Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/4AyXvezl-yqEPm9B7grorGuuaCU.roa
File: 4AyXvezl-yqEPm9B7grorGuuaCU.roa (raw, json)
Hash identifier: nr0Tbymm5gT2Px5I4yZcmfEB00Mwgpc5V9ZF1AUNTUw=
Subject key identifier: E0:0C:97:BD:EC:E5:FB:2A:84:3E:6F:41:EE:0A:E8:AC:6B:AE:68:25
Certificate issuer: /CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Certificate serial: 01942521AC728F150E93068819B5D80EBD5D
Authority key identifier: E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/4AyXvezl-yqEPm9B7grorGuuaCU.roa
Signing time: Thu 02 Jan 2025 03:49:11 +0000
ROA not before: Thu 02 Jan 2025 03:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212362
IP address blocks: 45.129.105.0/24 maxlen: 24
2a0e:47c6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ac:72:8f:15:0e:93:06:88:19:b5:d8:0e:bd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Validity
Not Before: Jan 2 03:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e00c97bdece5fb2a843e6f41ee0ae8ac6bae6825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4a:b2:0c:4d:38:ce:1a:88:68:4e:0d:52:d0:
bd:5a:8b:e2:2b:64:6d:92:2a:58:cb:7f:18:27:0e:
46:41:a3:1b:7e:16:b6:a0:8b:2e:c7:bb:3e:9a:3c:
05:d5:ff:e9:83:1e:60:2f:0e:b5:cf:d7:dc:db:a2:
9d:3b:94:2b:02:99:7d:b9:d7:72:7c:c5:fc:4a:64:
62:92:59:3e:ce:92:62:9a:c4:ca:7f:92:0f:80:91:
b2:23:cc:5c:5e:e2:ec:fa:c1:df:dc:2a:fe:29:9f:
5d:1b:80:ac:05:58:62:fa:68:3e:49:7b:3d:d2:7b:
fa:82:f5:2b:2d:e6:ca:f8:71:3b:7a:1d:ab:e0:2a:
8e:b8:1c:87:22:b6:2c:81:10:41:5c:ce:73:ac:24:
5d:a1:6f:5e:d2:cc:9d:f4:97:3b:d4:fd:dc:63:3a:
22:7d:2e:85:f8:ac:cf:99:8d:1c:20:9b:d8:12:92:
e2:c8:50:65:78:1e:d0:50:49:15:70:19:66:61:c6:
40:c2:35:df:54:d3:72:b9:17:b3:00:f0:ff:f6:9e:
b2:34:3d:b7:a2:5e:45:a0:70:9a:02:c4:e0:f4:98:
e4:44:11:2b:66:ad:1a:0a:ae:77:d6:02:4b:aa:c5:
7c:80:89:cf:d1:af:f6:f0:56:ac:5f:73:12:6d:e2:
3f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0C:97:BD:EC:E5:FB:2A:84:3E:6F:41:EE:0A:E8:AC:6B:AE:68:25
X509v3 Authority Key Identifier:
keyid:E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/4AyXvezl-yqEPm9B7grorGuuaCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.105.0/24
IPv6:
2a0e:47c6::/32
Signature Algorithm: sha256WithRSAEncryption
87:e1:d2:22:96:25:52:c4:99:fd:18:14:79:59:14:0f:e3:dd:
9f:1d:74:be:6b:82:94:be:8f:5b:32:31:43:e2:4a:67:ae:63:
a6:2b:7f:65:e8:a8:e2:60:30:a9:01:b0:4a:69:6b:da:3e:46:
70:d6:d7:bc:3e:49:b3:2b:d8:7f:ac:e8:fd:d4:c3:b9:27:e0:
72:b4:91:24:c2:2f:bb:5e:ca:1f:63:e6:53:b9:72:bd:97:ca:
cb:a8:be:07:6e:f8:c1:2a:e2:b7:d3:9d:4c:36:05:d4:95:ae:
34:df:76:4f:a1:aa:37:e7:84:df:1b:b3:0b:0b:62:a4:8c:39:
c1:34:a2:e4:5e:20:f9:0f:6b:e2:53:1d:57:4d:ec:3c:c0:1f:
4f:2f:bf:a2:fb:a3:f6:11:2c:2f:da:4f:d3:34:2f:ed:1c:79:
de:a5:d5:5a:f8:e7:e2:c9:1d:57:60:d0:4f:f5:6f:c7:ba:14:
2d:bc:6d:5a:ad:17:ef:2e:cc:10:49:8b:99:49:61:32:a6:ef:
87:7a:9d:d8:da:31:ae:4a:83:6f:c6:20:05:e8:76:c4:6d:67:
d5:56:1c:12:d7:f6:d9:84:15:52:ab:72:bf:1a:0d:77:34:b7:
c3:37:07:76:08:f0:f3:d8:7c:bd:10:8e:80:de:29:7a:a2:0c:
62:ea:5e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:51:56 2025 by rpki-client