Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/FRSEq5NnoDtUTfI3ZM-ovWmpKV0.roa
File: FRSEq5NnoDtUTfI3ZM-ovWmpKV0.roa (raw, json)
Hash identifier: TFSYxBmYZYQakjuAVtdLoqcdCqATBoMcScOsWAMrb1Q=
Subject key identifier: 15:14:84:AB:93:67:A0:3B:54:4D:F2:37:64:CF:A8:BD:69:A9:29:5D
Certificate issuer: /CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Certificate serial: 019426D9533C6802F80DECFF80CED9210298
Authority key identifier: C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/FRSEq5NnoDtUTfI3ZM-ovWmpKV0.roa
Signing time: Thu 02 Jan 2025 11:49:24 +0000
ROA not before: Thu 02 Jan 2025 11:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214570
IP address blocks: 45.137.19.0/24 maxlen: 24
185.254.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:53:3c:68:02:f8:0d:ec:ff:80:ce:d9:21:02:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Validity
Not Before: Jan 2 11:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=151484ab9367a03b544df23764cfa8bd69a9295d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:c1:60:90:a8:b6:fe:c2:e7:d5:37:c2:5f:
44:43:47:7a:30:29:40:23:25:33:76:20:03:87:2b:
73:6f:ce:15:cb:4a:b3:7c:fb:7f:c8:84:d8:de:d3:
97:a3:d1:fa:e7:31:41:38:13:68:6e:bc:3c:2f:b3:
60:a4:9e:a3:ff:3f:62:ea:d2:88:39:53:23:72:a6:
b7:0b:a8:f0:c3:70:d8:1b:79:28:6c:48:18:35:79:
00:4b:6d:04:45:ed:22:53:4e:78:06:c9:d7:1b:40:
a0:1a:08:f3:ae:94:92:29:fa:25:75:65:32:86:ba:
77:77:22:98:f5:e5:70:55:8e:be:c5:5a:96:29:04:
54:1c:aa:45:ea:64:e3:7b:57:39:f5:f6:90:ab:67:
13:ef:b3:13:af:57:4d:2b:33:41:1c:29:ed:b6:96:
e7:82:87:28:d3:53:66:13:05:42:c7:76:94:51:32:
6e:38:52:fc:9d:96:6a:cf:2f:0c:18:93:da:ae:af:
d7:15:42:7b:06:73:06:85:0d:c6:f2:89:1f:a1:6d:
90:43:a0:4f:af:93:4d:20:38:9d:b4:85:f7:02:4e:
c8:79:db:c5:34:58:ce:31:23:58:bc:a4:e8:9b:11:
fe:45:59:76:ba:3f:b8:63:69:9a:52:79:a4:3f:a7:
00:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:14:84:AB:93:67:A0:3B:54:4D:F2:37:64:CF:A8:BD:69:A9:29:5D
X509v3 Authority Key Identifier:
keyid:C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/FRSEq5NnoDtUTfI3ZM-ovWmpKV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.19.0/24
185.254.165.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:a7:3c:2a:56:dc:5f:97:eb:67:56:da:8e:7a:2c:d5:8b:d8:
e2:91:77:9d:df:fc:ac:0f:55:e3:17:99:64:c4:47:83:0e:ba:
b8:81:16:d1:2b:ed:9c:0d:71:15:61:df:d2:33:c3:e1:94:f2:
42:ac:79:f7:c7:31:62:a7:e6:0a:9e:84:25:13:c1:67:04:1d:
f0:f3:cc:e5:6e:d1:0b:fc:06:51:09:19:78:0b:99:32:9d:f4:
3f:e2:ea:2a:db:2e:c3:6c:40:06:25:70:a3:75:f6:f1:cd:00:
47:b4:e2:b5:bf:0c:72:dc:6a:41:0e:2e:bf:b5:4b:ef:37:fa:
95:dc:bc:85:32:e0:93:7b:e5:51:a0:00:44:0f:53:63:1b:e1:
5f:3e:57:1d:66:e9:82:34:98:99:56:69:4e:2b:84:8d:ba:34:
15:84:64:31:da:4c:c3:7d:63:bf:73:d7:e7:bc:63:d2:fc:ef:
d2:1b:70:00:3b:67:f0:a0:b5:1d:78:16:83:fe:20:56:dc:7b:
2b:be:44:34:27:83:2d:71:11:3a:fd:bb:cc:64:02:d4:06:98:
11:9c:dc:ef:8f:f8:af:f5:92:80:7b:88:f7:fb:6d:19:6c:1c:
68:a9:e8:fc:a4:6a:5e:33:81:77:fa:15:ba:df:4d:ad:86:47:
65:8f:31:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:23 2025 by rpki-client on console.sobornost.net