Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/Xiq-7Jev0boBEtsil-XGVvUzgqg.roa
File: Xiq-7Jev0boBEtsil-XGVvUzgqg.roa (raw, json)
Hash identifier: Xk6kyPCoONS0HAtum1UvzVR1hPVGojYHRenom/WPJ28=
Subject key identifier: 5E:2A:BE:EC:97:AF:D1:BA:01:12:DB:22:97:E5:C6:56:F5:33:82:A8
Certificate issuer: /CN=29493731efccc74ad5c273874b9360f7aa689465
Certificate serial: 019421441B6DEBCB439786D6331FEC9F7AE4
Authority key identifier: 29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/Xiq-7Jev0boBEtsil-XGVvUzgqg.roa
Signing time: Wed 01 Jan 2025 09:48:19 +0000
ROA not before: Wed 01 Jan 2025 09:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208376
IP address blocks: 45.141.228.0/22 maxlen: 24
2a0e:d0c0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1b:6d:eb:cb:43:97:86:d6:33:1f:ec:9f:7a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29493731efccc74ad5c273874b9360f7aa689465
Validity
Not Before: Jan 1 09:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e2abeec97afd1ba0112db2297e5c656f53382a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ee:6d:27:ca:8f:84:4d:89:32:79:57:f8:81:
8c:57:2e:52:78:f2:bb:a6:8d:6a:6c:d5:7c:9c:59:
25:96:6f:3e:5b:e7:17:ca:27:a5:0c:a1:db:8c:c3:
31:8e:12:a7:82:82:48:0a:36:c2:64:5b:1f:7f:29:
19:96:e5:fd:62:22:44:4c:7a:99:e0:c4:9a:a2:b4:
a4:2a:8d:e8:15:47:59:e4:50:4a:3f:95:86:bf:87:
71:3a:c7:6b:16:17:17:52:12:e8:be:ca:c8:d8:23:
59:d1:60:a8:f9:d8:c0:71:db:5a:42:d6:16:4e:ff:
c8:5f:c8:f1:39:91:33:3a:87:35:4a:76:63:68:55:
19:3e:d0:43:d6:27:c6:91:cc:bb:28:ee:3e:ea:1e:
39:d2:94:ea:85:f1:e0:1d:d4:c8:3b:e1:07:df:d8:
ca:83:e3:c0:cf:17:ee:17:c7:e6:1c:c8:58:88:7f:
72:cd:8b:53:17:51:67:e8:8e:4a:6a:b8:df:b3:a4:
5c:8f:7d:55:73:c1:e6:6c:38:cf:eb:7e:c5:b1:2b:
ec:11:9e:26:cd:cc:fc:13:ab:bc:0d:a8:e6:67:ba:
b9:42:a8:5a:f7:62:d3:67:70:e6:03:18:00:60:f3:
20:7b:d5:87:32:8e:a4:5d:57:c5:1b:b7:78:20:06:
81:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2A:BE:EC:97:AF:D1:BA:01:12:DB:22:97:E5:C6:56:F5:33:82:A8
X509v3 Authority Key Identifier:
keyid:29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/Xiq-7Jev0boBEtsil-XGVvUzgqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.228.0/22
IPv6:
2a0e:d0c0::/29
Signature Algorithm: sha256WithRSAEncryption
d1:40:ad:bd:3c:ad:38:8c:ad:7b:bb:76:83:93:e0:21:92:67:
f9:1e:fe:6a:fe:af:99:8a:5d:52:1f:c1:56:33:96:30:dd:97:
fb:be:08:78:63:27:6b:65:8b:f1:2e:8c:fc:e6:06:59:7c:b0:
96:d8:b6:2c:ef:88:85:e3:c9:f7:7c:8c:ee:bd:c5:7a:02:57:
2a:29:97:0e:56:ea:a0:5f:c8:ab:c2:3b:51:42:a8:73:60:2d:
d8:ba:30:54:26:92:d0:05:8e:6a:76:5f:5f:d6:2f:cb:6c:c1:
69:3c:c9:b8:25:ce:5f:cc:ac:f5:c7:96:66:d5:3d:18:b5:4a:
f6:68:c3:c0:3f:5b:a5:14:7f:a0:ec:e4:69:d6:36:38:f6:82:
9e:d6:41:12:08:2a:b9:b5:27:72:12:10:26:96:a9:fc:e4:bf:
dd:c3:76:4f:aa:f9:49:e1:36:20:47:da:d6:cf:b0:21:c6:6c:
09:b6:01:9b:73:65:78:c3:29:31:6c:46:c4:98:2c:0b:46:c2:
be:16:0f:df:1a:c6:9e:93:ff:d6:94:96:c3:26:b3:76:09:ae:
bc:1a:ef:9d:31:59:87:10:35:aa:35:fc:46:20:ad:e6:51:6b:
6f:4a:fd:e3:67:d2:5f:30:cf:75:65:6c:dc:dd:87:b1:4d:ea:
e7:d6:4e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:58:45 2025 by rpki-client