Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/d-qZVEez3-tqSbLZHyKHdZ5qcJA.roa
File: d-qZVEez3-tqSbLZHyKHdZ5qcJA.roa (raw, json)
Hash identifier: +81/qDkled7/tuehBezhqXR9TX8Qi/57Cwe4Hugu7Ps=
Subject key identifier: 77:EA:99:54:47:B3:DF:EB:6A:49:B2:D9:1F:22:87:75:9E:6A:70:90
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 019426D951E66E537D95CD689E1E81E873C3
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/d-qZVEez3-tqSbLZHyKHdZ5qcJA.roa
Signing time: Thu 02 Jan 2025 11:49:23 +0000
ROA not before: Thu 02 Jan 2025 11:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208111
IP address blocks: 45.135.212.0/24 maxlen: 24
45.135.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:51:e6:6e:53:7d:95:cd:68:9e:1e:81:e8:73:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jan 2 11:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77ea995447b3dfeb6a49b2d91f2287759e6a7090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f7:ed:ce:dd:8f:eb:e3:29:e6:e6:69:31:42:
9e:df:7e:7b:02:96:d1:2c:ee:c1:b7:35:01:28:65:
df:68:38:14:55:51:f1:b9:99:7e:1f:48:ca:16:b7:
d0:8f:4d:9f:15:ab:0f:cb:d8:90:c9:15:b3:31:7d:
2f:38:db:bf:52:78:c2:df:ca:4b:c5:ee:9d:a0:9d:
53:4d:be:80:09:21:8f:2e:68:7d:3b:a3:4b:52:81:
40:a5:d8:98:be:80:c7:f0:e9:88:cd:43:78:13:0d:
36:4d:12:11:40:29:1d:c4:ff:47:72:8b:14:f9:e3:
e0:1a:d7:91:58:35:71:39:56:36:cd:da:2e:bc:53:
5d:75:54:1a:39:9f:a3:4c:b4:b6:0e:83:bb:29:69:
89:0f:36:24:34:db:b8:92:5a:d4:73:db:8c:2a:0c:
a5:2e:71:9a:ee:ce:07:48:4a:cf:fc:3c:d1:98:5f:
be:ae:26:50:32:be:73:9d:ad:16:1d:03:ee:4d:dc:
10:1b:27:12:59:d4:74:e2:db:fc:8e:34:ee:65:fc:
84:f6:bc:74:db:84:50:3d:ea:ff:14:68:8f:17:ed:
a1:36:60:0a:33:72:06:e4:9f:9f:44:17:b7:15:cf:
b1:41:9b:4c:8e:b9:6b:4f:5f:e4:59:c9:e9:86:0e:
a6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EA:99:54:47:B3:DF:EB:6A:49:B2:D9:1F:22:87:75:9E:6A:70:90
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/d-qZVEez3-tqSbLZHyKHdZ5qcJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.212.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:d4:47:f4:75:3c:3c:16:9d:67:7b:12:5f:0c:21:d6:d6:8c:
fb:8e:06:7e:5b:c5:b2:f3:de:d8:0d:45:54:66:99:8b:bf:66:
ec:6d:b8:2f:03:f0:07:96:b5:96:64:70:96:ca:00:4b:62:76:
55:ce:92:0f:8f:76:d7:8b:c7:18:48:bf:f4:97:bf:bd:07:ea:
5c:00:b4:ae:76:b0:fe:f1:57:cd:10:ec:41:09:b7:06:e3:4f:
97:4f:d5:c5:48:d2:46:8e:fe:e6:2a:e6:e0:37:03:97:13:b3:
d0:47:b4:e0:79:14:66:55:8a:13:b8:24:7e:76:0b:bd:68:2f:
cb:be:6a:ce:1f:2d:c3:4e:77:8e:f0:87:fa:96:ed:99:67:32:
f2:c5:46:a9:a5:4e:23:34:5e:09:b1:bd:3d:dd:35:57:38:2e:
47:b8:1a:3d:c8:22:1c:6c:fb:25:f0:e5:28:cd:e4:22:5f:fe:
1e:9b:5c:53:a3:9a:7d:1b:10:13:09:14:06:ee:b3:85:ff:3b:
e6:f3:16:29:f7:46:b7:13:e3:88:dd:f1:28:f9:27:8e:2f:3e:
0f:dc:19:fb:b1:be:bc:41:ef:53:f8:3a:bd:d9:20:93:af:18:
67:73:f4:a3:55:17:c6:c1:e7:2a:1b:3e:ca:b6:ed:45:a4:13:
13:c3:d0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:26:55 2025 by rpki-client