Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ffc311-3110-47f5-8c4f-0c9f76a34005/1/HPdOUs135QAtmohHBcQmADYiHQo.roa
File: HPdOUs135QAtmohHBcQmADYiHQo.roa (raw, json)
Hash identifier: bePkoCp/WS1NV1ibfxkPjUhvcd5wcR0UbIFtOWloC4k=
Subject key identifier: 1C:F7:4E:52:CD:77:E5:00:2D:9A:88:47:05:C4:26:00:36:22:1D:0A
Certificate issuer: /CN=7d47d63346951d9316bbc2578645b5eae24531b9
Certificate serial: 018CC94E38E5C38FFC7CE0F37914A78ED84F
Authority key identifier: 7D:47:D6:33:46:95:1D:93:16:BB:C2:57:86:45:B5:EA:E2:45:31:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUfWM0aVHZMWu8JXhkW16uJFMbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/ffc311-3110-47f5-8c4f-0c9f76a34005/1/HPdOUs135QAtmohHBcQmADYiHQo.roa
Signing time: Tue 02 Jan 2024 08:33:15 +0000
ROA not before: Tue 02 Jan 2024 08:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62455
IP address blocks: 45.11.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:38:e5:c3:8f:fc:7c:e0:f3:79:14:a7:8e:d8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d47d63346951d9316bbc2578645b5eae24531b9
Validity
Not Before: Jan 2 08:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cf74e52cd77e5002d9a884705c4260036221d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5a:28:86:3d:a1:e0:f0:16:47:50:16:db:5a:
0f:c7:60:78:9e:72:b0:1e:ef:69:72:62:b7:89:a8:
00:aa:1b:4d:59:99:20:ad:55:c9:13:41:23:a4:37:
d0:e8:26:98:0d:ec:ef:69:7e:6c:9b:20:3f:78:1a:
8f:8e:92:79:7b:b5:39:78:b0:d1:db:43:54:b5:61:
d3:32:5f:88:bb:2e:b8:07:e9:bd:27:ae:c8:7c:c1:
71:9d:b4:86:e6:f7:99:4a:37:56:d9:c6:fb:dc:65:
e9:2a:c6:1c:e0:70:2e:31:a9:d1:18:6b:65:9a:78:
a7:ad:b7:ca:5f:15:a2:70:4b:27:1f:a0:5d:64:53:
ed:8f:3e:d1:b3:7e:c2:7d:33:bf:c5:d5:75:6d:af:
78:c9:18:fc:2a:e6:2f:bf:75:27:e4:d3:71:e3:df:
98:3e:98:7e:dd:57:62:f0:7e:fe:37:35:98:fd:4a:
08:9c:09:ab:53:d4:f9:51:c1:3c:e6:d3:fc:02:19:
56:a5:68:33:d0:32:b7:b6:d9:95:8e:a1:d8:46:1d:
a2:2d:35:5f:3e:74:f5:4f:0a:cc:9f:f9:50:38:8c:
78:28:77:c3:db:54:82:9f:cc:e9:87:71:02:80:22:
22:76:8b:38:1e:e7:e7:95:5d:0f:c5:96:f7:ff:16:
a3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F7:4E:52:CD:77:E5:00:2D:9A:88:47:05:C4:26:00:36:22:1D:0A
X509v3 Authority Key Identifier:
keyid:7D:47:D6:33:46:95:1D:93:16:BB:C2:57:86:45:B5:EA:E2:45:31:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUfWM0aVHZMWu8JXhkW16uJFMbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ffc311-3110-47f5-8c4f-0c9f76a34005/1/HPdOUs135QAtmohHBcQmADYiHQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ffc311-3110-47f5-8c4f-0c9f76a34005/1/fUfWM0aVHZMWu8JXhkW16uJFMbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.168.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:f5:53:8c:e4:9f:6d:20:da:5f:7b:9c:b5:d2:6d:0c:bc:35:
90:9d:e2:a7:2e:11:29:9f:24:0b:e8:cb:21:d6:17:b2:a0:18:
72:99:6c:9b:d5:2a:5e:f5:39:c0:d5:2c:7e:18:47:cc:43:cc:
20:ec:6f:0e:55:57:2d:01:f9:18:f4:a9:45:ef:f6:85:b2:55:
30:e8:64:49:62:b1:8b:9e:5f:66:ad:6c:d8:8f:d2:36:1c:26:
c9:41:3e:ba:4c:5f:7f:ff:d2:49:43:d1:85:cc:47:c4:53:a6:
74:a0:59:57:17:44:76:57:7a:77:19:7e:5f:f7:0a:97:cb:84:
02:91:db:1d:fb:7c:31:e4:6c:54:50:32:3a:5e:47:05:f6:ed:
7d:0c:06:37:3e:89:96:93:99:f1:8f:5a:eb:e2:89:b9:66:9c:
ab:d7:0f:d5:ac:e5:60:81:b4:35:14:fe:80:15:c3:3c:5b:90:
1e:92:c8:5d:11:2e:4f:af:01:30:a2:20:c4:db:85:95:31:80:
e6:0a:51:9e:fb:d3:24:e6:c5:ba:e1:77:bf:68:a7:53:45:0b:
e5:58:78:fa:43:99:f2:8c:6f:fc:30:2f:b7:0b:78:61:5a:43:
22:21:fc:b5:07:67:db:fb:98:83:a1:8c:1f:62:64:ef:7d:d4:
da:9b:09:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:28:27 2025 by rpki-client