:84:97:5d:03:
54:03:22:7b:c2:da:21:4d:c8:e7:9f:d1:38:f6:74:
10:e1:eb:e8:15:84:3e:bd:f5:61:0b:c6:0c:e5:06:
63:80:82:64:79:41:f1:3b:f3:14:f1:58:e7:1a:4f:
55:68:60:78:22:08:48:af:0d:2f:b1:24:a0:f5:6e:
3d:38:87:e1:29:7d:49:ac:09:26:2b:e8:47:62:21:
ee:38:2a:3a:1a:5b:e4:14:8b:f2:b6:7e:31:3f:5c:
d8:a2:23:39:1a:97:c7:66:21:71:08:23:2c:2b:b1:
2b:da:61:8f:df:d2:fc:aa:27:6c:52:d4:b8:9d:79:
14:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:73:ED:E6:76:A7:9E:1B:F6:83:06:C0:1F:06:91:0B:94:45:14:33
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/7HPt5nannhv2gwbAHwaRC5RFFDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.61.0/24
81.17.159.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d8:d3:c3:a7:80:a0:eb:7a:53:e6:e8:27:5d:2f:f6:3c:91:
67:49:03:70:c6:d5:cf:b5:63:9f:f5:c6:df:df:6f:95:9b:80:
cd:9c:dc:99:72:7a:b5:a9:aa:b7:da:ac:bf:66:71:e6:60:f5:
be:97:8d:95:80:23:28:36:66:46:5a:b9:f3:1d:33:34:6a:b8:
31:c2:a3:59:ee:88:44:da:78:9a:bd:62:dc:de:3c:17:34:01:
8e:38:7c:cb:5e:63:24:fa:87:0c:49:93:76:0c:45:6f:9a:42:
c3:61:39:9f:08:40:17:f8:33:21:0b:a0:15:85:91:d4:dc:c8:
99:cc:4b:02:f2:0e:54:c4:65:54:59:d2:e9:66:2e:13:91:82:
ce:a3:83:b3:c2:6e:db:18:93:5f:bf:fe:13:c5:8e:5c:cf:62:
c1:8a:9c:04:92:76:8f:b4:b3:2f:9a:73:4d:47:a6:ff:31:2a:
5d:99:a1:62:46:95:a9:65:1e:98:f2:33:da:88:1e:cd:33:6c:
a6:65:ef:89:71:be:80:a5:0f:4a:0a:54:08:4e:82:02:23:ff:
77:ec:1b:85:36:64:fc:2d:8c:ef:61:8f:ad:cb:00:89:19:65:
27:75:c0:73:b4:60:bd:af:13:ed:25:fb:c2:ab:b4:94:df:d3:
ce:48:06:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:32:14 2025 by rpki-client