Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/fDsdK2tD77O7e4AR_nokgS7lFto.roa
File: fDsdK2tD77O7e4AR_nokgS7lFto.roa (raw, json)
Hash identifier: 29a/vkXJaunGUFq80jkR7W5FhU3JI/W9/SFVMkWYH+c=
Subject key identifier: 7C:3B:1D:2B:6B:43:EF:B3:BB:7B:80:11:FE:7A:24:81:2E:E5:16:DA
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 019426D9A80F843D1070411645AE456F2A89
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/fDsdK2tD77O7e4AR_nokgS7lFto.roa
Signing time: Thu 02 Jan 2025 11:49:46 +0000
ROA not before: Thu 02 Jan 2025 11:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 45.3.60.0/22 maxlen: 24
2a0d:c980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a8:0f:84:3d:10:70:41:16:45:ae:45:6f:2a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Jan 2 11:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c3b1d2b6b43efb3bb7b8011fe7a24812ee516da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:91:2a:26:a1:3b:7e:b1:6d:7f:93:b4:83:38:
6c:aa:33:eb:b4:22:d7:92:d7:fe:8f:a2:e3:28:cb:
56:37:26:ec:9d:a0:de:34:e4:ea:0a:ea:b6:b4:ec:
98:f7:b8:77:8f:34:4b:23:20:1f:48:9e:f8:4e:71:
ab:fa:b6:9d:d9:87:bd:14:6a:18:b1:17:69:95:7a:
9c:fa:21:17:d8:b6:b3:8e:f5:59:d8:c8:bc:9a:1f:
34:4a:d5:50:0c:18:fd:ca:a8:f9:46:ed:31:a8:8d:
f9:98:23:eb:7a:91:b9:5f:da:52:95:68:52:b4:57:
cb:d0:e4:4d:63:97:6f:6b:5e:11:5e:72:e6:7e:23:
89:fd:ab:a2:c8:18:c6:32:58:07:d0:82:cd:18:c4:
53:fc:86:e3:04:ee:92:04:f1:a1:e5:66:f1:b0:09:
d3:f6:5c:a1:91:cb:72:08:53:88:a8:85:5a:a0:72:
2a:73:10:4c:c6:57:2e:b4:ed:a6:44:30:ce:01:58:
91:e4:99:b9:d5:7c:7b:2f:53:11:25:ea:11:13:78:
6a:f4:36:4b:b9:9e:ed:ad:57:0c:d8:77:cd:52:c0:
da:85:31:f7:fd:41:7b:b9:d2:93:b5:ab:55:8e:ba:
3e:23:a5:fd:c4:f8:0c:f0:6b:33:57:67:9a:35:4f:
51:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3B:1D:2B:6B:43:EF:B3:BB:7B:80:11:FE:7A:24:81:2E:E5:16:DA
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/fDsdK2tD77O7e4AR_nokgS7lFto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.3.60.0/22
IPv6:
2a0d:c980::/29
Signature Algorithm: sha256WithRSAEncryption
7c:56:6b:25:c1:27:2e:d4:a3:26:69:33:5e:5c:29:89:29:f3:
66:db:6d:c4:67:b2:1c:6f:91:82:6c:02:af:2a:a1:c9:92:25:
c6:74:3c:b7:15:26:7b:5b:70:64:08:91:1e:c5:b3:bb:65:74:
32:89:6e:49:65:c4:9a:d4:3b:5e:c2:50:5f:5a:be:b5:4f:04:
63:32:6e:35:14:9f:23:5b:c3:5f:9d:50:bc:26:d5:6e:ed:e3:
b2:29:62:05:a0:ef:3c:db:4a:57:e9:4d:a8:ad:78:3f:5b:14:
06:d8:2b:ad:0c:9b:3e:d6:f3:0e:20:90:23:46:ca:88:8a:1d:
e8:39:77:43:43:da:66:ae:48:8a:58:c2:fe:a1:91:86:d4:5f:
34:33:35:06:fa:18:a8:be:14:02:05:db:56:14:95:02:d0:73:
03:4c:04:fa:90:f1:0a:28:84:9c:c5:4f:ca:e4:65:79:d2:58:
92:79:00:cb:eb:75:21:24:75:ca:dd:5e:75:cf:85:03:36:5e:
56:c3:f6:00:75:4f:95:45:9b:b6:cc:43:b9:46:5a:8b:7b:a9:
e8:27:52:ff:6c:cf:0c:c4:ea:8f:18:03:cb:39:d5:af:0c:10:
78:a5:98:ed:2a:62:99:1e:c4:31:c9:c8:a1:03:46:36:f3:1b:
65:73:09:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:02 2025 by rpki-client