Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/4yVfbPp7Kc9NuATQt83mDowSAbk.roa
File: 4yVfbPp7Kc9NuATQt83mDowSAbk.roa (raw, json)
Hash identifier: oVMLgI9gnFWm6sLHQJh/DJbcsXawxYeL22XappmRMCM=
Subject key identifier: E3:25:5F:6C:FA:7B:29:CF:4D:B8:04:D0:B7:CD:E6:0E:8C:12:01:B9
Certificate issuer: /CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Certificate serial: 01856E5D78FE1AE66DE3C2FE8F43B95D9AEC
Authority key identifier: DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/4yVfbPp7Kc9NuATQt83mDowSAbk.roa
Signing time: Sun 01 Jan 2023 17:24:57 +0000
ROA not before: Sun 01 Jan 2023 17:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42675
IP address blocks: 45.15.16.0/24 maxlen: 24
62.204.40.0/24 maxlen: 24
2a0e:1c80:8::/48 maxlen: 48
2a0e:1c80:6::/48 maxlen: 48
2a0e:1c80:1::/48 maxlen: 48
2a0e:1c80:f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:78:fe:1a:e6:6d:e3:c2:fe:8f:43:b9:5d:9a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Validity
Not Before: Jan 1 17:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3255f6cfa7b29cf4db804d0b7cde60e8c1201b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f0:b3:2b:08:5b:da:32:1a:67:59:48:f3:54:
da:c7:9e:50:fc:48:9b:5a:89:b3:fd:a4:03:89:5f:
e7:8a:d0:57:89:52:8a:f2:1a:1c:84:ef:00:f7:19:
21:71:f5:63:8f:40:18:ce:63:e6:28:cb:27:47:3b:
d1:a4:6b:25:c4:42:ff:b7:58:b3:0c:6e:e4:83:72:
2f:17:53:d1:dc:e9:ce:08:b7:eb:1a:41:e9:dd:31:
5a:49:dd:8e:62:e7:b4:cb:f2:fe:89:d5:52:58:1b:
5f:7e:64:b0:c1:9f:dc:f8:19:5a:b9:8a:10:3b:5f:
ab:cb:47:32:cf:83:63:9f:39:c2:e4:23:36:9f:43:
28:2f:5e:be:06:c2:ab:2e:64:f6:56:d5:d9:3a:57:
50:04:b4:b4:6a:0a:95:96:1a:09:f8:e5:a8:d3:90:
d5:56:c2:30:aa:14:41:51:cf:b5:aa:ec:87:ce:35:
eb:ac:3d:5c:00:c5:ca:7c:f4:aa:93:02:42:4d:1e:
47:d8:b9:fe:cc:34:24:b5:47:07:ed:f6:fd:de:6f:
9c:37:ff:00:a7:35:ce:32:ac:87:9a:c0:c0:29:ab:
21:04:28:c4:9d:c0:c2:ba:f4:5f:4b:13:dc:78:7f:
d8:82:5d:08:30:87:9d:95:bb:1d:e2:e5:6d:24:e4:
cf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:25:5F:6C:FA:7B:29:CF:4D:B8:04:D0:B7:CD:E6:0E:8C:12:01:B9
X509v3 Authority Key Identifier:
keyid:DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/4yVfbPp7Kc9NuATQt83mDowSAbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.16.0/24
62.204.40.0/24
IPv6:
2a0e:1c80:1::/48
2a0e:1c80:6::/48
2a0e:1c80:8::/48
2a0e:1c80:f::/48
Signature Algorithm: sha256WithRSAEncryption
89:03:0c:79:cd:ed:6d:c1:7e:54:81:52:fa:bf:59:b4:83:1d:
28:8a:16:e0:09:b8:ce:69:24:5c:88:63:fa:3a:ad:e2:0a:28:
5b:d0:48:3c:54:c0:ac:0b:76:13:3c:b9:16:65:6d:e2:e6:cf:
b3:52:55:d4:7f:12:e7:b9:c4:da:c0:6b:6e:ed:ec:e7:21:d5:
18:48:60:a6:f3:e1:3f:25:12:c2:a4:61:8c:54:83:15:60:b7:
d4:22:29:fe:79:22:c3:b8:f9:bf:54:4d:3f:80:32:eb:28:bb:
41:59:36:82:fc:28:5a:27:71:b3:84:e4:21:7d:bd:bc:19:43:
75:4b:da:2f:1a:73:5a:f0:28:58:95:f1:c0:ba:53:1f:21:9f:
19:2b:33:20:05:f5:26:9f:eb:6f:25:ea:23:5d:d8:ce:06:a8:
37:57:e6:99:d3:81:92:56:6a:42:4c:c9:36:d2:61:83:ff:27:
dc:b4:31:31:09:d5:d9:93:89:70:f3:9b:e8:87:18:65:25:87:
3a:88:43:49:6c:a2:7f:48:a9:3e:46:63:42:3e:09:fe:34:b8:
e2:46:da:5f:17:8c:01:74:0c:7b:96:41:ae:32:45:2d:94:98:
ab:ca:19:66:c9:f4:93:ac:35:a3:dc:af:53:56:d1:07:39:26:
de:51:5c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:27:33 2025 by rpki-client