Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/48X0W84hRzbzikjtu3NRrgiUVes.roa
File: 48X0W84hRzbzikjtu3NRrgiUVes.roa (raw, json)
Hash identifier: P9ZEa8jjn4X+qLk45EN8bhgk1iRKqKb3xPDq8e5YB94=
Subject key identifier: E3:C5:F4:5B:CE:21:47:36:F3:8A:48:ED:BB:73:51:AE:08:94:55:EB
Certificate issuer: /CN=bee0a94997672a920a290ccbfd049126f7075c99
Certificate serial: 019425FDABE4BA171EA080D74A77155E0E02
Authority key identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/48X0W84hRzbzikjtu3NRrgiUVes.roa
Signing time: Thu 02 Jan 2025 07:49:29 +0000
ROA not before: Thu 02 Jan 2025 07:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61241
IP address blocks: 45.136.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ab:e4:ba:17:1e:a0:80:d7:4a:77:15:5e:0e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bee0a94997672a920a290ccbfd049126f7075c99
Validity
Not Before: Jan 2 07:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3c5f45bce214736f38a48edbb7351ae089455eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:66:39:f0:27:fe:3a:52:4c:fb:88:7e:f0:de:
80:5e:96:d6:2f:3f:33:8f:86:f2:e9:be:a3:22:cc:
9a:87:d7:8c:c8:af:28:7e:a7:81:da:53:30:94:91:
56:ed:d0:f8:35:20:2c:89:c9:1d:1d:be:b7:6b:a0:
40:11:fe:0a:93:92:94:46:3d:9f:75:3d:0c:b7:06:
32:aa:4a:7d:bc:a4:da:7f:91:f2:2d:09:54:59:b0:
b9:ff:53:ce:1c:8f:cd:08:a5:3b:6d:31:56:32:1e:
a3:63:17:dd:00:c2:48:66:5e:df:11:7c:67:7c:93:
16:de:6f:d2:86:b9:97:e4:83:ff:99:78:d7:e6:c1:
5c:f2:7f:99:5e:87:41:f2:1e:a6:32:aa:b4:52:ab:
b7:f7:41:8a:e9:03:6f:53:f2:54:64:22:6d:06:85:
a9:ac:bb:b8:ef:0a:94:e0:db:69:35:50:39:9a:42:
b1:00:30:de:4c:67:06:ac:02:b4:3f:ef:82:00:ef:
c2:51:4a:8f:50:80:40:86:29:00:e6:bf:7c:54:05:
61:af:cb:f4:ea:13:e1:98:50:08:5c:23:9c:0e:54:
0d:98:29:c4:a0:a6:93:3e:e8:ec:cd:12:e3:e4:f0:
b0:70:f8:23:51:b5:05:ed:18:87:a7:b1:e6:64:0b:
8e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C5:F4:5B:CE:21:47:36:F3:8A:48:ED:BB:73:51:AE:08:94:55:EB
X509v3 Authority Key Identifier:
keyid:BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/48X0W84hRzbzikjtu3NRrgiUVes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.132.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:68:58:9a:d8:80:f4:d8:99:a7:11:c6:a9:2e:88:48:3c:7c:
5a:0e:c9:c5:49:55:86:47:b9:36:24:24:3a:a8:0c:14:2f:26:
33:01:7d:49:00:ae:7f:46:c8:dd:2f:32:75:16:09:58:17:d5:
07:38:32:8c:db:d6:14:f9:2d:a2:10:97:42:80:8d:3a:2c:fa:
30:b5:9d:ed:27:b8:09:85:fa:d6:61:87:4b:98:3d:f1:92:3d:
b2:ea:80:d6:08:1f:09:7c:3f:50:4b:06:87:5d:97:34:30:bd:
03:ec:d9:0b:62:21:c5:16:32:ad:9b:c8:f5:e5:7d:ae:67:d5:
8c:6a:dc:18:00:fc:1c:6d:4d:e5:fd:af:dd:72:d9:4b:bf:d9:
90:d2:cb:17:cf:f5:f4:ea:aa:36:0e:18:58:22:ff:5e:a8:df:
a3:2e:85:b3:e1:27:76:41:ba:0a:d7:18:08:93:74:25:1a:a0:
b7:41:44:01:4e:71:94:49:99:99:9b:66:3c:b5:d4:50:84:2a:
52:44:95:45:51:69:99:3c:01:c4:fb:da:d8:06:b8:fb:b2:64:
95:09:41:c3:e5:14:a6:62:00:33:8b:1d:cb:d2:3d:fa:61:e7:
7d:fc:e3:bd:74:b1:6a:ea:d0:b3:65:68:40:21:3b:07:51:9a:
30:58:17:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:34:49 2025 by rpki-client