Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/RdFk8pqwtmhHw2UX4x0rgDjdvVg.roa
File: RdFk8pqwtmhHw2UX4x0rgDjdvVg.roa (raw, json)
Hash identifier: UfFtH0Qa2ULdo2eWM4CXCIXafZmQBAeqkERPoGsE9DY=
Subject key identifier: 45:D1:64:F2:9A:B0:B6:68:47:C3:65:17:E3:1D:2B:80:38:DD:BD:58
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 019424B3E659A53836EC931980783D88580E
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/RdFk8pqwtmhHw2UX4x0rgDjdvVg.roa
Signing time: Thu 02 Jan 2025 01:49:17 +0000
ROA not before: Thu 02 Jan 2025 01:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61367
IP address blocks: 45.132.160.0/23 maxlen: 23
45.132.162.0/23 maxlen: 23
45.141.248.0/23 maxlen: 23
45.141.250.0/23 maxlen: 23
45.143.240.0/23 maxlen: 23
45.143.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e6:59:a5:38:36:ec:93:19:80:78:3d:88:58:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 01:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45d164f29ab0b66847c36517e31d2b8038ddbd58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:44:27:6c:60:e9:69:65:62:ee:3e:f0:e4:04:
b7:c3:72:8a:eb:98:4f:4e:36:37:38:f2:90:74:5a:
56:9a:54:52:df:48:88:a2:88:46:3f:a6:16:e0:91:
f9:ce:86:7f:bf:6c:6f:02:d5:d0:01:07:ab:13:1b:
e9:55:22:66:b3:9a:7f:22:5c:82:f0:e4:6a:29:70:
dd:b2:81:50:a8:75:4a:98:6a:25:03:cd:e0:fe:d4:
1a:89:19:33:16:5f:70:db:b6:33:f2:2e:a2:75:91:
b5:60:fb:00:8b:2c:77:8c:cd:07:f3:32:6a:fd:27:
59:3c:1b:48:2f:9d:21:40:f7:c8:53:1d:67:22:a4:
4a:b5:26:c1:ff:c1:67:7d:21:28:ab:d8:9a:5b:83:
c6:bc:b6:e1:36:67:14:07:89:dc:0d:2d:1f:90:a4:
ad:a9:dc:23:18:16:ef:b4:1e:2b:7d:58:b2:e2:d2:
82:03:6f:52:36:0b:da:de:e2:79:8d:c7:93:11:36:
b4:be:cc:98:64:9f:14:ec:c2:2d:15:45:db:87:84:
fd:1f:a7:73:40:03:1c:94:21:aa:30:58:37:a8:1a:
36:e6:0f:71:cc:e8:5a:ec:69:ba:82:61:be:57:55:
e7:de:43:36:f7:2e:77:32:d0:ae:b8:98:f5:7e:7b:
6c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D1:64:F2:9A:B0:B6:68:47:C3:65:17:E3:1D:2B:80:38:DD:BD:58
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/RdFk8pqwtmhHw2UX4x0rgDjdvVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.160.0/22
45.141.248.0/22
45.143.240.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:49:89:f5:ea:ec:27:29:35:38:41:d3:b7:e1:75:92:1a:62:
79:e3:0b:cf:af:02:13:57:22:98:8f:57:53:ec:d2:71:25:bf:
79:5d:61:90:61:a4:12:55:c7:d2:b7:e1:8b:0b:48:82:1c:d1:
bf:7f:10:de:60:cc:ed:f2:26:9b:3d:1d:69:97:cf:8e:50:7e:
39:d1:ae:78:6b:1a:7c:3c:af:07:65:11:77:e2:ba:b7:fd:42:
ce:f1:c9:2c:fe:fc:17:1d:e4:75:38:eb:ca:d7:bf:8c:e4:9f:
64:1f:57:88:25:8c:ea:74:31:55:d3:d1:7d:d3:ae:63:59:12:
ca:17:d2:59:11:c4:c4:72:a9:84:52:99:cb:29:87:45:8f:86:
8c:81:06:71:eb:19:d0:94:b0:23:a2:fd:a2:37:39:a1:28:0e:
e7:9f:33:59:e0:a4:d1:98:90:d3:94:b2:08:f9:7a:14:b7:03:
dc:2d:59:16:19:c1:3e:0e:d4:94:e8:29:3d:50:0b:84:33:8b:
b0:0a:04:45:ea:65:5c:67:3b:91:d0:38:e9:bc:27:79:44:7f:
4d:a8:e5:42:46:6e:f4:c0:60:f8:6c:5f:48:94:e4:27:7e:72:
57:0b:1b:b1:f1:6d:98:e0:81:81:bf:b3:65:c0:95:44:6e:66:
2e:46:11:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:17:12 2025 by rpki-client