Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/4V_ibiqr3ToA5yeO7eCC_kmdHfY.roa
File: 4V_ibiqr3ToA5yeO7eCC_kmdHfY.roa (raw, json)
Hash identifier: iaaPPpRPgVRp2VBYf0amI7H0JrYQ2W8NdUPmUpkX7Ug=
Subject key identifier: E1:5F:E2:6E:2A:AB:DD:3A:00:E7:27:8E:ED:E0:82:FE:49:9D:1D:F6
Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial: 019425FCBBDC03E15CEDF07087B2BCC40EDB
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/4V_ibiqr3ToA5yeO7eCC_kmdHfY.roa
Signing time: Thu 02 Jan 2025 07:48:27 +0000
ROA not before: Thu 02 Jan 2025 07:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201162
IP address blocks: 45.87.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:bb:dc:03:e1:5c:ed:f0:70:87:b2:bc:c4:0e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
Validity
Not Before: Jan 2 07:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e15fe26e2aabdd3a00e7278eede082fe499d1df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:98:27:d9:e0:e9:d2:8e:4f:57:3c:a0:2d:
4a:b4:c8:e3:4e:12:cf:de:56:1b:ad:63:15:83:8a:
15:b3:0f:a3:63:2c:8d:b9:30:71:46:b4:69:af:ca:
7f:5f:29:a3:52:3a:4a:61:9e:40:7b:f4:c2:4b:69:
b6:e7:95:6f:32:4e:f9:b1:7f:9b:07:6a:3f:37:10:
c0:21:c6:20:b0:c5:e4:19:8e:4a:11:7f:28:6c:38:
c8:56:80:80:44:a6:71:cf:8e:48:50:ee:a5:22:78:
34:7a:e0:77:b3:a0:dd:a6:68:73:9d:b1:e6:b1:da:
1d:55:41:b8:5c:cd:42:ea:9b:ad:b9:53:c5:fa:ce:
9b:fd:70:4d:a2:28:65:d4:bf:93:ec:89:0f:85:16:
87:a2:19:68:a5:81:17:c6:36:6b:01:a8:a2:16:74:
f5:24:30:3e:f1:b3:e5:a8:0b:82:fa:2c:d5:23:bd:
81:ad:4a:c3:63:86:82:3b:fb:8f:c6:5b:4d:28:ad:
ad:9d:00:3c:7f:f1:26:83:e0:91:c4:84:fc:f6:b8:
cd:d2:7c:29:ad:e6:98:5c:e5:8f:58:08:47:60:e1:
d6:6d:0e:67:a9:fa:54:e3:8e:b4:51:58:3d:6b:1e:
d8:d7:88:6d:18:40:29:f9:0f:11:1b:88:bf:78:94:
dd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5F:E2:6E:2A:AB:DD:3A:00:E7:27:8E:ED:E0:82:FE:49:9D:1D:F6
X509v3 Authority Key Identifier:
keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/4V_ibiqr3ToA5yeO7eCC_kmdHfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.123.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:73:a2:68:1b:d1:ae:86:dd:5e:75:d3:65:14:71:c8:d2:94:
76:ff:55:a1:d2:b5:c6:98:4f:5f:c2:bc:59:a7:5b:e3:8b:74:
02:eb:34:aa:2c:16:50:85:0d:d4:8d:6f:ce:bb:db:9b:50:a7:
b4:1c:2f:f5:47:0f:8c:dd:c9:2b:5f:6f:9b:31:f2:f2:3d:4a:
0a:d8:35:6f:13:f4:99:3a:15:81:95:f7:c1:db:f5:8d:21:7c:
4b:fe:72:24:d6:b1:80:f9:a5:40:cc:4a:04:a9:e9:b5:ff:d6:
4d:4d:f4:bc:03:df:af:dd:82:e6:62:62:81:83:1d:7c:18:2d:
15:25:09:8d:0d:78:25:1b:28:85:9f:73:12:8f:4a:6a:89:f5:
45:c0:5c:b8:bf:66:76:01:08:29:c7:4c:a6:54:ce:5c:53:40:
a1:24:a9:e6:95:b8:30:cc:3e:b8:27:18:cd:32:01:74:3d:0e:
58:ae:78:00:80:b5:d8:a2:ac:b7:fe:71:7a:1f:8e:ce:36:57:
d0:bf:e9:6a:d8:41:5f:a3:91:e8:b6:c5:9d:38:e6:aa:25:45:
e0:e4:56:50:ec:6c:ab:3d:21:4e:d2:0a:c3:a8:77:40:b8:9e:
ba:89:8f:58:f6:d4:53:69:db:04:b2:7c:29:41:62:e8:57:af:
b4:d5:fe:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:43 2025 by rpki-client on console.sobornost.net