Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/_Hfi64A6Hl1aWvf9UFKs9bEjNC0.roa
File: _Hfi64A6Hl1aWvf9UFKs9bEjNC0.roa (raw, json)
Hash identifier: nJS1uo48whuK1gGV1XTB4odY1z3nztNhEHWCw4wMlx8=
Subject key identifier: FC:77:E2:EB:80:3A:1E:5D:5A:5A:F7:FD:50:52:AC:F5:B1:23:34:2D
Certificate issuer: /CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Certificate serial: 0194228DA749CCD922D93796DA86F49D6F4D
Authority key identifier: FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/_Hfi64A6Hl1aWvf9UFKs9bEjNC0.roa
Signing time: Wed 01 Jan 2025 15:48:16 +0000
ROA not before: Wed 01 Jan 2025 15:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21339
IP address blocks: 45.143.120.0/23 maxlen: 24
45.143.122.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:a7:49:cc:d9:22:d9:37:96:da:86:f4:9d:6f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Validity
Not Before: Jan 1 15:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc77e2eb803a1e5d5a5af7fd5052acf5b123342d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:eb:4e:f1:97:73:1d:34:e2:5a:c2:3a:9f:24:
33:a7:08:7a:9f:2c:c7:7e:72:87:51:d0:47:94:59:
85:91:78:da:9a:e0:ee:09:5e:cb:78:91:ec:13:71:
c2:98:5d:43:fd:2e:6f:00:f2:6f:52:44:ff:aa:99:
08:ff:ae:d9:56:4c:f4:f8:5e:bc:ba:ab:bd:ca:1a:
46:d6:5d:60:58:e1:12:f8:70:8d:d8:fb:23:9f:cc:
93:cd:d9:b9:65:30:c5:fd:25:da:27:b3:cc:8e:3a:
c4:55:57:c2:4a:df:55:23:3f:e1:38:49:ce:c7:c5:
c8:ad:41:09:10:33:97:9f:f0:f0:40:5b:c4:2d:5a:
fb:15:3d:9c:fc:b0:96:77:e6:e4:46:86:90:e3:29:
74:a5:0a:07:41:c7:5a:35:28:ac:b2:5b:6d:be:2e:
7b:1f:80:dd:05:d5:81:a0:fb:82:16:f2:24:c3:38:
b7:d9:a6:5a:28:51:41:5b:21:8a:b5:91:5d:00:4c:
a1:a2:f2:f1:66:32:48:e7:77:0f:af:0b:8e:72:08:
38:e8:41:7e:93:f6:7b:20:d2:fe:bf:53:a8:a3:32:
7e:11:10:40:aa:5e:0a:73:82:e7:7f:8b:35:c0:3f:
2f:ba:00:a0:27:df:d2:3e:ba:df:c4:44:93:f1:e6:
5e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:77:E2:EB:80:3A:1E:5D:5A:5A:F7:FD:50:52:AC:F5:B1:23:34:2D
X509v3 Authority Key Identifier:
keyid:FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/_Hfi64A6Hl1aWvf9UFKs9bEjNC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.120.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:e9:b6:d3:2f:1b:51:11:68:c0:d0:85:4a:b2:6e:fb:b0:87:
90:06:0f:05:c1:b6:19:04:a2:d8:14:59:f9:8b:b0:db:72:7b:
c8:99:37:3b:9c:1c:4a:37:87:33:f0:23:9e:31:61:2a:71:3d:
34:60:69:74:d7:44:cb:e0:6f:be:9a:24:25:1a:26:6d:4c:3b:
18:52:26:35:50:a1:1a:4a:d4:2b:f0:e2:c5:43:3a:94:12:df:
79:9b:99:df:db:b3:3d:49:1c:8a:b5:4c:3b:61:15:26:28:89:
15:76:fb:de:b0:6b:58:e6:38:1d:ed:df:23:32:28:75:48:d7:
c8:cc:81:88:70:68:82:c9:de:d8:81:1d:eb:c3:65:09:17:d4:
7a:dc:9c:3e:7a:3b:b6:66:89:f8:d4:06:c6:d3:1c:aa:cf:7a:
a6:e2:ae:73:0c:85:f7:40:0b:b7:8a:18:a7:7d:de:29:3c:1a:
d3:3d:13:a7:72:4d:71:7a:aa:c2:84:43:9b:29:58:48:89:4d:
52:2c:ea:b9:d8:4f:e3:1d:6c:d3:c8:83:a2:0b:b7:7f:eb:68:
f9:1b:ae:f3:e9:2d:50:cf:46:da:29:6c:01:12:bb:a6:a3:48:
22:ac:89:0f:f8:c3:6a:cd:c3:71:12:b7:4d:6d:0f:1a:58:f5:
a8:67:ca:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:58 2025 by rpki-client