Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/V_AhGLWEz_D5OVSUmOpCvCorc0Y.roa
File: V_AhGLWEz_D5OVSUmOpCvCorc0Y.roa (raw, json)
Hash identifier: zskZj/n1B6PJEz/jXex9+d4fpdYJ2j+Fk5JUolMcUls=
Subject key identifier: 57:F0:21:18:B5:84:CF:F0:F9:39:54:94:98:EA:42:BC:2A:2B:73:46
Certificate issuer: /CN=4142d3f9b31126e0850265715c9fc32174b557a4
Certificate serial: 01941FFA07358072693E0DC10E27B1E5521B
Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/V_AhGLWEz_D5OVSUmOpCvCorc0Y.roa
Signing time: Wed 01 Jan 2025 03:47:46 +0000
ROA not before: Wed 01 Jan 2025 03:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208095
IP address blocks: 45.159.28.0/24 maxlen: 24
45.159.29.0/24 maxlen: 24
2a0f:67c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:07:35:80:72:69:3e:0d:c1:0e:27:b1:e5:52:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4
Validity
Not Before: Jan 1 03:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57f02118b584cff0f939549498ea42bc2a2b7346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:74:ad:6a:73:5e:0b:ad:b8:80:73:a4:3b:83:
fa:10:89:fc:2b:d0:8e:0e:86:e0:2c:34:fb:f6:e7:
e1:60:b5:bd:28:37:8e:a1:b2:1e:cf:bb:85:39:22:
5a:a7:65:02:65:8c:27:6d:af:ca:21:ed:4b:7d:54:
02:a9:4c:02:8e:a2:20:7f:18:83:9d:5e:5c:5d:37:
46:17:d0:56:eb:6d:34:9c:f0:29:e6:05:d6:57:59:
27:41:c5:ba:d1:28:10:d7:1c:b6:cd:89:20:bd:f8:
e9:0b:54:9a:90:dc:88:5e:21:75:7a:63:00:38:28:
5d:b4:a5:de:a2:70:0e:e9:52:b7:20:59:b2:23:ea:
64:ae:e4:80:15:cd:07:4d:21:b1:83:e5:61:6a:ea:
78:28:39:d9:b7:6e:b1:cd:cf:bf:49:27:24:a6:87:
0e:e6:55:68:9d:16:26:c9:fa:8a:7e:22:3e:a2:82:
bd:f7:78:03:8d:fc:6a:12:84:93:fe:1c:f4:0c:f6:
77:23:03:60:81:09:14:93:dc:48:79:39:5a:80:27:
c3:a5:cf:3f:fb:9f:65:2b:f8:b3:39:5f:43:c6:c1:
3d:a8:19:dc:60:40:fd:f4:a9:b9:04:48:ae:5f:ee:
6f:b5:4a:a2:e9:ad:10:a7:93:f1:c8:84:7a:20:e1:
87:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F0:21:18:B5:84:CF:F0:F9:39:54:94:98:EA:42:BC:2A:2B:73:46
X509v3 Authority Key Identifier:
keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/V_AhGLWEz_D5OVSUmOpCvCorc0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.28.0/23
IPv6:
2a0f:67c0::/48
Signature Algorithm: sha256WithRSAEncryption
7e:9e:3a:5f:66:81:cb:29:00:93:49:c2:93:e8:a0:c4:fb:02:
ce:e4:87:4d:9f:03:a2:2b:4e:07:c0:86:bb:89:b9:1a:f2:69:
40:64:c1:19:13:b6:ef:f0:64:65:1d:78:ab:68:c6:86:fa:3a:
b2:25:5e:68:52:48:0d:ad:29:0c:67:88:13:35:ef:bb:2f:e1:
60:47:c7:7c:7e:f0:a8:64:65:1b:2a:29:42:a5:21:06:84:1c:
d6:33:90:f7:e7:56:18:20:39:25:6e:17:43:d1:f8:9f:e6:19:
09:82:18:c7:74:49:a9:fc:67:14:6e:9b:66:e2:18:10:b7:e7:
4e:db:dd:6b:1b:02:3c:e8:d6:7a:7c:ff:c9:b7:c8:c1:4c:76:
78:77:ec:df:3b:bd:96:ac:68:f6:43:aa:e4:b3:2c:43:e4:0c:
95:e9:01:08:ad:13:5e:89:66:13:96:c9:62:2e:51:a2:2d:58:
99:36:1d:09:71:72:27:a6:d2:5a:97:ab:e2:d4:83:90:63:fd:
d2:91:22:ca:02:1a:a9:4b:68:ea:14:1c:37:b5:19:03:46:3c:
34:e6:b0:54:fd:f4:9c:b9:86:3e:86:df:26:a4:8c:8b:00:a5:
c4:41:fd:15:7b:e1:cc:52:62:f7:da:d5:7f:49:eb:46:fd:6b:
ff:8a:9d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:22 2025 by rpki-client