Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/lPRYsXr9JuYhFsnWzjWNX4jmwLk.roa
File: lPRYsXr9JuYhFsnWzjWNX4jmwLk.roa (raw, json)
Hash identifier: iBeGuJYtICJBlFiRT2Vx63Td8Xc0QnYIl7/YBwzr0yk=
Subject key identifier: 94:F4:58:B1:7A:FD:26:E6:21:16:C9:D6:CE:35:8D:5F:88:E6:C0:B9
Certificate issuer: /CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Certificate serial: 0194228D0C2E6F0F691F3FED30C5D3AFF728
Authority key identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/lPRYsXr9JuYhFsnWzjWNX4jmwLk.roa
Signing time: Wed 01 Jan 2025 15:47:36 +0000
ROA not before: Wed 01 Jan 2025 15:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213217
IP address blocks: 45.143.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:0c:2e:6f:0f:69:1f:3f:ed:30:c5:d3:af:f7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Validity
Not Before: Jan 1 15:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94f458b17afd26e62116c9d6ce358d5f88e6c0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:76:3c:9e:53:4b:e7:81:9f:ae:17:a2:5b:
54:39:85:0f:48:86:80:e4:e2:c7:7e:2d:31:9e:16:
b6:d1:fa:6e:98:89:33:14:5e:c0:c7:6b:06:a1:3f:
ab:1f:ef:97:db:c9:fe:52:79:5e:ef:25:71:14:e0:
5e:29:9c:40:53:7b:66:3a:cd:ab:18:67:f7:c6:a4:
40:48:7c:c2:6b:c9:a0:d0:2f:e8:ea:7b:16:17:dc:
18:06:25:6d:bc:b1:13:a1:0f:d4:02:30:92:cc:ec:
7a:0a:45:d9:85:94:4a:c9:6e:26:b0:de:61:1b:f2:
30:e0:4b:fd:50:9f:b1:ae:9a:a6:69:ed:e3:4d:74:
e9:84:f8:93:22:cb:81:8c:32:d2:89:42:22:3b:e0:
04:7e:c3:5f:f4:ea:44:56:86:f3:3e:c0:ab:78:30:
07:5e:66:42:db:ef:1c:a5:55:e0:2c:b5:d5:61:f5:
df:d8:bc:e7:dc:db:13:cf:a1:49:d4:0a:c2:3e:84:
f5:a7:4a:d1:a6:44:3b:5d:f9:0b:5f:3d:18:d2:a6:
5a:f9:71:d5:b8:22:ff:6e:c6:f9:68:8d:cd:8e:ef:
46:a4:89:3e:f7:96:2b:49:86:80:9c:20:14:5c:2d:
c5:80:67:9a:4c:c4:33:c9:c2:73:6b:2e:98:e6:31:
dc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F4:58:B1:7A:FD:26:E6:21:16:C9:D6:CE:35:8D:5F:88:E6:C0:B9
X509v3 Authority Key Identifier:
keyid:D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/lPRYsXr9JuYhFsnWzjWNX4jmwLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.88.0/24
Signature Algorithm: sha256WithRSAEncryption
14:59:e6:7c:da:ab:02:5c:40:c5:d0:c3:4b:4e:33:ca:2f:09:
60:23:e1:81:55:57:32:bc:0f:d7:05:ce:e9:8b:2c:35:8e:e7:
ac:56:ca:b4:9d:b5:a2:cd:5a:43:01:9e:d4:5b:bf:6f:07:85:
6b:93:e2:ce:9f:d4:42:4f:96:8b:cf:80:4d:24:8c:0a:38:f6:
26:c4:be:8f:bd:f2:19:56:af:37:6c:fa:72:97:df:31:c3:b0:
0a:3c:05:41:42:3d:45:2b:75:a0:43:9f:f6:bf:34:61:36:8f:
78:6d:1a:ee:1c:d7:1a:99:28:79:e2:d3:9e:7f:d4:f4:c7:86:
5f:35:c6:ae:5f:04:72:31:48:cb:e9:eb:ef:56:07:4d:1d:37:
e7:5e:7e:e2:bd:ad:8e:6a:c0:40:a0:d6:2f:3a:44:6c:15:fd:
3e:4b:e4:7a:41:06:81:57:50:fb:5f:5f:50:ec:07:ff:cd:f3:
0c:f1:db:23:ad:67:10:89:17:fa:da:da:1f:5d:c2:75:44:a3:
1b:29:45:13:37:a7:4f:d0:d8:6f:ea:e6:e0:f3:b3:6f:2e:92:
1a:34:38:23:04:54:f4:b6:dc:fe:f3:52:74:2d:24:7b:f2:3f:
b2:8e:86:da:35:ff:49:f2:35:25:e2:29:04:60:cf:67:a1:45:
a2:ce:9a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:26:48 2025 by rpki-client