Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IQ4m8RklGXXlSMsanQPZ35289t0.roa
File: IQ4m8RklGXXlSMsanQPZ35289t0.roa (raw, json)
Hash identifier: 6glV8VvxzDh1ZG6fCP7T8R7TfiBDB3662DQh4uT2oHg=
Subject key identifier: 21:0E:26:F1:19:25:19:75:E5:48:CB:1A:9D:03:D9:DF:9D:BC:F6:DD
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01942220221E48426F9EBA7ECE9CB87A9D11
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IQ4m8RklGXXlSMsanQPZ35289t0.roa
Signing time: Wed 01 Jan 2025 13:48:38 +0000
ROA not before: Wed 01 Jan 2025 13:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41378
IP address blocks: 45.131.132.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:22:1e:48:42:6f:9e:ba:7e:ce:9c:b8:7a:9d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=210e26f119251975e548cb1a9d03d9df9dbcf6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:cc:c3:a8:b0:f7:6a:fa:47:c5:57:b0:b2:
9d:ec:9f:d1:87:dc:29:78:dd:4e:ce:76:29:21:a9:
85:52:ab:8d:65:7e:f6:f7:28:76:4f:23:cd:4c:df:
98:54:4c:d7:bc:d7:64:f3:38:dd:39:ac:ef:ee:0b:
14:61:79:44:56:ec:80:27:d2:61:c5:19:f9:cc:e1:
c7:6c:5c:a6:04:f8:29:fe:b1:5e:a0:0f:3c:f4:93:
4e:d5:69:c3:a5:92:90:57:3d:f5:d2:c4:19:b4:1b:
31:a3:c3:d6:18:65:38:98:6f:3e:fc:8c:86:52:75:
31:cc:f7:4d:67:20:4f:79:64:51:bd:33:ee:8c:69:
7a:ae:bd:04:3d:cb:cf:e7:96:c4:0a:b8:ec:46:00:
8d:34:35:05:af:67:f2:7f:47:c9:04:96:ed:a3:2f:
95:b2:c4:10:3b:f6:36:35:1f:32:16:61:b2:a6:20:
0c:41:28:65:c8:87:ba:ba:6e:70:2b:e2:59:ea:6b:
6c:78:18:97:6c:c9:c4:c6:39:2a:5d:24:c0:fb:c4:
cb:54:cc:fc:cb:3f:ac:ab:8d:35:b3:a5:28:9e:56:
ae:7a:fd:3b:b7:1f:84:8e:8c:c7:9f:55:4c:f7:e7:
fe:8b:36:be:ea:94:34:82:45:04:ac:05:e4:a2:12:
7f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0E:26:F1:19:25:19:75:E5:48:CB:1A:9D:03:D9:DF:9D:BC:F6:DD
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IQ4m8RklGXXlSMsanQPZ35289t0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.132.0/23
Signature Algorithm: sha256WithRSAEncryption
02:62:65:b5:30:d6:51:cf:5d:ca:ca:5c:48:46:6b:cb:e3:94:
b3:f3:c9:b5:90:45:5b:d6:e0:5a:70:3f:ed:b4:e9:fd:1e:5f:
74:a7:6a:db:d4:3c:62:ae:cc:06:ec:df:ff:de:ba:f7:04:46:
e3:66:3e:50:71:39:c1:40:83:9e:1d:eb:a2:4f:0b:81:d7:9c:
92:6e:20:22:18:46:9d:ca:53:9a:17:f9:ba:67:73:71:a3:78:
96:94:9d:8a:fa:12:9c:fe:19:4c:af:d1:de:ce:26:63:a6:36:
c8:62:af:18:41:c3:f8:3d:b3:34:36:8a:57:76:d3:35:5a:f1:
f6:0c:36:c4:8f:88:97:77:52:e4:8c:e8:34:3d:55:cd:d3:5d:
87:35:e2:80:b0:19:5c:61:92:a8:e9:74:9c:38:54:9c:41:69:
17:3c:5a:4e:47:9b:a3:87:55:81:35:a8:16:c0:5c:df:29:58:
9b:64:6b:24:a4:4a:44:e1:39:74:49:c3:2a:69:d9:e4:f3:c0:
58:90:9c:12:5d:ec:26:04:20:ec:62:b6:48:9d:0c:fe:8f:32:
39:51:2f:3c:01:73:2d:5a:dd:f1:29:3d:c8:08:7a:3d:1a:e1:
90:15:f7:06:03:a6:07:86:8c:53:68:83:36:16:ee:d3:82:fb:
bd:e5:47:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:05:02 2025 by rpki-client