Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/Vfu8orab-u2hq4PDCFONf8-ELfY.roa
File: Vfu8orab-u2hq4PDCFONf8-ELfY.roa (raw, json)
Hash identifier: 4g53e8SQJ6evWk5P2AQfilbVciXTa/dqHlUA6U7ixfc=
Subject key identifier: 55:FB:BC:A2:B6:9B:FA:ED:A1:AB:83:C3:08:53:8D:7F:CF:84:2D:F6
Certificate issuer: /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial: 019427B50A58A33060CB584D750F950D285C
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/Vfu8orab-u2hq4PDCFONf8-ELfY.roa
Signing time: Thu 02 Jan 2025 15:49:23 +0000
ROA not before: Thu 02 Jan 2025 15:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204451
IP address blocks: 45.14.173.0/24 maxlen: 24
45.14.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:0a:58:a3:30:60:cb:58:4d:75:0f:95:0d:28:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Validity
Not Before: Jan 2 15:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55fbbca2b69bfaeda1ab83c308538d7fcf842df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:63:d5:30:48:31:1c:8b:37:fc:dd:3e:c1:
df:06:6b:a2:3f:b0:5e:c7:fe:85:7b:5b:ea:fe:7b:
d5:9c:5d:7f:21:7e:f4:9e:77:e7:4e:56:c4:e9:b9:
66:53:a5:ff:4a:a5:6b:0e:84:17:5c:35:f2:17:92:
3c:4f:46:77:f9:f5:8b:5b:7f:f1:c3:b2:7c:4c:2f:
eb:cd:98:b5:66:10:e2:d3:b3:0f:09:a4:2e:b9:9f:
f9:9c:50:ae:08:db:68:98:83:d0:24:f8:11:42:9d:
c3:7a:78:60:62:8c:12:75:e5:d0:b2:a8:f7:bb:83:
46:04:c0:fd:5d:c1:95:ee:c8:b7:d0:d0:95:ae:24:
f5:48:12:be:7d:c7:ae:df:17:c5:4f:32:82:d3:93:
a9:8c:24:0b:e4:26:d5:e0:27:85:fd:b6:53:ff:b1:
28:39:3f:fc:fa:a7:96:13:d1:1e:92:3f:f9:19:f3:
67:61:4c:9a:9c:f3:15:3c:a5:77:9b:70:ef:9e:15:
2c:4d:26:fd:d6:a8:7f:f5:77:3a:6f:6a:0e:58:d9:
cf:4e:7a:c9:ec:4e:d6:28:ca:fe:f3:1b:52:3b:f2:
37:6a:3b:bd:f4:84:7e:81:76:d4:76:38:53:96:dd:
2d:35:3b:05:c0:25:ba:b5:3c:7b:a9:13:58:89:1f:
2d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FB:BC:A2:B6:9B:FA:ED:A1:AB:83:C3:08:53:8D:7F:CF:84:2D:F6
X509v3 Authority Key Identifier:
keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/Vfu8orab-u2hq4PDCFONf8-ELfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.173.0/24
45.14.175.0/24
Signature Algorithm: sha256WithRSAEncryption
88:19:a4:76:93:75:33:ee:22:30:20:93:12:bf:d3:92:aa:00:
3a:cc:8a:47:a7:eb:97:c9:2b:d6:9f:9b:a0:24:34:bf:fd:33:
48:a0:cb:75:cb:7e:8d:70:56:47:76:89:d7:4a:7a:b6:92:40:
40:82:33:b2:4f:91:3b:e6:73:74:9c:34:c8:46:a0:22:aa:03:
c2:be:bf:d0:62:3d:a8:29:d7:9b:5f:7f:12:98:85:54:42:3f:
1a:c6:56:a4:64:f9:43:bf:17:d1:98:c2:65:fc:7d:29:32:42:
6e:87:b8:a3:21:ed:dc:b0:cc:57:88:06:ad:1d:ee:fb:94:1a:
7b:c8:bf:ad:04:10:c9:36:a5:c0:d1:71:fc:9b:1c:35:87:4a:
c3:c6:b9:0c:1e:5c:5e:d9:0a:36:de:03:f7:c6:d1:fd:a2:a4:
95:d7:e0:44:c0:78:da:41:d5:0b:a6:17:1e:15:1f:2b:55:c1:
a5:94:7a:60:5d:d6:4a:70:ac:6f:7f:c2:c8:8b:99:f6:26:70:
c7:68:c1:c9:9c:50:6c:29:f3:1f:35:81:1e:ce:25:d0:6d:96:
1a:59:ec:4a:a5:49:1d:5b:c4:c9:77:af:41:e3:c8:c5:fa:7b:
a0:84:4b:9e:8a:7a:3d:84:b2:94:bb:7b:e9:d9:40:31:03:4d:
31:03:6b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:10:35 2025 by rpki-client