Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/kSz4LlQ62tJYPQQ8qxacl2uxsCY.roa
File: kSz4LlQ62tJYPQQ8qxacl2uxsCY.roa (raw, json)
Hash identifier: 8GdPcvKpfPL7jxJZaxJa9Y6MJqoF7wYY1b8gzsfXwWY=
Subject key identifier: 91:2C:F8:2E:54:3A:DA:D2:58:3D:04:3C:AB:16:9C:97:6B:B1:B0:26
Certificate issuer: /CN=02558509e1c0ec160de2e074177213de30615d6f
Certificate serial: 0194221F73A630415FFAA55260EEEDA00D82
Authority key identifier: 02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/kSz4LlQ62tJYPQQ8qxacl2uxsCY.roa
Signing time: Wed 01 Jan 2025 13:47:54 +0000
ROA not before: Wed 01 Jan 2025 13:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50474
IP address blocks: 45.143.168.0/24 maxlen: 24
45.143.169.0/24 maxlen: 24
45.143.170.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:73:a6:30:41:5f:fa:a5:52:60:ee:ed:a0:0d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02558509e1c0ec160de2e074177213de30615d6f
Validity
Not Before: Jan 1 13:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=912cf82e543adad2583d043cab169c976bb1b026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:59:0e:1e:d9:03:c8:81:da:4b:06:50:5a:43:
ef:21:1b:ce:6f:a4:5e:89:c1:0f:b1:37:54:4c:e0:
fe:42:f3:aa:6b:7c:b4:ed:a0:79:d2:e4:fb:96:55:
88:ef:be:40:1b:ff:34:79:e3:36:f4:4c:c7:f5:77:
af:42:52:03:3d:64:6b:a9:7a:c9:25:e2:2a:f7:23:
09:8b:cf:3e:ab:49:89:9c:90:00:93:85:c3:b5:9d:
93:2d:77:64:47:e4:f4:c4:96:a4:33:40:d6:bf:c7:
44:69:84:74:98:e1:5a:e2:29:e4:83:a3:86:d8:dd:
15:d5:1e:ab:99:35:28:51:cf:96:16:21:66:c8:9b:
94:44:e2:b8:4a:28:44:67:f2:01:62:15:bc:5e:9f:
57:b6:85:3e:e8:f7:c3:57:2a:b2:4d:79:7e:17:0a:
cd:2e:b4:f4:d2:fe:74:37:ea:78:10:36:7e:1d:8d:
a6:af:be:44:77:3e:22:a6:8a:5e:51:01:c2:f3:6b:
4e:ee:02:8e:d3:30:76:00:89:10:75:82:cc:cf:35:
eb:65:a5:55:65:02:e7:18:1a:02:64:87:75:05:15:
11:10:2f:22:53:46:4b:91:b5:6f:d2:43:8b:e4:68:
7f:1f:4e:9b:7c:4e:a9:9a:60:35:b0:fb:b1:4c:f6:
21:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2C:F8:2E:54:3A:DA:D2:58:3D:04:3C:AB:16:9C:97:6B:B1:B0:26
X509v3 Authority Key Identifier:
keyid:02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/kSz4LlQ62tJYPQQ8qxacl2uxsCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.168.0/22
Signature Algorithm: sha256WithRSAEncryption
38:41:ac:8f:08:fb:32:e1:80:fb:f2:0b:05:85:14:c3:61:14:
7c:a3:28:c4:42:9b:73:aa:b9:f6:c9:8f:2d:f6:e7:a9:f7:bf:
6c:d5:11:9e:14:c4:29:da:d8:7f:eb:83:20:ca:79:a5:34:87:
1b:c2:fc:f7:54:a9:78:4b:96:97:59:9e:e2:0c:d5:94:fc:d1:
bb:fa:fb:8d:49:d6:d8:f6:d5:11:2a:e4:b7:5d:8b:92:a5:47:
bf:13:15:1c:e8:73:6f:13:42:0f:5a:3c:d0:dd:58:d8:f0:9b:
f3:31:d9:7d:b6:a8:c2:f1:14:08:0f:9d:e5:a4:4a:a4:43:64:
e6:06:a5:15:8d:c4:4b:d1:c2:86:18:c2:7d:13:aa:ec:7c:be:
2b:02:2d:c5:84:75:56:21:03:f6:42:fa:b0:98:17:0f:9d:a1:
34:4f:7b:7c:3f:d3:0b:5e:a7:bd:02:f1:1d:d6:1b:34:56:aa:
92:ca:e6:63:95:b1:61:9e:4b:d3:87:92:9d:4e:6d:98:d3:aa:
80:c1:b3:2e:63:21:d5:9c:7b:a3:68:ed:67:b9:9b:72:24:9a:
66:65:a9:bc:61:02:79:a4:fb:8f:01:16:8e:5b:b8:1d:63:dc:
dc:56:f6:1f:fb:78:7f:bd:b7:0a:a8:6c:0a:9e:35:68:6e:6f:
5f:e4:19:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:41:24 2025 by rpki-client