Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/jX4WFfpxo3HHZpB1YZxC4p_jFpo.roa
File: jX4WFfpxo3HHZpB1YZxC4p_jFpo.roa (raw, json)
Hash identifier: HvcFd2uvN4vxiceLP8NW4lHvaK1pmADob7hykxb6+nc=
Subject key identifier: 8D:7E:16:15:FA:71:A3:71:C7:66:90:75:61:9C:42:E2:9F:E3:16:9A
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 019427B483E2293559BA3C7E2EEA6950C984
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/jX4WFfpxo3HHZpB1YZxC4p_jFpo.roa
Signing time: Thu 02 Jan 2025 15:48:49 +0000
ROA not before: Thu 02 Jan 2025 15:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8342
IP address blocks: 45.151.60.0/24 maxlen: 24
81.17.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:83:e2:29:35:59:ba:3c:7e:2e:ea:69:50:c9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Jan 2 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d7e1615fa71a371c7669075619c42e29fe3169a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3f:68:49:ce:06:07:9b:af:6b:ef:47:8a:8d:
79:8c:2f:67:6e:5d:8e:6b:a0:60:4c:d7:b8:e1:4b:
da:2d:ed:10:33:41:0c:e6:33:cd:9e:c1:27:3f:f3:
f0:51:fc:a4:58:37:ef:70:48:5e:8e:f0:53:c2:6e:
d7:ac:8c:84:8a:ac:f1:fc:57:e0:d0:50:36:7e:d8:
3b:36:0a:09:35:04:16:bb:6a:f5:61:a3:70:70:86:
04:cd:a2:cf:30:76:f8:47:27:97:9d:a3:ae:a8:c9:
68:2e:cd:c4:a3:86:0b:a0:28:3e:98:aa:8d:67:33:
d5:3d:a1:bc:cf:c9:ac:86:07:ac:b0:f7:5c:1a:e9:
ba:13:41:1e:fc:e1:de:24:be:c9:60:a6:5b:3b:6d:
8d:47:54:a8:9e:1e:1f:d7:bf:21:ff:06:2b:7a:6d:
d9:9c:36:69:c6:35:61:32:08:d3:31:09:51:f8:97:
08:53:4a:71:3d:7e:65:6f:22:25:e7:9c:66:82:cd:
55:e7:e4:49:6a:bb:5c:9a:89:9d:e6:09:17:c2:a0:
67:3b:df:46:c8:1f:bd:08:2d:96:f3:94:d5:5b:00:
78:77:6a:1d:73:48:61:76:5d:c0:77:be:c0:a6:71:
13:39:80:fb:0e:37:df:c3:d9:d6:5e:e3:b0:e7:25:
33:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7E:16:15:FA:71:A3:71:C7:66:90:75:61:9C:42:E2:9F:E3:16:9A
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/jX4WFfpxo3HHZpB1YZxC4p_jFpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.60.0/24
81.17.158.0/24
Signature Algorithm: sha256WithRSAEncryption
21:bc:f9:47:2b:6d:5e:78:b7:20:39:b4:d5:02:32:2a:e3:64:
00:35:83:89:e6:c0:5c:35:7a:cd:2b:bf:a6:5b:5a:fb:bf:05:
b5:d1:28:cd:aa:86:e4:78:ff:1a:8f:e6:be:f5:ed:a1:1d:d8:
de:44:8b:58:65:5e:78:75:8f:d1:11:6f:8b:62:82:52:c8:55:
45:31:a7:cb:c6:14:b9:0a:be:ac:57:8a:7b:c9:49:46:2b:66:
4a:5d:7c:4c:96:eb:43:f1:10:4b:d1:65:a0:6d:ef:85:f2:e5:
5b:ed:73:fd:e2:9b:f1:1f:d0:e2:25:fa:c0:19:ef:1f:ad:48:
f3:8c:dc:b2:cf:a6:e2:40:99:60:f5:da:f7:c8:5d:b7:94:6c:
2c:11:10:eb:3a:44:ac:28:9b:0f:e3:3c:7c:40:3f:44:c6:1e:
23:53:2e:b5:8a:e9:14:fb:28:34:5c:41:db:98:6a:4e:f8:21:
d5:88:08:0c:e5:8a:8b:6e:ca:af:63:67:eb:cc:6e:11:15:ee:
72:80:34:d7:9b:e6:b1:5f:08:4a:a5:65:d5:71:0c:49:1b:a3:
94:3d:e6:dc:63:82:9b:1e:2a:09:a5:0e:11:28:d5:68:15:92:
94:3b:21:42:25:2a:c5:fb:44:21:1d:3b:51:4b:c5:6e:e2:58:
01:c0:60:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:03:08 2025 by rpki-client