Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/o3FpZUaMCqS0PJ-p38gLRiireA8.roa
File: o3FpZUaMCqS0PJ-p38gLRiireA8.roa (raw, json)
Hash identifier: 8+rSXVxhddmrUPWbbOUkGkf6mzc7L21bbQhqQDlDK6c=
Subject key identifier: A3:71:69:65:46:8C:0A:A4:B4:3C:9F:A9:DF:C8:0B:46:28:AB:78:0F
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01962A734665482BAE29987ABB04979B5753
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/o3FpZUaMCqS0PJ-p38gLRiireA8.roa
Signing time: Sat 12 Apr 2025 14:41:59 +0000
ROA not before: Sat 12 Apr 2025 14:41:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57604
IP address blocks: 45.141.208.0/22 maxlen: 22
45.150.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:73:46:65:48:2b:ae:29:98:7a:bb:04:97:9b:57:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Apr 12 14:41:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3716965468c0aa4b43c9fa9dfc80b4628ab780f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:3f:f2:82:f7:5b:2f:05:ae:4e:1e:f2:3d:
e4:ed:35:8c:66:c1:1d:bd:3e:10:02:5f:16:4c:27:
7f:c4:12:8b:07:82:9a:51:e9:12:8b:16:96:7e:e2:
9c:8f:96:0c:8e:5d:b8:9e:fa:fe:1b:4f:56:fc:5d:
4e:be:48:39:63:12:8c:50:cc:d7:93:7c:88:38:c8:
8f:de:0b:bc:fe:dc:d6:de:9c:a0:f5:41:f5:9a:66:
a9:4d:32:d2:61:05:34:8e:9a:3d:bb:2a:bc:5c:d7:
e8:96:3d:fe:f4:a5:3b:75:d7:87:de:ca:16:3d:29:
cd:17:4e:cc:fb:43:b4:2b:ad:bd:ba:0d:9e:d6:e1:
f2:73:13:72:ab:20:24:5a:15:8c:57:e2:b9:99:ed:
08:4c:87:f1:3b:b4:e5:2f:42:7a:86:48:5b:e1:be:
21:1c:35:27:02:ad:0c:7c:8c:5f:b2:bd:c5:ca:cd:
a0:31:1c:fb:8c:a9:42:8f:0f:f1:68:54:82:bb:b7:
e1:88:29:65:86:d9:66:b5:12:44:38:a5:3c:8f:4f:
9b:41:23:45:b0:33:c1:b1:82:db:80:6a:b7:5a:50:
50:c6:d2:b9:6a:bb:a7:29:d1:84:c2:0d:a2:ef:67:
f6:d2:f4:95:04:c2:16:80:b5:3c:0a:c8:29:73:5f:
14:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:71:69:65:46:8C:0A:A4:B4:3C:9F:A9:DF:C8:0B:46:28:AB:78:0F
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/o3FpZUaMCqS0PJ-p38gLRiireA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.208.0/22
45.150.8.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:06:98:d1:5e:33:27:00:31:9b:d9:7f:2a:1a:af:bd:90:4c:
49:1b:e9:dd:95:e5:2c:f8:17:91:51:c6:2a:92:53:f3:71:94:
ef:ba:82:c6:63:73:54:e6:82:cd:c6:0f:c0:15:3b:06:22:76:
ab:79:c9:13:25:f2:70:ae:8e:56:95:0d:c7:f4:cf:20:ac:d7:
fa:4f:57:03:4f:4b:29:53:b1:73:1f:2e:8a:8b:32:88:1e:44:
96:03:cf:48:1b:1b:24:9b:cd:fb:7b:07:95:c5:56:c5:19:ad:
a2:48:25:fa:d0:24:4a:12:f1:eb:31:cc:f8:0b:74:f1:b7:e2:
60:c5:7a:ea:ba:de:69:bd:5e:79:ca:f1:47:5a:51:e7:d6:42:
29:65:0a:dc:df:3d:4a:70:2d:34:32:bc:8f:9a:bf:f7:df:d7:
e4:05:9c:29:e1:74:8a:2b:4b:a1:1c:d5:59:37:a4:11:69:6d:
10:23:1b:49:33:16:7e:bd:87:e9:6b:a8:3c:56:70:ff:ef:42:
aa:f8:7f:c5:da:51:40:b5:7d:e5:d3:78:51:da:19:cb:bc:1b:
fd:4f:9a:85:ab:a2:58:60:47:f2:64:cf:0d:a6:ac:9c:16:40:
f6:0d:b5:c0:e3:74:2f:ad:17:ed:b5:b4:3f:23:9b:9f:0a:6d:
22:99:c6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:05 2025 by rpki-client on console.sobornost.net