Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/epQyZ0cEDixetECLXvdOgne06Nk.roa
File: epQyZ0cEDixetECLXvdOgne06Nk.roa (raw, json)
Hash identifier: 1dyLGgbxJMKJwagRLwzFgVXDhdkxgKcN07zL1ygYTf0=
Subject key identifier: 7A:94:32:67:47:04:0E:2C:5E:B4:40:8B:5E:F7:4E:82:77:B4:E8:D9
Certificate issuer: /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial: 0194258F4818AED47FB3B2D34B4264ACCFD3
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/epQyZ0cEDixetECLXvdOgne06Nk.roa
Signing time: Thu 02 Jan 2025 05:48:54 +0000
ROA not before: Thu 02 Jan 2025 05:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212384
IP address blocks: 45.91.32.0/24 maxlen: 24
45.91.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:48:18:ae:d4:7f:b3:b2:d3:4b:42:64:ac:cf:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Validity
Not Before: Jan 2 05:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a94326747040e2c5eb4408b5ef74e8277b4e8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:8d:5d:bd:d7:27:bc:97:f8:d2:d6:cb:03:
d8:a0:18:28:65:fd:bc:c0:79:60:f4:bf:da:9d:40:
ca:6e:e7:a3:75:8e:73:48:c4:b7:a7:a8:0c:d5:8c:
7b:be:ba:cb:60:ab:0b:84:f2:e4:98:90:db:96:b7:
55:19:21:3e:50:14:61:e3:0a:b5:e5:73:bf:c2:02:
f3:c1:aa:7e:24:a9:95:51:ff:bf:9a:22:9f:f3:d2:
e4:d0:10:40:cc:bd:bb:3e:ce:51:9d:b2:aa:39:9d:
3f:c1:26:81:9a:96:e1:72:8c:43:bd:5c:3e:42:5b:
9c:7a:a2:80:ba:a4:ee:e2:7e:af:34:83:42:78:c2:
16:78:e1:92:67:16:9d:e7:35:1f:f5:d4:cf:fc:b6:
93:e5:d9:2e:bb:7b:df:16:bf:c3:94:17:62:ae:ad:
36:c2:74:70:b7:ce:2a:fe:6b:a4:9d:3d:3f:47:8b:
fb:3e:bb:a6:03:86:30:2b:4a:66:8f:68:4c:ed:d4:
f7:2b:b9:6e:1c:11:37:94:65:b6:7a:e2:c7:7c:15:
fc:c5:a9:6f:8e:df:91:60:a8:b5:0b:41:d2:55:e6:
8d:b2:85:a1:34:d5:96:59:02:45:ef:e5:a2:54:e1:
f6:ab:95:e8:2e:66:4f:ac:4e:b4:6f:59:4b:63:a9:
99:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:94:32:67:47:04:0E:2C:5E:B4:40:8B:5E:F7:4E:82:77:B4:E8:D9
X509v3 Authority Key Identifier:
keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/epQyZ0cEDixetECLXvdOgne06Nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.32.0/24
45.91.34.0/24
Signature Algorithm: sha256WithRSAEncryption
87:3c:58:c5:fa:15:a2:63:f1:12:10:56:aa:47:e4:e5:58:81:
49:3c:b3:7c:38:b4:cb:f7:35:22:12:04:a0:8c:ef:34:bf:1f:
f5:2d:7a:87:2d:62:53:11:d1:0a:df:ce:1c:b3:f2:f8:8f:0d:
93:e1:c0:94:61:ac:c0:f0:c6:f5:b8:f7:31:77:81:42:a0:7a:
df:8d:3a:85:4b:e0:9e:2b:13:57:69:24:cf:99:01:05:90:ec:
7b:d4:f1:34:26:c2:33:47:63:ed:67:80:70:79:6d:c1:3e:d2:
b1:2a:78:bc:cf:19:72:6b:28:0b:22:8b:e8:34:d5:cc:3a:3c:
0c:81:e9:8a:4b:a6:5a:b1:a8:29:b0:a9:19:78:c3:8d:a1:31:
4d:65:e0:0f:3b:19:27:11:40:08:fa:95:dd:d4:94:d6:bc:87:
ca:0b:d7:a2:0d:33:d9:c9:04:3d:e0:62:c5:8c:b6:3e:94:65:
ba:9d:b2:84:e0:52:1a:73:48:e5:b0:15:81:b2:3a:ca:bf:c3:
3d:29:da:a5:a0:6c:33:e7:a6:a6:89:fa:93:96:7c:f4:be:02:
64:b3:c2:7e:bd:20:57:53:ac:f6:0f:c0:52:12:1d:f4:68:0f:
77:e9:2c:1d:f0:71:a9:68:50:7f:f6:c0:74:e9:ef:3c:3a:54:
39:4f:1b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:59:05 2025 by rpki-client