Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/747xis10vgD7ULevX_Loj3frKXo.roa
File: 747xis10vgD7ULevX_Loj3frKXo.roa (raw, json)
Hash identifier: mQ6BJtUBaEnwSVMRT0K0Db6FrurhFP+HbT6xcILYMac=
Subject key identifier: EF:8E:F1:8A:CD:74:BE:00:FB:50:B7:AF:5F:F2:E8:8F:77:EB:29:7A
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD2B81696473D82B1866A53140F52A
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/747xis10vgD7ULevX_Loj3frKXo.roa
Signing time: Thu 02 Jan 2025 07:48:56 +0000
ROA not before: Thu 02 Jan 2025 07:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210715
IP address blocks: 45.43.163.0/24 maxlen: 24
216.173.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:2b:81:69:64:73:d8:2b:18:66:a5:31:40:f5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef8ef18acd74be00fb50b7af5ff2e88f77eb297a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:41:2b:b6:28:00:29:57:a1:5c:04:98:f3:dd:
49:11:0f:86:8e:dd:7e:77:2f:2c:64:76:6a:25:1a:
ac:31:93:c4:c0:7e:10:17:36:98:dd:e3:33:25:33:
f8:2f:9f:f2:e7:7e:dc:8d:88:69:a1:07:aa:c0:e1:
be:cb:a0:b4:45:e9:01:db:76:9e:10:ed:95:0d:02:
0f:2f:3f:79:a6:08:d2:d7:32:f8:6b:a0:2f:b7:0c:
be:4d:eb:8f:8e:ac:04:01:99:a1:7d:a7:a2:4e:62:
64:de:2f:53:db:13:12:31:40:70:b8:cc:70:3e:dc:
f1:81:54:a1:50:41:17:e4:05:79:04:e1:74:0a:ff:
c5:90:9b:5e:79:27:fc:22:ac:0e:b9:e5:ae:c0:f3:
e8:33:50:59:84:d7:ba:4d:fc:a9:23:00:a0:28:38:
0c:e9:23:23:7f:13:e9:fb:6e:56:70:f1:ef:d2:45:
34:01:0a:f5:ab:af:d0:4f:2f:62:04:9b:3d:77:97:
70:be:f5:12:73:bf:41:5e:57:cf:4b:8f:a5:d4:10:
07:3c:d7:6b:96:ee:5e:7d:14:25:c8:ae:2f:40:e1:
cf:b9:ba:e7:15:5e:79:20:5f:c2:f7:d1:56:08:2f:
8c:83:8f:25:2b:e0:3b:06:da:fb:64:c0:b3:a8:41:
4b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8E:F1:8A:CD:74:BE:00:FB:50:B7:AF:5F:F2:E8:8F:77:EB:29:7A
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/747xis10vgD7ULevX_Loj3frKXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.163.0/24
216.173.77.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:6e:c8:24:93:09:c1:d5:de:fb:17:66:09:1f:30:8b:27:4f:
b4:67:1a:7b:3c:a4:85:b7:08:f5:63:aa:b1:3f:42:df:d0:75:
e0:38:4a:fb:38:2a:83:13:80:ae:eb:a2:20:2a:a3:f2:98:32:
99:d7:43:8e:69:6d:ed:2c:6a:bd:93:a1:81:d8:bb:11:2b:41:
ce:65:60:fa:e4:c5:fa:0b:e9:d5:3f:d1:be:e3:e0:fc:8c:13:
4c:6c:f8:d4:18:cc:0e:7a:03:b6:da:ad:96:85:c6:56:31:fa:
ce:0b:f7:45:24:92:70:fb:2f:f4:6d:8f:74:e6:18:45:97:96:
0f:61:a1:06:a3:df:8e:82:00:73:3b:de:50:09:34:df:f7:73:
d7:ce:c2:df:89:a8:c6:4f:f5:71:9c:89:a3:4f:5b:15:f3:34:
17:f0:17:9b:50:7b:51:83:b4:94:fd:f0:e6:dc:92:6b:15:23:
39:9d:2d:7b:6c:74:75:eb:ba:aa:3f:32:1c:f9:d6:06:b5:15:
21:43:f3:7a:97:55:5a:2f:d9:1a:5f:25:b1:c5:69:1e:b4:37:
29:b8:4a:69:8d:fa:23:26:5c:17:a5:f8:db:95:2a:2c:7e:5b:
d1:2f:04:d3:85:65:5b:b8:41:4b:ac:3d:e8:a4:c9:01:a8:fd:
94:9a:48:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:15 2025 by rpki-client