Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/jp9vB2pTxiO6Rn-fr5lvGwdIFWM.roa
File: jp9vB2pTxiO6Rn-fr5lvGwdIFWM.roa (raw, json)
Hash identifier: 6VqvwbK8VR9HONnsQsNDV/fKD4/kQ533Rujo7bu03tM=
Subject key identifier: 8E:9F:6F:07:6A:53:C6:23:BA:46:7F:9F:AF:99:6F:1B:07:48:15:63
Certificate issuer: /CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Certificate serial: 01856E5D7731D74F016B88E9F7BC15718027
Authority key identifier: DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/jp9vB2pTxiO6Rn-fr5lvGwdIFWM.roa
Signing time: Sun 01 Jan 2023 17:24:57 +0000
ROA not before: Sun 01 Jan 2023 17:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 45.15.17.0/24 maxlen: 24
2a0e:1c80:18::/48 maxlen: 48
2a0e:1c80:16::/48 maxlen: 48
2a0e:1c80:17::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:77:31:d7:4f:01:6b:88:e9:f7:bc:15:71:80:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Validity
Not Before: Jan 1 17:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e9f6f076a53c623ba467f9faf996f1b07481563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:d7:60:1b:0a:a1:23:ad:bb:17:ea:87:df:
55:74:e6:ae:f2:ae:b8:d6:ac:12:38:ce:05:3a:c3:
22:39:fb:0d:3b:73:63:ca:18:08:20:31:7f:56:ed:
5e:5d:1a:18:43:fb:87:4f:cc:7e:f6:4b:d1:c6:af:
21:25:e3:2b:8a:db:65:e6:ad:44:fc:37:f3:e7:42:
24:f5:45:fd:29:61:34:b9:4b:45:1b:9a:88:b8:54:
08:ab:1a:e2:24:c7:7b:61:6d:df:28:a3:5a:c2:04:
f4:92:1c:db:6c:57:5a:26:fe:97:2a:b5:60:bc:b5:
c5:62:d5:53:08:17:9f:7e:8c:a7:7d:01:ea:fd:70:
09:33:3e:ff:79:a9:55:6e:4f:7a:3c:9c:db:ee:ba:
6e:f2:5a:fe:34:f9:f5:44:16:4c:bb:8e:bb:6a:bb:
e2:de:af:19:59:11:fa:49:30:1f:2e:7e:8a:3b:b1:
96:20:52:f6:cf:4a:67:2a:cb:cf:82:2a:8b:49:18:
34:15:7b:e2:55:f9:23:3c:74:ad:1c:1f:68:5e:c6:
c6:19:21:11:68:a5:ba:5d:06:db:2a:37:5e:a9:fb:
9f:33:cf:05:eb:ab:d2:58:2b:da:6b:10:c4:21:11:
3d:86:ef:1e:38:8f:30:29:c0:55:67:29:67:9b:52:
e4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9F:6F:07:6A:53:C6:23:BA:46:7F:9F:AF:99:6F:1B:07:48:15:63
X509v3 Authority Key Identifier:
keyid:DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/jp9vB2pTxiO6Rn-fr5lvGwdIFWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.17.0/24
IPv6:
2a0e:1c80:16::-2a0e:1c80:18:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a8:72:0a:a0:89:85:09:a6:38:a8:84:c8:a5:35:43:9e:cd:e1:
aa:28:4d:67:4f:8f:32:96:24:6a:60:72:85:ff:aa:59:60:7b:
0b:55:f1:6b:ce:97:92:8f:ca:60:af:32:1f:de:b9:4d:78:05:
90:78:1b:3b:23:c7:e7:c6:ef:d8:69:5d:f9:0a:1b:ef:f7:6e:
7e:df:58:5f:07:49:81:ea:d8:c5:7b:5d:54:43:ac:d2:d1:fa:
5f:fa:91:19:f7:9f:40:eb:75:2a:f2:c8:ed:1a:90:99:8f:81:
fa:24:3e:36:ee:71:30:d0:70:72:7b:c1:b1:09:d5:a8:7c:f9:
86:34:58:28:28:e6:b8:b2:6d:34:00:3c:67:fc:de:cd:75:35:
4c:f7:c4:d4:48:0f:d7:b6:f9:18:c5:e4:9b:5b:54:2a:a4:01:
ef:55:ef:07:d0:66:7d:ae:3d:9e:e4:73:69:3e:9b:a9:a8:e0:
92:b2:65:e0:a8:0a:49:c0:92:f3:7c:43:93:a0:40:58:fa:9b:
7a:ef:f6:ad:bc:a0:0e:7a:63:f1:89:eb:96:65:f3:1a:73:7f:
75:0a:fb:b0:1c:fa:62:2f:51:5f:3c:3f:3b:27:90:ab:7d:c4:
eb:d0:76:18:93:d2:25:83:39:6c:51:7c:1e:8a:12:74:a2:67:
fb:12:a0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:39:09 2025 by rpki-client