Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/eljfT3VERhsglqmtBFkdeQerU-4.roa
File: eljfT3VERhsglqmtBFkdeQerU-4.roa (raw, json)
Hash identifier: L6WpMEIGkJJJhNWe37NG87VgdsnzHnRSKOzlWOioEtE=
Subject key identifier: 7A:58:DF:4F:75:44:46:1B:20:96:A9:AD:04:59:1D:79:07:AB:53:EE
Certificate issuer: /CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Certificate serial: C616F7
Authority key identifier: DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/eljfT3VERhsglqmtBFkdeQerU-4.roa
Signing time: Sat 01 Jan 2022 13:07:40 +0000
ROA not before: Sat 01 Jan 2022 13:07:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42675
IP address blocks: 45.15.16.0/24 maxlen: 24
62.204.40.0/24 maxlen: 24
2a0e:1c80:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12982007 (0xc616f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Validity
Not Before: Jan 1 13:07:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a58df4f7544461b2096a9ad04591d7907ab53ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d0:f1:02:e2:3c:1e:c5:8d:6c:1e:0c:f6:e9:
05:a3:89:ee:b6:ce:c3:bb:49:89:0c:91:60:cc:25:
20:96:12:b0:d1:2d:3a:18:6a:69:9e:66:29:bd:df:
11:01:4f:ee:2d:d8:3b:1e:ad:cf:20:c6:3f:87:26:
18:d9:5b:cf:f3:4e:b4:7a:21:5a:e5:34:95:8f:af:
6b:88:c3:03:05:b2:a5:e1:01:03:a6:8d:ab:69:78:
6b:a7:17:6d:5f:f3:39:ee:2c:bc:4e:11:d4:47:0e:
31:01:65:cb:d8:be:f7:21:7c:9d:ed:80:56:b9:6c:
29:66:b2:f2:bc:92:26:b5:79:c2:95:62:23:07:d4:
31:e6:51:59:38:31:84:07:b6:08:64:dc:0a:bf:03:
e6:07:77:89:40:2d:ae:c8:9e:75:03:35:bf:dc:8e:
78:ee:00:69:b1:41:e0:6c:45:f8:9e:01:94:84:7a:
28:61:98:ed:66:03:dc:e1:b2:58:da:6c:92:34:56:
1f:9d:57:b7:ac:71:fb:49:0c:45:29:09:c4:81:db:
ae:05:7e:c7:ba:9f:61:c1:e6:24:15:e9:61:a4:c9:
5d:ed:e1:11:19:34:2f:dd:75:8b:88:bf:64:f7:e0:
1f:78:97:f8:48:f6:6b:db:c8:d5:a8:99:45:31:7c:
33:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:58:DF:4F:75:44:46:1B:20:96:A9:AD:04:59:1D:79:07:AB:53:EE
X509v3 Authority Key Identifier:
keyid:DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/eljfT3VERhsglqmtBFkdeQerU-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.16.0/24
62.204.40.0/24
IPv6:
2a0e:1c80:1::/48
Signature Algorithm: sha256WithRSAEncryption
49:8b:ca:d9:3d:cc:48:76:91:50:5c:31:ad:f8:ad:74:ac:8d:
d1:27:1d:0c:92:53:48:65:68:c0:8f:67:82:23:17:a9:a9:96:
09:c3:27:0e:88:64:db:f0:ac:1a:5f:f2:4e:c7:c7:25:26:91:
ec:eb:c5:13:fe:30:40:40:96:0c:af:f9:a1:27:99:09:47:77:
75:c3:5c:dc:08:36:f6:a9:c2:80:38:13:4d:c8:1e:12:ef:db:
09:53:74:76:8b:88:00:b4:53:96:8e:1b:c9:30:0e:c5:7c:85:
12:ec:1b:bb:1a:30:97:6c:41:4e:cd:53:18:be:04:57:a0:4e:
d3:51:8c:e2:56:e5:a1:63:c4:7e:43:ed:55:47:82:51:c8:65:
bc:74:bb:67:01:fb:d6:2d:d4:2a:d7:2b:2c:70:80:cd:09:d1:
5e:6c:54:af:fe:3a:5c:9d:d2:a1:e7:27:35:50:50:da:d5:92:
24:19:90:00:95:ce:08:81:53:cc:04:c8:c5:60:69:8e:6d:85:
1a:80:25:aa:db:fc:b8:dc:b8:b1:37:c8:36:39:7f:2f:ca:b1:
18:c3:a4:3e:79:23:73:07:d5:5d:db:18:98:43:72:ba:5b:de:
1c:f4:53:0c:9e:cb:9f:ff:25:51:44:66:69:1a:8e:f7:b9:3d:
dc:f4:62:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:39:41 2025 by rpki-client