Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/fP75SpA7Cm_ap9X_SYkgGuwcj5U.roa
File: fP75SpA7Cm_ap9X_SYkgGuwcj5U.roa (raw, json)
Hash identifier: sT7gNcAjPgGWSX18oB4dzH2TyqW9lT5iPARyxjkA6IU=
Subject key identifier: 7C:FE:F9:4A:90:3B:0A:6F:DA:A7:D5:FF:49:89:20:1A:EC:1C:8F:95
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01943A6005FB738E2D1848B5FCBB6CB1E9A6
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/fP75SpA7Cm_ap9X_SYkgGuwcj5U.roa
Signing time: Mon 06 Jan 2025 06:49:18 +0000
ROA not before: Mon 06 Jan 2025 06:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.154.156.0/24 maxlen: 24
188.209.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3a:60:05:fb:73:8e:2d:18:48:b5:fc:bb:6c:b1:e9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 6 06:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cfef94a903b0a6fdaa7d5ff4989201aec1c8f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9b:1c:61:3a:20:eb:10:57:3e:98:cf:7e:bf:
9b:8b:63:6d:48:b8:f5:e4:fa:b8:4d:10:8d:85:49:
94:83:a6:63:2b:dc:78:70:b0:bb:d8:fb:a2:fc:f5:
b3:2c:4a:a7:d8:2e:a8:08:8f:08:b6:c8:07:56:5c:
fd:d0:a4:3d:87:46:93:ff:84:9c:d4:b3:b6:70:dd:
6e:2f:b8:74:93:5c:56:cd:4a:09:a5:cd:fa:42:af:
60:0c:f5:22:fd:96:3c:6c:88:45:24:7f:7c:e2:fc:
7d:65:e7:b1:c2:02:82:07:6d:c3:f4:35:b6:c9:a9:
f8:87:48:7a:f8:de:9b:93:af:b1:71:40:9c:0a:bb:
20:ed:df:cf:ba:cf:a8:3e:01:ed:d2:8e:57:d4:7d:
cc:79:65:0d:eb:8f:8c:26:9c:63:c6:7e:f6:90:e6:
bc:55:49:83:39:32:f4:fa:19:70:1b:18:09:08:48:
11:d0:a5:99:97:6e:ac:aa:1e:74:66:ec:5c:fd:19:
e8:eb:a8:30:20:4e:00:a3:9b:40:17:92:5b:6b:a2:
40:ac:e7:99:d2:94:3b:08:9a:77:5f:1a:79:47:75:
95:b7:59:71:30:06:d2:ed:2e:bb:4f:51:d8:f5:2f:
4d:78:f7:0b:ad:cf:af:57:ea:69:44:1c:8c:32:53:
99:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FE:F9:4A:90:3B:0A:6F:DA:A7:D5:FF:49:89:20:1A:EC:1C:8F:95
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/fP75SpA7Cm_ap9X_SYkgGuwcj5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.156.0/24
188.209.132.0/22
Signature Algorithm: sha256WithRSAEncryption
88:79:ea:9d:4b:df:b4:73:2d:86:22:1f:47:d4:e7:3b:4f:af:
b9:cc:eb:32:6d:c8:b1:dc:06:43:3a:ef:07:04:9d:d2:13:c9:
7b:c5:13:d8:32:74:c0:40:6c:7f:a8:3b:cc:d7:24:03:9d:0c:
99:ea:98:e2:4e:4f:a1:49:0a:27:1f:73:51:af:29:91:f8:0c:
1a:29:71:fc:28:04:ea:e3:91:ae:b6:68:49:61:c5:fc:84:67:
0e:5a:c9:b9:7b:f2:04:95:9e:1d:71:7e:3c:ee:ea:43:c6:95:
5d:11:bd:76:9c:ce:55:62:be:cd:89:1e:36:c2:83:2b:e2:a6:
dc:44:f1:00:63:e5:5e:ba:11:6c:4c:9b:6e:bd:0a:09:3b:c2:
46:fe:b9:05:23:f1:67:f6:ec:62:42:06:bb:c7:67:31:9f:51:
d8:8a:bb:a4:6c:55:c4:ec:54:45:a7:f0:3f:d9:71:1f:bf:6e:
01:a3:05:e8:b7:f8:62:af:6f:a4:be:d9:2d:7f:92:1b:55:be:
fa:b2:6c:a2:d4:c7:9c:16:db:72:39:68:e0:7e:a7:d0:d3:8e:
7e:f4:82:29:59:5b:a5:4b:ba:ee:18:b6:c6:f3:6c:20:5e:4b:
28:a3:5e:f9:ae:a9:aa:41:14:04:2f:cd:6b:cb:d7:dd:f1:e7:
26:64:f7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:59:47 2025 by rpki-client