Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/MtRudBwfeuM_gV5Rxs2GMGZwQ28.roa
File: MtRudBwfeuM_gV5Rxs2GMGZwQ28.roa (raw, json)
Hash identifier: jyZOCTzazS4hZAS8vXh55e8wdvGkjLOC1l/j4Cldlkk=
Subject key identifier: 32:D4:6E:74:1C:1F:7A:E3:3F:81:5E:51:C6:CD:86:30:66:70:43:6F
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 019424B3E97DB03B820851C8763816E39019
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/MtRudBwfeuM_gV5Rxs2GMGZwQ28.roa
Signing time: Thu 02 Jan 2025 01:49:17 +0000
ROA not before: Thu 02 Jan 2025 01:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202993
IP address blocks: 45.156.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e9:7d:b0:3b:82:08:51:c8:76:38:16:e3:90:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 01:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32d46e741c1f7ae33f815e51c6cd86306670436f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d5:ef:cd:23:ca:49:41:ea:a2:5c:f3:29:8b:
1e:c8:ba:bf:5a:30:3c:47:6f:15:3e:78:02:81:e5:
56:b2:0c:d1:5a:05:f4:19:75:1f:10:04:d7:dc:6b:
92:bc:a0:a2:70:c1:f3:e6:94:44:f4:2b:9e:f4:b0:
c6:6f:33:4a:3a:b4:5a:13:af:22:2d:45:23:1b:5f:
01:9f:18:fc:3c:2d:a5:6b:c0:f9:63:64:09:2a:1d:
9b:02:d6:09:de:35:b7:f6:1b:2a:b9:bf:42:02:30:
db:81:44:40:87:85:16:36:f6:8e:4f:a5:c4:c3:06:
ce:87:e5:71:92:fb:72:b8:f8:f9:d9:1d:84:73:8f:
6e:c6:97:21:52:f6:77:85:80:42:fc:50:59:87:e1:
7c:5a:13:70:70:e2:82:3b:f8:b7:48:db:14:a4:a8:
94:fc:3f:f9:07:d0:66:cd:6e:e2:e6:5d:c5:31:6d:
66:df:18:7f:11:94:92:a2:d9:e2:53:fa:0b:02:d7:
22:44:25:b2:4b:23:ff:4a:28:78:0d:33:a7:db:58:
79:cf:e6:60:9c:d2:9c:0d:dc:cc:db:48:bf:50:24:
d7:0d:78:13:16:73:9c:f9:f0:f1:81:b6:37:1e:fc:
5c:64:10:b1:f2:6d:eb:37:77:e2:a0:ed:45:ab:5e:
f1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D4:6E:74:1C:1F:7A:E3:3F:81:5E:51:C6:CD:86:30:66:70:43:6F
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/MtRudBwfeuM_gV5Rxs2GMGZwQ28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.112.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:35:a0:3b:7f:6d:d4:47:2c:44:0d:c3:c1:9b:dd:fe:ce:09:
74:eb:4f:13:b0:5a:bd:4c:40:e9:45:12:1f:7c:9f:84:a8:26:
a4:97:a7:68:d4:ef:13:44:57:bb:c3:f3:83:be:14:07:d5:3e:
39:ff:c5:c7:82:a8:01:7d:cb:db:de:70:fc:f1:c5:2c:a9:f6:
d2:45:45:2b:0a:29:64:85:db:f0:3a:86:90:2e:4c:56:aa:9f:
69:3a:d1:11:bf:8a:ee:46:b4:f9:2a:e0:aa:76:bf:77:70:45:
d3:a6:09:55:cc:6d:db:d3:3b:ed:b8:3e:06:a6:68:fc:e0:2f:
e7:63:5a:34:02:98:04:4a:f5:ac:f7:b5:07:ef:fd:b3:06:c6:
21:4d:c6:e8:d2:fa:42:e1:63:62:b5:9e:85:78:a0:50:06:45:
02:d4:0b:d0:f8:5b:49:fb:e1:9c:6c:4e:d7:f2:50:5a:d2:35:
45:3a:3f:05:e1:f1:e2:07:60:e9:01:c1:e4:7d:ec:1d:54:b8:
b7:30:32:d1:4e:d0:22:99:f4:e2:58:f1:38:4d:d4:aa:fa:27:
c3:98:0c:6b:f9:6a:1b:c1:e8:eb:e2:79:3f:50:4b:19:d2:01:
73:c1:b1:54:53:7b:51:a7:ba:bf:90:38:a9:4c:1c:8a:99:87:
8f:bb:09:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:36 2025 by rpki-client