Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/ptaM1onrhJcKal0fw9HXf-WMHZY.roa
File: ptaM1onrhJcKal0fw9HXf-WMHZY.roa (raw, json)
Hash identifier: O+DKgB5l1bVNFuSJ+/nDkTvI9UVJFEJCp07K7RKqMQ0=
Subject key identifier: A6:D6:8C:D6:89:EB:84:97:0A:6A:5D:1F:C3:D1:D7:7F:E5:8C:1D:96
Certificate issuer: /CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Certificate serial: 01942521AAAA69872205092CC06F3150E96C
Authority key identifier: E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/ptaM1onrhJcKal0fw9HXf-WMHZY.roa
Signing time: Thu 02 Jan 2025 03:49:10 +0000
ROA not before: Thu 02 Jan 2025 03:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200222
IP address blocks: 45.129.104.0/24 maxlen: 24
45.129.107.0/24 maxlen: 24
2a0e:47c7:1000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:aa:aa:69:87:22:05:09:2c:c0:6f:31:50:e9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Validity
Not Before: Jan 2 03:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6d68cd689eb84970a6a5d1fc3d1d77fe58c1d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4d:b1:4e:c7:d9:4e:41:cd:bb:23:86:15:15:
b5:a7:23:9d:7a:d6:07:48:f7:f9:21:46:55:e3:e1:
7c:42:ed:c7:20:90:d7:a6:66:a8:37:35:db:26:66:
78:c4:44:75:4b:f6:2a:53:56:72:96:6b:0f:2c:61:
fe:3e:1b:d0:b5:a2:80:ed:da:79:ad:58:36:2b:91:
e9:07:e4:9a:7c:7a:82:d5:a6:d9:be:21:f8:bf:29:
a3:d7:20:d6:82:c3:61:98:66:28:0d:77:2f:dc:89:
47:7d:a0:2a:c2:4e:b3:2a:1e:84:0b:06:27:ac:38:
69:3b:bc:d2:38:65:71:bc:3a:f3:0f:ac:4f:fb:57:
a6:0c:4f:54:f5:00:b0:41:de:5b:46:89:de:6b:5a:
0e:38:ad:d0:43:cd:ff:2d:2e:a3:6a:43:35:e0:a5:
b1:6e:d8:e9:12:e6:01:e3:00:f6:a5:9e:6b:00:ed:
8b:40:1a:a2:d9:47:80:03:b8:f5:3b:e2:69:52:41:
61:b3:62:62:b4:87:ee:bf:48:7d:d6:9a:61:04:b1:
1b:3e:ee:2b:c5:03:74:c7:35:72:60:00:7c:de:b3:
6f:13:dd:ba:7f:6d:bb:5b:2a:df:f4:bc:e0:c8:ad:
62:d8:6e:ed:27:dd:88:de:ec:4f:3d:68:43:f5:21:
84:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D6:8C:D6:89:EB:84:97:0A:6A:5D:1F:C3:D1:D7:7F:E5:8C:1D:96
X509v3 Authority Key Identifier:
keyid:E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/ptaM1onrhJcKal0fw9HXf-WMHZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.104.0/24
45.129.107.0/24
IPv6:
2a0e:47c7:1000::/48
Signature Algorithm: sha256WithRSAEncryption
c1:3d:76:2f:66:26:02:53:c3:fc:00:6f:c6:8b:9e:c2:93:41:
e2:c1:f0:cc:6f:1e:f0:01:38:a8:aa:63:6f:1f:b7:5a:1b:67:
9b:f9:04:f6:0a:7a:ff:f6:6e:59:69:7b:45:4f:0f:db:03:3c:
0a:f9:7e:c8:ee:42:25:3f:fb:1f:99:70:aa:ab:03:f1:75:1c:
df:c7:14:32:a0:28:b2:6f:92:95:ec:0a:b8:44:49:53:c8:1e:
78:66:17:b5:d9:2e:24:90:3b:f0:91:61:16:f2:8d:6e:a9:7b:
00:b6:51:9a:82:80:a2:a5:15:e7:c2:9a:0c:01:b8:32:4e:1c:
a5:65:a9:58:46:b3:98:e5:4b:62:1a:d6:25:24:d7:b5:8d:80:
66:02:49:43:00:c1:f5:a9:e2:55:54:45:5f:cf:d6:d5:44:26:
52:7d:37:28:b4:67:df:c8:11:6e:81:2b:69:08:19:88:95:d3:
cb:2e:0f:4f:c9:39:be:3c:2e:2a:13:c3:7f:15:02:19:77:db:
1b:95:4c:26:06:d3:35:20:8b:92:6b:39:80:cc:35:e2:f1:f0:
ef:bf:4b:64:7f:3c:c8:c3:65:46:fc:35:00:50:d4:94:8e:58:
de:26:21:4a:fc:2c:76:7e:f3:58:3f:8d:6c:53:06:67:c9:67:
34:c8:3d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:37 2025 by rpki-client