Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/PwFex15w_vGu9rMsC-NGPYybEsw.roa
File: PwFex15w_vGu9rMsC-NGPYybEsw.roa (raw, json)
Hash identifier: oh3ulFFupTLJCwmoHULEmcM0EU2doUd+YoDkAtl9zLo=
Subject key identifier: 3F:01:5E:C7:5E:70:FE:F1:AE:F6:B3:2C:0B:E3:46:3D:8C:9B:12:CC
Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial: 01952487ED49971975F15BDA660236279D1A
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/PwFex15w_vGu9rMsC-NGPYybEsw.roa
Signing time: Thu 20 Feb 2025 18:04:02 +0000
ROA not before: Thu 20 Feb 2025 18:04:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212957
IP address blocks: 45.148.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:24:87:ed:49:97:19:75:f1:5b:da:66:02:36:27:9d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Validity
Not Before: Feb 20 18:04:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f015ec75e70fef1aef6b32c0be3463d8c9b12cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:9d:c9:0f:44:79:e9:f1:a6:8a:0d:1c:a8:
71:ad:0a:e2:13:13:d9:17:1f:8f:b6:e3:c5:7e:2a:
34:8f:3d:93:35:e3:dc:97:ca:df:e2:b8:aa:6d:5e:
95:c1:97:1f:f0:b1:b3:e6:80:58:b6:f7:76:ae:8f:
5a:40:77:a1:1f:e9:ec:69:3c:fe:84:70:d0:ed:76:
e5:24:2e:b6:36:80:29:fb:4f:3a:46:32:a3:34:29:
cf:ba:d6:bf:57:bc:26:02:b2:c9:97:37:b3:f2:bb:
4b:e5:97:d8:91:a7:77:ed:70:35:b9:14:ad:e3:11:
75:b1:94:9e:d8:b9:d5:25:8c:cf:e5:24:48:dd:08:
ef:4a:fa:69:0a:2c:79:e6:85:c0:06:98:90:75:02:
70:9a:7e:7d:27:bd:3e:9b:b3:a8:5a:0f:93:cd:ee:
06:ae:78:36:7e:b7:9f:7f:ba:d1:bc:fd:0c:3d:00:
66:db:f3:83:62:70:72:81:8d:f7:20:cb:fd:11:de:
6b:3c:93:b3:d8:6d:4d:64:16:84:2e:82:af:4b:25:
2d:57:a6:92:59:dc:2e:32:01:7f:c6:3f:31:d5:eb:
fe:c3:89:ae:38:6b:47:ca:45:b2:55:7f:69:09:88:
9b:9e:04:e1:d2:47:49:e4:f8:3e:47:0a:3e:2d:3f:
63:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:01:5E:C7:5E:70:FE:F1:AE:F6:B3:2C:0B:E3:46:3D:8C:9B:12:CC
X509v3 Authority Key Identifier:
keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/PwFex15w_vGu9rMsC-NGPYybEsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.72.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:af:05:58:79:77:1a:18:1c:5b:ea:c8:97:4d:96:a9:00:df:
f6:64:cc:c1:ab:27:ea:66:1b:d2:75:53:4e:ee:bc:59:0f:86:
ca:74:82:d8:4d:d6:44:33:75:a0:9f:a8:0c:60:d5:f0:87:70:
c8:3c:39:f6:e2:33:92:40:aa:42:64:e4:8c:fe:6d:69:d3:1f:
3b:2e:eb:8e:74:73:37:99:75:fc:c5:06:a1:2a:99:a7:a0:36:
fa:bf:f0:e3:02:fd:83:93:98:4f:41:6d:1e:43:50:bd:c0:28:
47:74:e2:74:fa:58:11:4e:44:7d:f9:b3:1c:14:69:86:3e:bd:
12:05:42:65:8a:34:d8:e4:b0:73:4d:42:33:d4:e9:47:24:e5:
ef:64:dc:9c:38:a8:a7:d2:e7:75:da:cf:cb:b2:fe:69:7d:81:
27:ba:4e:98:0d:fc:37:85:8c:c8:3c:b5:89:9b:7a:8c:ac:8c:
53:e2:a3:07:6d:7b:a8:6a:1f:00:80:03:b8:ce:fe:f5:0a:c2:
88:4c:ca:2c:ae:13:83:f1:86:3a:c2:45:23:4d:fa:a6:08:44:
4a:49:57:d8:db:7c:c4:2a:66:5b:87:55:14:46:8a:0b:7a:0f:
9d:99:65:69:3e:12:52:9f:f2:fb:a1:dd:de:9b:80:48:41:41:
38:63:55:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:55 2025 by rpki-client on console.sobornost.net