Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/8pH2Kj7JdTUDyNsQSflcyU8KfKg.roa
File: 8pH2Kj7JdTUDyNsQSflcyU8KfKg.roa (raw, json)
Hash identifier: zwDU/jKNnBFtGNt7tHJBjkfOSMvDNIS5NSTqFRpcGt0=
Subject key identifier: F2:91:F6:2A:3E:C9:75:35:03:C8:DB:10:49:F9:5C:C9:4F:0A:7C:A8
Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial: 0194228E1E840F6D81B7923EF15E841DA3D8
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/8pH2Kj7JdTUDyNsQSflcyU8KfKg.roa
Signing time: Wed 01 Jan 2025 15:48:46 +0000
ROA not before: Wed 01 Jan 2025 15:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208123
IP address blocks: 45.159.40.0/22 maxlen: 22
2a0f:6e80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:1e:84:0f:6d:81:b7:92:3e:f1:5e:84:1d:a3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
Validity
Not Before: Jan 1 15:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f291f62a3ec9753503c8db1049f95cc94f0a7ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b0:22:7a:17:0a:7c:5c:d2:e3:ca:99:3e:ba:
a0:d0:88:7c:61:b6:09:0b:28:b8:07:e2:c0:81:7f:
cb:3a:d1:40:0f:d1:e3:5a:4f:93:f8:41:3b:59:a7:
7f:53:33:db:8b:77:8a:53:a5:ee:ff:ac:89:3f:96:
6f:3c:ad:72:d1:f8:4f:b2:be:c2:1d:c2:17:2c:d6:
63:3c:0a:07:93:25:c4:9a:45:b4:4f:7a:46:fd:b5:
c3:86:7f:8a:52:e1:ae:56:ac:1a:ad:a3:ad:67:58:
fb:cc:a2:a7:33:2b:de:a9:10:d6:b4:f4:9d:e2:21:
e9:a4:09:76:4b:7b:3f:e2:e9:f2:11:42:f9:3c:30:
4f:1e:ef:71:22:01:aa:a4:04:b1:b6:b6:d4:15:03:
8a:df:b4:70:ef:bb:67:4c:ac:fb:72:20:23:0f:7f:
ff:1a:40:17:68:b6:59:5c:4e:d4:92:00:fb:6e:d6:
10:f2:d8:3e:a5:23:6b:0b:07:b8:fe:21:1b:f1:2f:
59:7d:3f:f5:a4:47:62:9d:53:a1:ea:31:d8:e8:46:
cd:bb:5f:13:39:d6:89:09:25:f1:20:28:ef:f9:6e:
52:07:e3:15:72:7b:09:de:1c:db:ae:50:02:68:3f:
73:c4:8b:80:f3:97:73:f5:fd:b0:81:8b:12:2a:ae:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:91:F6:2A:3E:C9:75:35:03:C8:DB:10:49:F9:5C:C9:4F:0A:7C:A8
X509v3 Authority Key Identifier:
keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/8pH2Kj7JdTUDyNsQSflcyU8KfKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.40.0/22
IPv6:
2a0f:6e80::/32
Signature Algorithm: sha256WithRSAEncryption
00:f3:34:e0:31:48:0f:1f:e5:b2:55:0d:bd:34:20:7f:d7:5c:
5e:62:42:d1:7b:f9:1a:7a:e9:ea:f3:d9:c5:ef:3e:23:52:da:
5e:c4:a1:de:ef:1e:27:d6:49:8c:db:be:88:ed:46:9f:26:a0:
08:7a:8e:3d:c9:8a:af:05:14:a8:0c:91:16:8e:b6:9d:8d:04:
c9:6c:78:53:d1:9d:2f:61:68:63:25:b3:87:ef:be:0b:7f:35:
9f:bc:ef:33:e8:dc:4d:5d:d2:e6:01:4d:73:b7:bb:1f:5a:c7:
14:89:a6:a2:3d:5c:38:84:38:f5:f7:ae:d0:f7:54:b0:33:67:
80:aa:e4:24:bf:4a:5e:09:bd:e2:1b:a5:3f:cb:b7:6b:94:0b:
9e:34:38:90:99:4c:ee:e4:99:61:83:6c:aa:fd:6d:e6:5e:89:
25:73:84:25:b3:a7:44:56:77:e8:00:48:e0:56:95:0f:4f:fe:
b4:f0:10:b6:b1:fb:29:5f:76:e1:0c:d9:11:ec:97:b3:b3:1e:
12:5f:5e:45:e1:63:43:f9:4d:59:02:98:75:79:6f:9a:73:c3:
23:e3:bf:8a:de:c4:64:ac:04:af:0b:a3:2a:6b:f0:1f:d1:79:
8e:57:0c:29:a6:26:0d:c9:f7:de:e5:17:5e:5e:4d:ec:13:dd:
c7:56:82:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:23:18 2025 by rpki-client