Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/oLxnPDOjx34zqrjQ27ju_ZuWYV4.roa
File: oLxnPDOjx34zqrjQ27ju_ZuWYV4.roa (raw, json)
Hash identifier: aFW6lgXJpeg0bmQI7iZHPliZcmK0ToNkD5OYtI2CIQI=
Subject key identifier: A0:BC:67:3C:33:A3:C7:7E:33:AA:B8:D0:DB:B8:EE:FD:9B:96:61:5E
Certificate issuer: /CN=e1a323546484220cb402063380f4016369262acf
Certificate serial: 01942444BB382DE7EFFEEB41304E3E0BCA3D
Authority key identifier: E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/oLxnPDOjx34zqrjQ27ju_ZuWYV4.roa
Signing time: Wed 01 Jan 2025 23:47:51 +0000
ROA not before: Wed 01 Jan 2025 23:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202361
IP address blocks: 45.129.167.0/24 maxlen: 24
2a13:40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:bb:38:2d:e7:ef:fe:eb:41:30:4e:3e:0b:ca:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a323546484220cb402063380f4016369262acf
Validity
Not Before: Jan 1 23:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0bc673c33a3c77e33aab8d0dbb8eefd9b96615e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:53:c5:43:b4:b9:57:05:2f:23:b5:91:00:
fc:47:0f:bd:8e:58:12:08:ed:9d:93:d6:d9:1f:37:
88:3d:70:27:7b:85:c5:97:5c:47:e4:c3:d8:d4:01:
bf:19:41:47:de:bb:23:20:f9:39:b2:12:ff:e2:33:
de:ac:b9:e4:80:d2:4e:1a:93:8a:0d:57:c0:e5:c7:
96:cc:9d:c2:28:70:57:3d:df:e6:3f:ca:a5:a5:16:
46:99:e4:fe:e1:a2:a2:0f:33:c8:72:5d:0c:55:02:
bd:29:9c:16:1f:ef:be:e8:82:39:98:dd:31:0e:ef:
8a:e8:eb:52:41:47:f1:43:96:45:39:22:37:ed:d6:
4d:64:04:e2:45:e2:e2:cb:b7:e3:5a:f9:cc:6e:dc:
1e:13:93:6e:f1:a1:00:65:31:d5:03:5e:f3:29:4d:
c7:57:c9:eb:6e:66:98:04:24:15:9f:48:ea:c0:0f:
21:32:85:e4:a0:17:5f:85:cf:1f:56:54:90:14:79:
e2:9a:b1:21:dc:d6:9b:8d:55:43:df:f2:30:c5:ad:
32:99:09:a7:87:43:45:b0:8a:19:9e:16:7f:60:26:
36:42:22:b9:2a:80:e0:b6:69:f8:e8:22:af:53:d7:
99:6f:12:e2:0d:4e:ff:25:86:c1:fc:59:22:2d:d5:
d2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BC:67:3C:33:A3:C7:7E:33:AA:B8:D0:DB:B8:EE:FD:9B:96:61:5E
X509v3 Authority Key Identifier:
keyid:E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/oLxnPDOjx34zqrjQ27ju_ZuWYV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.167.0/24
IPv6:
2a13:40::/32
Signature Algorithm: sha256WithRSAEncryption
6b:60:25:4f:2f:3b:f0:c7:6f:0c:bf:e3:1e:a8:a5:35:cd:78:
a3:06:ac:37:bf:0a:7d:1e:2b:6e:ca:e5:8f:80:43:cd:7f:62:
5e:15:67:e0:4d:89:82:54:40:18:2c:a5:0d:13:b7:32:61:32:
0d:95:43:bb:3c:f0:19:0a:6f:e9:f6:05:8d:b6:1b:85:cc:f3:
69:e2:cc:ec:39:74:25:68:e4:e0:30:01:c0:8e:34:f4:9b:18:
6b:67:3c:cc:da:0d:e5:a0:e6:c1:d1:33:6e:5b:ca:81:6d:13:
bd:b6:98:4c:ac:aa:79:f0:64:e3:d6:34:73:22:c0:96:12:70:
56:7d:99:f0:8a:fd:7c:8e:7d:3e:33:64:5c:b0:54:45:1b:35:
4b:c0:2a:66:a2:a3:73:78:83:e3:29:92:ef:b1:b2:9a:27:99:
6b:02:a8:26:bb:b2:62:fb:fe:bb:30:68:c2:9c:e4:48:11:c1:
d2:d1:07:ab:9c:e1:14:af:07:11:c4:51:a6:19:75:67:b8:61:
3c:9d:13:4d:8c:da:32:a5:d1:be:43:6d:58:28:54:2c:fc:89:
c3:7d:f2:69:57:7d:a5:c1:31:22:18:e1:5b:17:c7:a7:bd:0b:
1a:08:61:b8:1a:ec:d8:99:d8:c8:0b:df:59:0a:51:71:b2:f1:
49:a1:6c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:49 2025 by rpki-client