Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/aDwAS1LQt-dxkqhRRrd8pQDVwd4.roa
File: aDwAS1LQt-dxkqhRRrd8pQDVwd4.roa (raw, json)
Hash identifier: duXpBH3mnr8j/KJuHRzuQfhllP9IGUW8jdVpYb4QHpA=
Subject key identifier: 68:3C:00:4B:52:D0:B7:E7:71:92:A8:51:46:B7:7C:A5:00:D5:C1:DE
Certificate issuer: /CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1
Certificate serial: 0194252211AAB416AB1C8A51F52B6EEFE978
Authority key identifier: F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/aDwAS1LQt-dxkqhRRrd8pQDVwd4.roa
Signing time: Thu 02 Jan 2025 03:49:37 +0000
ROA not before: Thu 02 Jan 2025 03:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212530
IP address blocks: 45.13.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:11:aa:b4:16:ab:1c:8a:51:f5:2b:6e:ef:e9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1
Validity
Not Before: Jan 2 03:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=683c004b52d0b7e77192a85146b77ca500d5c1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b8:6e:7e:5e:91:b8:2f:b4:dd:c4:6f:06:ed:
c7:8f:ea:7a:94:db:43:0b:a1:f7:f9:17:28:8e:c5:
e6:03:eb:31:c3:3e:20:1f:fa:da:62:94:84:70:a7:
c2:d8:56:78:9b:16:ba:46:2f:b0:91:40:d4:8d:f8:
46:db:b1:58:3f:33:73:17:46:28:c4:94:de:2b:cd:
7f:04:11:43:30:81:f3:4b:d9:b1:44:ea:e8:88:1c:
20:2d:6f:ec:c6:77:06:b4:cd:52:09:0c:71:6b:42:
d9:ac:e2:40:11:c5:4b:a6:d1:70:06:2b:6f:3b:02:
96:f8:9f:85:4f:f5:0b:9e:aa:ab:e4:18:f7:bc:ab:
c8:47:8f:e2:84:60:46:39:29:4c:37:85:df:50:2b:
a0:3f:e8:07:ab:c6:40:8d:03:5a:b1:03:c7:26:03:
01:e0:99:84:45:0d:07:b2:2e:2c:10:cc:34:72:5c:
5e:da:97:8e:1f:13:80:4f:70:eb:49:13:09:2d:a5:
4d:61:de:74:d9:4c:5b:e0:02:36:fd:09:aa:2b:e4:
67:0a:5c:68:32:cb:33:f9:87:2d:9d:93:a9:c1:36:
b9:f7:84:a7:33:7f:34:6e:d7:fa:c0:7b:1c:72:e1:
d2:41:e1:c4:14:15:d9:9b:92:20:d4:e4:d0:bc:68:
27:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3C:00:4B:52:D0:B7:E7:71:92:A8:51:46:B7:7C:A5:00:D5:C1:DE
X509v3 Authority Key Identifier:
keyid:F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/aDwAS1LQt-dxkqhRRrd8pQDVwd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.112.0/22
Signature Algorithm: sha256WithRSAEncryption
44:a2:a1:7d:f6:d9:bd:c3:7b:9c:b1:86:62:81:c4:62:c8:aa:
70:0e:51:bc:f2:3b:21:82:80:d9:92:ab:70:f8:3e:6a:55:0e:
0c:7e:3c:3b:51:b3:ec:27:a6:e3:11:6d:4d:8d:11:7b:54:2a:
ee:05:1b:6a:29:a0:46:f2:2b:2f:2d:ae:85:8d:a5:ed:e3:ad:
6c:89:4a:28:c5:54:72:aa:bc:00:03:05:0e:d5:43:d4:dc:23:
bc:82:92:f1:9f:23:2f:9a:32:4a:e7:87:70:3f:30:1e:73:c7:
f6:e9:6d:9b:dc:e4:d8:da:b8:4a:e7:ba:49:69:f7:ec:a7:01:
e4:25:48:88:07:55:bd:38:c4:82:86:05:64:b0:5b:42:df:9c:
02:60:be:ba:e9:fa:4e:ed:32:87:b0:17:32:23:31:35:bb:06:
2b:8d:e6:84:2f:65:5f:20:a0:16:60:bc:c1:53:6d:32:fd:ea:
d2:a0:eb:9e:4a:00:72:0d:f2:5e:80:83:ed:17:f2:d4:83:55:
29:8c:16:89:54:1d:be:9d:70:b1:81:25:ef:63:f9:28:a2:7c:
fa:c3:c4:60:7f:8a:71:43:48:a1:f1:ad:ad:5e:d2:c1:96:5f:
1e:1f:7c:b6:52:82:35:26:40:3a:14:bc:38:7c:62:42:19:a9:
5b:f7:52:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:06:56 2025 by rpki-client