Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/Vx5x_bXNKHWPaLcbsSMbayKsJ6c.roa
File: Vx5x_bXNKHWPaLcbsSMbayKsJ6c.roa (raw, json)
Hash identifier: 8Re0cXlUrm/00gRHpwtqBPEBcWm8dUdY/V27GZgOOjY=
Subject key identifier: 57:1E:71:FD:B5:CD:28:75:8F:68:B7:1B:B1:23:1B:6B:22:AC:27:A7
Certificate issuer: /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Certificate serial: 019427488DB3485AB8E71958078AA89D2731
Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/Vx5x_bXNKHWPaLcbsSMbayKsJ6c.roa
Signing time: Thu 02 Jan 2025 13:50:53 +0000
ROA not before: Thu 02 Jan 2025 13:50:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211215
IP address blocks: 45.128.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:8d:b3:48:5a:b8:e7:19:58:07:8a:a8:9d:27:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Validity
Not Before: Jan 2 13:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=571e71fdb5cd28758f68b71bb1231b6b22ac27a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:76:9d:2f:75:ad:cf:67:23:74:20:ad:1f:e2:
a7:6e:96:92:20:25:ac:3f:b7:b9:82:80:68:95:12:
e7:d3:97:2c:1c:4c:02:e6:93:a6:31:a4:79:87:62:
6d:ac:4e:51:cc:43:c7:90:c1:2c:c6:36:07:a2:93:
70:96:34:6d:3b:fa:f4:5a:05:92:ff:a7:5a:97:3f:
87:f3:d2:86:45:14:5d:8b:38:9b:3c:46:8f:a1:0e:
b9:89:47:18:34:c3:9c:dd:49:89:15:61:04:3b:87:
95:c4:d8:6d:3c:21:dc:df:c1:e6:e9:0a:4f:91:e6:
a7:82:d6:31:bd:13:04:db:51:c0:b1:e4:5a:c4:ea:
6e:f0:35:de:74:57:c6:f9:91:d4:6d:dc:e4:99:3e:
ad:54:fd:df:c5:9d:ac:7f:94:5c:71:05:81:5b:84:
0a:76:a9:54:cb:b1:5f:4b:ba:24:08:d4:97:97:18:
ee:ac:c3:6f:20:7e:47:36:88:59:50:3c:8c:e5:0f:
66:55:51:af:05:26:5f:f4:b2:92:6f:30:8c:4a:96:
86:9e:0d:50:57:fd:49:d1:75:12:32:cc:c2:a4:4d:
1d:34:ad:9e:7d:45:5a:66:2c:f1:0c:e7:64:b6:ed:
9f:db:a1:fb:9e:83:f7:b8:e0:77:a6:b1:81:b3:c1:
ca:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1E:71:FD:B5:CD:28:75:8F:68:B7:1B:B1:23:1B:6B:22:AC:27:A7
X509v3 Authority Key Identifier:
keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/Vx5x_bXNKHWPaLcbsSMbayKsJ6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.224.0/22
Signature Algorithm: sha256WithRSAEncryption
d9:72:6b:04:1b:19:ad:47:23:95:03:88:fd:2d:f0:21:de:e4:
bb:c7:52:47:01:22:b7:fa:98:b9:4f:c1:2d:1f:a1:31:4c:69:
b1:8a:03:ad:7e:2a:0b:1f:bd:e3:be:9c:1d:63:ef:59:64:bb:
04:e8:e7:8d:5d:62:90:b6:b7:07:d5:00:a6:7f:55:46:63:02:
39:31:66:9f:38:8c:2a:bd:5b:e6:ce:f1:a9:ec:27:b9:d7:a2:
ad:1d:45:50:b3:50:d0:7d:c2:46:2e:3f:24:04:4c:f4:8e:36:
df:01:6f:2b:8b:ee:3e:9f:71:99:53:a0:ab:a3:e7:31:4d:da:
ac:95:c9:e7:6e:6a:db:eb:77:81:32:44:d1:2f:24:b2:71:3f:
28:84:14:0a:75:13:08:21:6d:e9:11:aa:30:f6:22:d8:12:29:
e9:40:c1:75:26:38:8b:cd:3f:44:2e:6f:b2:cc:99:45:7c:fc:
19:f9:07:06:85:93:ab:ad:4c:5b:38:c8:28:85:99:fe:f2:14:
bf:77:e5:46:d3:63:76:56:af:9a:68:e0:25:03:3f:88:d9:a1:
d3:24:c0:ab:ef:45:3a:80:b9:98:44:20:3a:75:29:66:fe:6e:
3f:0c:9c:43:91:eb:3c:18:96:fb:e5:9a:fb:e2:ae:be:f8:a4:
1a:fb:06:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:01:31 2025 by rpki-client