Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/8JVtNiH742v8cd9f6HB8HsLnHqc.roa
File: 8JVtNiH742v8cd9f6HB8HsLnHqc.roa (raw, json)
Hash identifier: en+F0ICvUKwr0qrq9ILAxUcATJZUAoxaoEpiR8+7A9M=
Subject key identifier: F0:95:6D:36:21:FB:E3:6B:FC:71:DF:5F:E8:70:7C:1E:C2:E7:1E:A7
Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Certificate serial: 0194258FCDCF58E9A39EB2F03776F13DDCB2
Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/8JVtNiH742v8cd9f6HB8HsLnHqc.roa
Signing time: Thu 02 Jan 2025 05:49:28 +0000
ROA not before: Thu 02 Jan 2025 05:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211858
IP address blocks: 45.67.82.0/24 maxlen: 24
2a10:c704::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:cd:cf:58:e9:a3:9e:b2:f0:37:76:f1:3d:dc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Validity
Not Before: Jan 2 05:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0956d3621fbe36bfc71df5fe8707c1ec2e71ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:53:cc:b0:68:3f:7f:2e:73:5c:b7:0a:43:
73:c0:c2:ca:f6:de:f2:04:b0:5a:57:65:7b:78:e1:
44:c8:e7:2e:9c:9a:d0:88:f0:15:c7:c8:5b:cc:0b:
e1:91:ec:4c:96:e5:f1:0a:ba:3f:7e:fd:28:65:42:
ed:ef:04:3b:14:b7:b4:ba:7c:01:a0:5b:c9:26:32:
48:1c:08:06:20:e0:85:1d:e0:9d:0f:48:f5:de:e2:
41:4a:7e:92:cc:de:f8:bd:a9:88:44:af:c3:98:22:
87:e0:6c:87:90:7f:2a:4d:ea:b0:ad:25:71:bf:86:
16:d2:28:df:36:f5:ea:54:b1:6f:a6:69:0a:57:a8:
dd:9c:c7:e7:e1:e6:28:f1:bb:6a:25:ad:aa:91:aa:
d8:ae:2e:60:ff:fd:e0:be:bb:58:72:1c:0e:b1:32:
6d:f4:f5:03:c4:a7:f6:90:02:94:ab:59:95:60:03:
89:0e:a9:55:47:4d:f3:2e:12:77:b4:12:c6:f6:91:
fa:b8:d6:a6:8a:00:8d:4d:74:62:a6:c4:e7:2b:56:
6c:54:05:4a:84:a7:45:1c:cb:a2:e9:96:87:cc:14:
e6:a9:2f:e8:b0:4a:a0:ef:65:fa:76:b9:b9:eb:ea:
10:7b:98:e5:1d:92:95:c3:67:19:d3:91:b3:36:ae:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:95:6D:36:21:FB:E3:6B:FC:71:DF:5F:E8:70:7C:1E:C2:E7:1E:A7
X509v3 Authority Key Identifier:
keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/8JVtNiH742v8cd9f6HB8HsLnHqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.82.0/24
IPv6:
2a10:c704::/32
Signature Algorithm: sha256WithRSAEncryption
72:2a:7f:20:9a:4e:f5:88:37:a4:34:2e:0b:9c:b6:a4:c4:d6:
66:e7:5d:26:82:1a:3d:73:19:c6:1c:9c:44:29:3a:e8:a2:7e:
18:04:c7:e4:20:3e:9f:13:98:1e:a3:d5:dc:18:94:a8:85:8e:
d0:19:a4:74:3b:c6:2d:2b:e0:a3:69:cc:94:67:32:89:7f:d4:
97:03:07:5d:7f:c4:a7:dd:1c:57:e3:9b:6d:ea:31:64:6c:73:
8d:1c:94:0d:a2:ad:2d:1b:02:a1:35:b2:02:b8:f3:9e:47:8a:
fd:36:1d:74:cd:74:3e:33:b0:be:53:3d:19:25:39:9a:d9:7d:
ff:c6:92:b1:45:0a:86:5a:73:4e:76:f6:d5:97:b3:47:3b:c6:
f9:1c:d8:7a:ad:1d:7f:42:01:4b:77:42:56:67:b9:11:34:58:
7e:82:68:d0:e7:68:67:56:c1:c0:22:14:7c:bc:80:c5:93:8f:
6c:9f:0a:99:0f:41:05:81:06:b5:2e:09:2a:af:a6:9c:b8:d3:
d4:e5:84:41:22:ff:68:9c:10:70:c4:70:1e:e1:30:55:e0:bb:
68:6c:8b:73:88:6d:86:55:03:04:84:9f:54:5b:d1:20:80:dd:
39:1a:a6:53:49:da:d5:7a:19:6a:e9:0e:93:32:12:c3:31:86:
c7:ec:b1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:10:16 2025 by rpki-client