Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/8jLs6VGmOeqUeiHElaeR3LqYElI.roa
File: 8jLs6VGmOeqUeiHElaeR3LqYElI.roa (raw, json)
Hash identifier: Atd4yjEwjoj5JGYuPikoIPA1A5Gpt38GxeMnhualwSA=
Subject key identifier: F2:32:EC:E9:51:A6:39:EA:94:7A:21:C4:95:A7:91:DC:BA:98:12:52
Certificate issuer: /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial: 019425221B110A0B5D71B8F16F2FA988F153
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/8jLs6VGmOeqUeiHElaeR3LqYElI.roa
Signing time: Thu 02 Jan 2025 03:49:39 +0000
ROA not before: Thu 02 Jan 2025 03:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57521
IP address blocks: 45.10.39.0/24 maxlen: 24
2a13:bc1::/32 maxlen: 48
2a13:bc2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1b:11:0a:0b:5d:71:b8:f1:6f:2f:a9:88:f1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
Validity
Not Before: Jan 2 03:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f232ece951a639ea947a21c495a791dcba981252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:bd:f4:fc:00:37:93:e6:f1:0e:9d:a1:f5:
40:af:e1:62:b5:d3:d0:eb:f8:d0:7b:c6:56:ea:99:
c5:04:59:2c:b1:eb:c8:1a:be:18:05:7a:96:4f:3e:
64:b3:e6:24:9f:6c:1e:b9:67:ab:3f:3c:c9:66:74:
06:ad:c3:5e:b2:74:ba:ad:ea:97:d6:30:bc:c6:d1:
8c:06:0d:db:1b:47:84:fe:89:35:9e:78:37:a8:cc:
46:47:67:35:52:1f:33:48:86:b7:99:05:89:54:99:
89:ae:12:d6:bf:12:72:15:a5:4a:54:84:08:ea:7b:
60:de:73:fe:04:88:3a:78:8a:22:64:b1:17:90:e1:
61:34:16:06:d4:50:6e:2c:b0:c4:b0:57:7f:1f:ee:
b1:d4:eb:5e:34:ab:76:53:7f:ea:fd:3d:31:7c:ab:
d2:fb:ba:ad:70:71:93:39:44:94:3d:37:79:0d:02:
d6:fc:47:be:d5:63:70:c4:51:65:26:c9:d0:28:f6:
05:ca:9a:9a:6a:14:c8:95:58:eb:ca:95:f3:eb:ad:
1e:82:5d:e1:e6:fc:5f:ce:30:e4:d7:11:f4:0e:11:
3d:99:52:74:15:19:a7:02:7e:4f:8d:a7:98:bf:99:
c7:a9:78:0f:22:4a:db:b0:f1:46:b1:1d:5c:23:c0:
3d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:32:EC:E9:51:A6:39:EA:94:7A:21:C4:95:A7:91:DC:BA:98:12:52
X509v3 Authority Key Identifier:
keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/8jLs6VGmOeqUeiHElaeR3LqYElI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.39.0/24
IPv6:
2a13:bc1::-2a13:bc2:0:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
23:7f:88:a9:83:34:ca:e0:d4:22:eb:45:cc:a8:a6:d8:6b:fa:
22:d8:c1:93:6a:ab:96:ad:05:50:d8:1c:92:86:9b:21:83:f8:
77:36:55:87:94:18:0b:2f:24:a8:fa:45:96:fc:3c:83:ff:bc:
5d:e7:d2:1f:c5:34:99:c8:6a:59:60:5b:ad:5b:43:d7:71:a5:
b1:93:ce:20:5a:84:9b:36:d4:a9:b9:ac:05:08:08:1a:cf:dd:
b9:49:61:39:f2:d2:cc:56:be:3c:40:36:9d:37:84:bb:72:48:
e4:8d:e4:b6:b5:7e:28:95:a0:17:27:c7:94:1d:0b:bf:6f:18:
6e:a9:b5:0e:45:3c:3d:bf:b6:f5:3d:50:a5:31:dd:a9:2c:ee:
b0:b2:02:57:8c:e3:f7:05:4f:07:1f:92:6b:c8:b8:66:2a:e4:
4c:8e:f3:ce:50:71:3c:e1:a4:13:ee:26:68:70:62:db:4d:90:
be:a2:05:3f:09:86:94:58:4f:c3:a0:ea:65:d4:31:7a:e3:ca:
c4:4a:87:b3:5e:90:a6:1c:f7:51:c1:7a:15:5c:62:21:d8:3f:
cf:f4:fa:c9:9b:f7:8e:17:be:06:60:78:fc:94:72:26:1d:ed:
e3:28:2e:06:4e:cd:56:ca:98:78:ad:d4:fe:87:11:f2:ef:e6:
f8:58:22:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:30:57 2025 by rpki-client