Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/VuINTwukw5gk-GpLk8S7BysJ2QQ.roa
File: VuINTwukw5gk-GpLk8S7BysJ2QQ.roa (raw, json)
Hash identifier: /kBRgqE3JbZP3MZS0KUDmcjo+++iqmd1/lk+a59O9c4=
Subject key identifier: 56:E2:0D:4F:0B:A4:C3:98:24:F8:6A:4B:93:C4:BB:07:2B:09:D9:04
Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial: 019427B580B390EDC278C87DDCFBED2E2C44
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/VuINTwukw5gk-GpLk8S7BysJ2QQ.roa
Signing time: Thu 02 Jan 2025 15:49:53 +0000
ROA not before: Thu 02 Jan 2025 15:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29467
IP address blocks: 45.67.252.0/24 maxlen: 24
45.67.254.0/24 maxlen: 24
45.67.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:80:b3:90:ed:c2:78:c8:7d:dc:fb:ed:2e:2c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Validity
Not Before: Jan 2 15:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56e20d4f0ba4c39824f86a4b93c4bb072b09d904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:4a:ba:45:20:34:16:49:98:b9:0c:f3:2e:
bc:51:3d:12:d4:41:28:29:38:3e:e7:10:9f:7b:91:
a7:23:27:b9:25:bb:3e:62:c1:23:b3:af:be:59:86:
9d:5b:f1:9c:bb:70:17:df:a2:9f:c5:e8:bd:f9:7a:
5e:83:4b:51:df:95:07:71:1e:34:4b:19:7d:0a:d9:
0a:4c:a6:39:91:41:bd:0d:b5:67:e0:01:20:e0:4a:
2c:f5:0d:06:b6:71:4a:ca:8a:f5:f5:00:34:c7:7b:
43:62:46:5f:06:98:e7:aa:f6:2a:9b:b0:05:02:69:
ff:ec:19:22:7d:35:80:29:a6:5f:48:f7:b1:15:4f:
89:3c:db:ba:4e:18:a1:6f:d0:ff:a9:60:b7:18:c4:
65:21:43:2f:44:86:f3:bf:76:91:ce:bb:8b:56:10:
63:bd:81:11:a4:47:23:a4:04:5e:3b:fa:e6:f2:e0:
c7:9c:a2:fa:41:87:1f:b1:9e:94:f0:4c:14:e7:6b:
01:38:59:a8:17:6e:ba:36:77:a0:0b:17:0d:1e:49:
f1:ec:30:f5:58:9e:37:8f:87:a2:5b:2f:10:c3:d6:
38:09:fc:16:5c:d1:61:d2:f9:97:84:d8:22:aa:ea:
d5:db:fa:8b:ce:bd:9e:d3:fa:e1:02:cc:b4:5f:9a:
8b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E2:0D:4F:0B:A4:C3:98:24:F8:6A:4B:93:C4:BB:07:2B:09:D9:04
X509v3 Authority Key Identifier:
keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/VuINTwukw5gk-GpLk8S7BysJ2QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.252.0/24
45.67.254.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:13:49:b1:f8:71:09:43:a2:9a:f6:1d:0c:60:cf:f0:1f:11:
da:62:d8:a2:12:be:ed:7c:30:8b:ee:26:0e:7c:f1:bb:d7:b0:
c4:6e:e4:9a:de:94:65:49:b8:96:c8:d9:e6:60:24:99:26:11:
72:19:cb:29:2d:60:0d:42:5e:77:b2:a4:c9:fd:63:bb:a4:cd:
f7:09:86:a9:39:11:bb:61:a0:97:ab:2a:b7:53:86:6e:9d:10:
14:69:37:a1:0f:2b:59:cb:67:27:fb:1c:ec:7b:0f:09:dd:a6:
c6:c7:27:d5:d0:1b:fb:67:fb:e5:87:4b:de:64:e3:ca:5a:19:
f8:bb:b5:b4:6f:60:f0:1b:dd:e7:0f:2c:ab:ce:f3:c9:1f:5d:
e2:ed:bc:1c:d9:64:7c:38:a6:c4:15:9b:a6:91:fb:6c:d9:33:
b0:79:39:19:66:d6:1d:96:c4:62:2c:60:cf:41:1d:38:b7:55:
6a:ab:95:76:53:3b:19:3a:1d:5b:aa:52:91:d5:27:ef:8a:55:
85:d5:cf:73:d9:a6:35:af:2b:79:66:42:78:71:26:70:55:f1:
84:05:e2:62:66:e8:6d:8f:24:5b:70:7a:3b:04:b8:ff:2d:31:
19:83:fe:9d:64:15:0d:c3:de:65:58:81:87:b5:87:f7:ee:20:
52:e0:bc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:01:31 2025 by rpki-client