Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/W2y8xZcCJlySPm6oLogB7i6EEQE.roa
File: W2y8xZcCJlySPm6oLogB7i6EEQE.roa (raw, json)
Hash identifier: 6ORpgVWyWqdOHv+fY4eLu5qKuQH3bFRBOSq17Spb1RE=
Subject key identifier: 5B:6C:BC:C5:97:02:26:5C:92:3E:6E:A8:2E:88:01:EE:2E:84:11:01
Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial: 01942445575C76DF4A681244C78FBC1C0CBB
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/W2y8xZcCJlySPm6oLogB7i6EEQE.roa
Signing time: Wed 01 Jan 2025 23:48:31 +0000
ROA not before: Wed 01 Jan 2025 23:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212853
IP address blocks: 45.81.252.0/24 maxlen: 24
45.81.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:57:5c:76:df:4a:68:12:44:c7:8f:bc:1c:0c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Validity
Not Before: Jan 1 23:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b6cbcc59702265c923e6ea82e8801ee2e841101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:46:53:0b:bb:25:9f:b0:cb:44:55:ce:8d:
86:b8:58:ac:ea:a7:c4:dd:59:c7:e2:45:26:f7:83:
f4:34:ec:fd:b1:7d:4c:ee:cc:c3:e6:2a:88:26:b3:
f9:2f:c5:4e:33:79:38:88:50:a5:3d:7d:ed:e6:2c:
0e:29:47:2f:af:7f:b6:fa:87:99:d7:f2:5e:f9:15:
92:a0:be:1d:dc:18:64:95:a6:80:7c:ed:81:de:82:
49:44:56:c0:12:c9:c5:ab:b1:2d:40:a0:75:af:83:
bc:88:95:e2:f3:45:9c:4f:dd:3e:88:5b:da:a2:a6:
64:84:84:d2:e5:50:56:17:2f:3d:30:04:7a:13:20:
5b:50:0d:f8:d4:77:bc:f1:84:cf:23:fb:de:e5:b6:
44:a5:1e:46:00:63:b4:14:bd:2a:3f:ae:50:43:b2:
6a:79:3a:0a:e8:1e:36:b6:32:27:0d:f6:ec:4a:79:
48:78:ab:61:e9:08:1b:b4:7f:c4:c9:6b:3d:b3:d3:
37:e8:52:7f:d3:a2:7c:a6:5d:02:1c:ba:51:04:a6:
09:bb:70:65:41:b0:e4:a9:3d:32:e8:00:55:49:3a:
de:c3:cc:c0:a2:16:09:32:3d:cf:75:dc:8b:1b:bc:
79:ef:1d:74:e4:c3:7d:bc:b0:47:6f:be:35:3e:cb:
95:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6C:BC:C5:97:02:26:5C:92:3E:6E:A8:2E:88:01:EE:2E:84:11:01
X509v3 Authority Key Identifier:
keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/W2y8xZcCJlySPm6oLogB7i6EEQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.252.0/24
45.81.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:0e:c6:a4:70:e9:99:a4:ae:3a:b2:d2:c1:ff:19:8c:74:7a:
fe:8a:70:b6:14:39:2e:77:a3:25:89:50:2b:24:08:64:d0:aa:
d4:1d:73:b2:4b:f3:25:54:64:15:f5:31:49:32:ff:df:ae:01:
c7:37:ed:a0:7b:37:fc:07:ee:7d:c7:fd:99:8f:0e:c4:48:ab:
22:e9:15:ae:23:5b:d2:0a:09:a4:29:54:b5:39:d9:46:1d:8a:
3b:32:51:71:f0:12:1e:b5:5b:f6:9c:be:03:ff:71:9d:30:aa:
2a:ba:f7:f7:e0:5a:93:7a:1a:5b:38:56:04:78:c3:f7:f8:d6:
3a:77:72:0b:ce:a8:8e:3d:1f:bb:13:89:57:e8:4f:80:47:6a:
fe:39:31:8f:98:51:28:7b:5b:27:2b:5f:08:7d:e4:bf:1b:28:
42:a9:c9:6e:ad:73:57:03:5c:6b:a6:b6:0c:55:72:24:ce:ee:
de:5f:e2:d9:ed:4c:5a:a9:e6:78:26:f0:6d:24:29:10:0a:d7:
b2:69:66:05:4c:7b:8b:4f:03:55:77:eb:a7:89:c4:a4:2f:0c:
81:24:1c:94:e0:ea:f4:89:18:5e:e6:69:9f:2f:ba:1d:66:85:
89:cc:57:a9:a5:1c:3b:04:a0:b7:0d:2c:33:36:3b:0f:07:ba:
9e:59:1c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:11:10 2025 by rpki-client