Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/or5hKOOSPrV7MlMa3w0kg7Lt0yU.roa
File: or5hKOOSPrV7MlMa3w0kg7Lt0yU.roa (raw, json)
Hash identifier: lRtVfCvHJXty9ApqE+Cl9Ij4M7rM8kj+eoEk880GXv0=
Subject key identifier: A2:BE:61:28:E3:92:3E:B5:7B:32:53:1A:DF:0D:24:83:B2:ED:D3:25
Certificate issuer: /CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Certificate serial: 0194221FF9BA110689AF35D086A1B29962C3
Authority key identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/or5hKOOSPrV7MlMa3w0kg7Lt0yU.roa
Signing time: Wed 01 Jan 2025 13:48:28 +0000
ROA not before: Wed 01 Jan 2025 13:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56958
IP address blocks: 45.130.18.0/23 maxlen: 24
178.211.133.0/24 maxlen: 24
201.46.112.0/23 maxlen: 24
2a12:d280::/31 maxlen: 31
2a12:d282::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f9:ba:11:06:89:af:35:d0:86:a1:b2:99:62:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Validity
Not Before: Jan 1 13:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2be6128e3923eb57b32531adf0d2483b2edd325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:10:cc:48:55:ff:d5:29:b5:3c:32:04:a5:03:
e0:9e:8f:ee:6b:07:a0:d1:3a:64:61:0f:c4:21:60:
45:fc:90:66:8d:c2:a6:b8:2f:60:43:30:79:61:87:
88:28:0c:0e:a2:a4:a2:bc:c7:3f:d6:1d:72:5e:fc:
c6:db:f6:cd:f9:e2:4f:aa:5d:79:f8:61:f3:de:42:
21:96:a8:1b:3a:ac:90:5f:e1:08:90:dc:2b:da:49:
5c:f7:73:3b:32:6e:91:85:f7:f9:42:a0:d1:ed:cc:
7d:8a:77:04:42:97:e5:f1:39:e4:1e:b0:86:bc:3f:
55:c3:58:d5:50:fe:ed:c1:6b:ad:00:fa:59:32:08:
dc:ec:6c:e2:bd:ff:e8:93:a1:29:ce:a9:c9:bd:72:
a7:26:9e:c3:09:b6:40:7b:3d:cf:87:21:80:85:b5:
e6:2b:98:d8:21:da:a4:9f:fe:9a:3a:dd:5f:30:35:
4c:9d:00:b6:ba:b1:29:2a:e1:d0:05:96:b4:58:8b:
2c:08:35:09:d1:15:ae:fd:65:48:50:5c:53:c5:5c:
2d:35:6f:11:7e:2b:25:be:42:44:8e:98:dd:ac:6a:
69:d5:b3:91:c3:37:f4:dc:12:29:4c:d5:5d:59:51:
d2:88:78:b2:62:b7:99:9a:87:d4:47:e6:13:6b:58:
c2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BE:61:28:E3:92:3E:B5:7B:32:53:1A:DF:0D:24:83:B2:ED:D3:25
X509v3 Authority Key Identifier:
keyid:98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/or5hKOOSPrV7MlMa3w0kg7Lt0yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.18.0/23
178.211.133.0/24
201.46.112.0/23
IPv6:
2a12:d280::/30
Signature Algorithm: sha256WithRSAEncryption
5a:60:b7:82:bb:cd:8c:6c:01:46:ca:42:13:74:74:01:b7:23:
67:97:9c:95:af:82:c6:09:3e:ea:c5:8c:26:e3:e7:61:53:bf:
42:f9:03:6f:f6:d4:16:1d:69:6e:37:17:64:65:52:e8:35:70:
f9:cb:f6:66:27:4d:04:14:5f:01:f0:26:5e:8e:a8:52:7d:04:
84:07:8c:85:1c:4c:23:5d:a6:e0:70:21:6d:7c:54:ae:b0:13:
d9:cc:94:c7:c5:b0:a5:9a:a4:d1:18:df:44:9f:dd:ef:f8:ec:
70:99:3d:d7:ff:9c:33:92:99:60:91:ba:95:d6:f0:a6:2f:88:
c4:67:32:3c:0e:58:67:bf:10:ef:c3:a9:04:b9:7c:37:b6:2b:
1b:ef:2a:9f:d8:32:8d:36:24:3c:18:ef:02:38:bd:a7:7a:3d:
e5:a6:9b:fd:75:75:b9:cc:8a:a6:82:78:04:d1:a4:ab:a7:76:
00:b4:22:24:f4:84:d4:08:86:fa:49:7b:60:34:91:b6:4b:1e:
16:f8:e4:15:96:31:72:a9:63:5f:1b:70:47:85:7b:8e:59:87:
54:e5:46:77:59:b5:4b:39:63:33:80:8c:23:af:c2:7e:cd:88:
b8:99:23:e9:0a:81:31:4c:3d:cd:ba:e1:7c:79:45:7e:c5:53:
0d:f2:dc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:16:35 2025 by rpki-client