Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/f4A325yGj48RuMfkjcKdx35IWgg.roa
File: f4A325yGj48RuMfkjcKdx35IWgg.roa (raw, json)
Hash identifier: j8y8oC78Ayis+Zl1DL+FUWPv5N+us3D0FIOg/cZJpDI=
Subject key identifier: 7F:80:37:DB:9C:86:8F:8F:11:B8:C7:E4:8D:C2:9D:C7:7E:48:5A:08
Certificate issuer: /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Certificate serial: 019427B640C837C0E75F00322E0338E96355
Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/f4A325yGj48RuMfkjcKdx35IWgg.roa
Signing time: Thu 02 Jan 2025 15:50:43 +0000
ROA not before: Thu 02 Jan 2025 15:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206341
IP address blocks: 45.82.172.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:40:c8:37:c0:e7:5f:00:32:2e:03:38:e9:63:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Validity
Not Before: Jan 2 15:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f8037db9c868f8f11b8c7e48dc29dc77e485a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9d:00:50:d2:92:6d:40:f2:fa:52:b2:c3:03:
3f:88:58:af:d4:2a:c0:47:ad:25:33:b7:9d:81:a2:
12:fe:78:0d:9f:1f:95:22:62:a0:8a:6f:1f:0e:6b:
f8:5b:0a:3a:d3:c8:f1:d7:db:7f:c4:2a:36:2a:ec:
18:2f:1a:29:a0:27:e6:ab:31:4f:68:07:5d:df:4c:
c6:b6:a6:22:0b:24:08:7d:8e:9e:fe:8a:23:63:51:
b4:b7:06:9f:4d:f2:73:5f:bf:35:e5:a7:a2:ae:5a:
b7:db:85:c1:84:d0:f0:69:05:22:28:c8:2f:db:38:
c7:7b:0d:b5:76:cd:d3:b9:f6:54:45:06:4f:2f:c3:
a1:db:1d:4c:b0:29:cc:ee:b8:fa:69:a8:fb:31:97:
1c:c3:4a:f4:7a:8b:31:7c:e4:61:e6:03:69:6d:04:
c3:ce:aa:bb:a8:2b:be:ad:87:f9:52:a5:b1:e6:6d:
98:3d:d5:03:15:b3:44:1c:0c:dd:eb:42:19:f5:23:
ab:37:0a:39:c5:31:08:7e:20:66:a2:6a:ce:27:60:
f9:14:82:91:31:bf:b3:54:78:c4:39:e1:0d:bd:e8:
22:54:5d:d7:5c:1e:33:55:69:b9:e0:0c:f3:80:cc:
f7:75:6a:4e:5c:d2:d3:c5:1a:bc:71:b2:41:43:7b:
77:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:80:37:DB:9C:86:8F:8F:11:B8:C7:E4:8D:C2:9D:C7:7E:48:5A:08
X509v3 Authority Key Identifier:
keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/f4A325yGj48RuMfkjcKdx35IWgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.172.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:9c:c9:38:6c:8d:0c:79:e9:3b:8a:44:b8:90:4e:bd:cc:e5:
2a:e7:b0:24:11:ea:7a:70:83:3e:b1:81:f1:cc:ed:bd:87:8e:
1d:83:ff:95:3b:da:35:c8:aa:22:f9:3f:cf:85:62:e2:59:4c:
3c:48:96:63:20:3e:df:24:67:42:f3:58:fc:86:b8:47:c4:62:
c8:85:73:68:2d:0f:7e:6a:be:2b:bd:fb:8e:00:b6:fe:3b:3a:
38:fe:54:e3:9c:d1:b3:4c:cb:e7:77:b6:13:8a:74:e7:6c:4d:
a8:7f:ae:b8:75:12:30:b0:fe:15:aa:37:0c:2b:49:76:9d:11:
44:ce:67:92:ac:fd:98:fe:43:cf:dd:e1:45:a2:48:29:2c:70:
27:91:2a:9f:f7:37:60:6f:cd:15:0f:ee:fc:60:4a:37:4c:c6:
c1:85:97:82:52:67:bc:af:4b:6e:33:95:0c:19:00:4d:08:9c:
32:24:cf:85:b3:bb:7d:dd:7b:c6:13:5d:11:3f:c5:1e:92:43:
6e:24:36:51:fa:6c:05:52:1e:b6:7d:ee:2d:26:3b:8d:f2:6d:
b5:79:bc:6c:89:8a:4a:57:b3:6e:da:2a:dd:3a:38:28:8b:97:
55:d1:3b:cf:1c:c3:c5:03:9b:2a:b6:12:fd:8e:bd:f1:ba:04:
15:42:00:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:03 2025 by rpki-client