Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/1-G1EzE1WSewj5LvnP7WS6jNd8Ug.roa
File: 1-G1EzE1WSewj5LvnP7WS6jNd8Ug.roa (raw, json)
Hash identifier: jwy+yhw+XcZ5VX6F4NLidpXSZAqbXddtjz7nb2RmNdw=
Subject key identifier: F8:6D:44:CC:4D:56:49:EC:23:E4:BB:E7:3F:B5:92:EA:33:5D:F1:48
Certificate issuer: /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Certificate serial: 019426D9D0D9DCF99528120FC5C665C0A66E
Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/1-G1EzE1WSewj5LvnP7WS6jNd8Ug.roa
Signing time: Thu 02 Jan 2025 11:49:56 +0000
ROA not before: Thu 02 Jan 2025 11:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208161
IP address blocks: 45.156.184.0/24 maxlen: 24
45.156.185.0/24 maxlen: 24
45.156.186.0/24 maxlen: 24
45.156.187.0/24 maxlen: 24
2a0f:2b81::/32 maxlen: 32
2a0f:2b84:1::/48 maxlen: 48
2a0f:2b84:2a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d0:d9:dc:f9:95:28:12:0f:c5:c6:65:c0:a6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Validity
Not Before: Jan 2 11:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f86d44cc4d5649ec23e4bbe73fb592ea335df148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:51:a8:30:ab:47:52:36:cb:89:8c:37:76:
0e:bb:cd:32:8c:dd:3d:9b:9e:6c:88:60:63:e0:6a:
d7:2f:52:85:2d:f1:c1:00:b1:b2:3b:06:df:e0:29:
5e:d7:f0:6c:ae:3c:54:fa:d7:8b:6c:02:ac:bc:d2:
6b:7e:c2:d0:f5:f6:a0:e9:69:74:eb:1f:16:38:71:
f1:9c:87:01:b8:fe:7c:ca:dc:b7:d2:26:e0:c2:71:
3d:1c:58:a8:16:df:b5:1b:e0:1f:e9:80:d3:a7:77:
bb:15:90:a2:cb:45:51:39:36:98:fe:85:17:5e:2d:
80:10:f6:ad:33:c2:73:8d:6a:04:b4:9f:08:2a:91:
2b:f6:db:92:d9:cb:a5:1b:4c:8b:00:68:66:f0:3f:
e9:79:81:f7:f6:25:21:b0:bf:11:21:f2:9f:7f:51:
e6:be:9d:d5:e4:42:4e:ba:97:91:39:12:31:a3:d4:
66:65:f0:39:71:b6:d5:ff:45:e5:79:89:0b:3c:65:
c2:73:45:41:70:50:f9:33:7c:49:a6:19:f9:33:7d:
c1:ff:f2:32:40:09:dc:40:07:c2:f4:ba:0f:b6:80:
2d:75:0f:14:ec:56:60:63:a9:fe:00:b7:f5:b2:90:
27:51:17:1f:46:c6:1e:fc:36:26:44:e7:cc:37:82:
76:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6D:44:CC:4D:56:49:EC:23:E4:BB:E7:3F:B5:92:EA:33:5D:F1:48
X509v3 Authority Key Identifier:
keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/1-G1EzE1WSewj5LvnP7WS6jNd8Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.184.0/22
IPv6:
2a0f:2b81::/32
2a0f:2b84:1::/48
2a0f:2b84:2a::/48
Signature Algorithm: sha256WithRSAEncryption
2c:6e:cb:f0:de:5d:f7:44:f9:3e:8e:39:c8:78:d1:5e:c7:6b:
74:41:be:3f:95:29:77:d0:01:53:28:34:0a:8f:1a:92:6f:7f:
1a:0c:75:ba:ba:e1:be:03:88:8f:74:b8:75:3c:39:95:e0:7a:
4b:55:72:54:c2:6a:f9:0e:db:ec:9b:a2:1d:7a:bc:57:73:43:
20:bd:b0:57:44:8a:9a:cf:91:38:c1:46:aa:21:2e:4c:75:b8:
fb:72:97:a9:44:21:c3:c8:6e:ce:7c:f6:1d:c5:cc:17:06:47:
e6:8f:99:35:90:45:32:76:75:d6:48:0c:5a:8e:9c:7f:4d:1b:
e9:9a:4a:22:af:bc:ff:70:8f:81:e6:cc:be:97:3e:27:ea:8a:
b6:bd:6d:23:a9:f0:5d:ae:a2:c4:52:7e:fe:96:fd:21:fc:2a:
c8:c2:47:ca:6f:e7:71:ca:f5:49:24:46:9c:cb:a9:9f:32:13:
7e:e6:10:02:20:a5:b7:52:6e:39:8d:6f:dd:0b:60:20:e7:66:
b9:47:6d:ea:16:4d:d4:eb:1b:d2:23:ee:c4:4a:26:24:6e:c3:
c4:74:50:81:97:ff:bf:2a:32:a7:8d:39:b4:dc:2f:1b:ae:7d:
6b:5c:dc:70:55:16:40:f2:a0:b5:f3:79:d5:5c:84:bb:b8:bd:
9a:4b:70:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:26 2025 by rpki-client