Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/c4ZXKHEEWbDTWPlUmqmsKLah8L0.roa
File: c4ZXKHEEWbDTWPlUmqmsKLah8L0.roa (raw, json)
Hash identifier: F1WOSma/c9vioH3acUcPAtmz6J5nLcuBuR+41Bzl7HQ=
Subject key identifier: 73:86:57:28:71:04:59:B0:D3:58:F9:54:9A:A9:AC:28:B6:A1:F0:BD
Certificate issuer: /CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Certificate serial: 019423697E316B42B0378E78444B8BFEF5E2
Authority key identifier: FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/c4ZXKHEEWbDTWPlUmqmsKLah8L0.roa
Signing time: Wed 01 Jan 2025 19:48:23 +0000
ROA not before: Wed 01 Jan 2025 19:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35482
IP address blocks: 45.66.180.0/24 maxlen: 24
45.66.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:7e:31:6b:42:b0:37:8e:78:44:4b:8b:fe:f5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Validity
Not Before: Jan 1 19:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73865728710459b0d358f9549aa9ac28b6a1f0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:31:32:a5:ba:21:fe:46:a8:2c:ec:96:72:
5f:e6:8e:5b:cb:f4:c3:be:54:80:57:24:f1:87:ea:
d4:7a:d0:f2:25:9e:c6:89:c7:02:c8:f5:d7:4a:f9:
2e:3f:1c:2c:41:29:4d:94:5f:7b:be:8d:64:b0:cd:
66:3d:cd:2b:c4:b4:b6:a7:6b:25:8f:6f:1a:b8:64:
0c:55:2e:6b:39:42:85:23:92:bd:ed:d8:0d:2e:cf:
37:5e:40:76:63:14:0e:2c:49:11:70:c0:e3:1e:9f:
4b:2f:b1:5a:9e:4d:76:a8:18:fa:0d:7d:3d:02:a6:
e1:8e:c3:e2:6c:f2:40:1a:c3:7e:c1:a3:2d:93:b8:
97:70:1f:ab:b9:d3:9f:71:f8:e4:03:e3:ab:64:ff:
74:13:b5:9b:63:ea:c6:47:42:b1:e6:3c:e5:c8:85:
77:de:d9:dc:23:90:7c:88:c0:c4:4b:f8:39:e1:9a:
fe:75:a7:c0:92:c7:2f:9c:f3:4f:bb:38:2b:58:6d:
8e:a4:12:9d:a0:ab:e6:59:c0:f5:a5:d7:8b:40:cb:
b6:fe:d9:f2:ff:fa:71:91:f5:34:7c:b7:c1:9e:80:
0c:be:64:99:a5:2d:55:dd:69:47:cb:e6:1f:a8:5c:
bd:6e:d9:5c:e6:fd:74:bb:29:96:34:ba:7b:2c:12:
3b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:86:57:28:71:04:59:B0:D3:58:F9:54:9A:A9:AC:28:B6:A1:F0:BD
X509v3 Authority Key Identifier:
keyid:FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/c4ZXKHEEWbDTWPlUmqmsKLah8L0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.180.0/23
Signature Algorithm: sha256WithRSAEncryption
79:f0:58:8a:e6:71:06:95:bb:a0:02:b9:ce:d4:ac:d9:49:6d:
62:a9:03:c0:d0:f0:f1:40:e7:77:fc:a1:ca:45:89:00:f2:d1:
bc:fe:23:40:17:74:1c:5f:fe:db:81:f7:f8:52:cb:c5:87:78:
f5:cf:4a:82:c2:a4:0e:9f:d7:28:5a:9b:0c:ab:84:2c:46:87:
7a:7a:2a:ef:8c:d1:87:27:97:38:e3:5b:b6:64:f4:b6:12:7a:
82:8d:1b:fa:ea:31:85:0e:08:9c:96:c1:fa:bc:ec:cf:e4:af:
c8:d0:0c:4a:bb:66:a3:31:0d:3c:30:85:7e:ac:7d:14:3f:79:
bb:4e:ed:4d:3d:8b:73:f1:0f:3e:4b:b9:67:40:17:21:16:b1:
dd:69:31:6f:7a:f3:d3:18:83:c3:ed:77:70:39:ff:68:b9:6e:
76:51:de:e2:9d:da:a9:d4:23:1e:41:53:b1:9d:33:52:4d:2e:
58:75:7e:ee:e1:d7:8c:3e:2a:9e:d2:69:d9:eb:7a:24:81:eb:
e4:eb:ca:d4:ad:18:9e:af:01:64:62:63:b0:cd:64:2f:70:9e:
b8:de:4b:9d:83:f2:a9:1f:69:4d:0b:8c:d1:7d:af:3b:1d:3b:
f8:ac:78:93:66:4a:b2:5c:90:32:5e:b1:35:24:00:73:ee:9c:
4b:e8:f1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:17:39 2025 by rpki-client