Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/Q2uH0kQd1mGKZxWodmd4mRQRHhk.roa
File: Q2uH0kQd1mGKZxWodmd4mRQRHhk.roa (raw, json)
Hash identifier: sUsJy3husqKKmvF1HsBe/XSQWllpwuvFf6kbg39WROs=
Subject key identifier: 43:6B:87:D2:44:1D:D6:61:8A:67:15:A8:76:67:78:99:14:11:1E:19
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019422FB62EB1547EF564C22FA296A402ABC
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/Q2uH0kQd1mGKZxWodmd4mRQRHhk.roa
Signing time: Wed 01 Jan 2025 17:48:07 +0000
ROA not before: Wed 01 Jan 2025 17:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61390
IP address blocks: 45.130.70.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:62:eb:15:47:ef:56:4c:22:fa:29:6a:40:2a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 17:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=436b87d2441dd6618a6715a87667789914111e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b4:8f:8a:ee:6d:b8:aa:64:9f:35:f3:a8:4a:
21:1c:00:83:b7:16:00:2e:d0:20:d3:18:a4:f6:b4:
19:d7:07:e2:57:e7:2b:cc:9f:1c:9c:66:49:82:8c:
53:7c:00:90:79:1e:b3:4a:4a:0b:71:6e:a5:f6:5d:
2b:b3:f8:58:ea:1a:49:00:d0:0f:b2:72:a5:05:2e:
d2:f3:cc:8f:99:41:95:0c:dd:c8:7a:28:5e:12:df:
65:a7:97:70:a2:c8:a3:b2:0c:3f:2e:53:7e:89:94:
42:b9:86:5b:40:ed:49:ad:1a:4e:61:fc:29:ca:0b:
f7:10:43:18:0d:37:4e:77:6f:54:63:90:94:a2:de:
ee:47:da:ce:f8:af:cb:f6:d4:41:ef:62:2c:66:f1:
12:09:c3:b6:c9:7f:a9:1c:06:5c:f5:6e:c5:f6:05:
22:33:c1:9b:bd:b3:2d:a5:dd:bf:9a:62:13:53:b6:
27:bb:52:f3:e5:de:69:2f:4b:52:ab:6d:dc:f7:ba:
db:3d:9c:fd:09:d7:ba:74:b7:8b:a4:3e:fc:9b:40:
5e:c0:9b:35:1c:6f:8f:65:1a:29:f1:45:66:84:fb:
01:25:dd:24:c9:f2:2e:af:fe:3d:21:64:a8:f6:ce:
2e:ab:74:92:96:f5:b6:7d:91:8f:42:a9:9d:46:d8:
88:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6B:87:D2:44:1D:D6:61:8A:67:15:A8:76:67:78:99:14:11:1E:19
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/Q2uH0kQd1mGKZxWodmd4mRQRHhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.70.0/23
Signature Algorithm: sha256WithRSAEncryption
d4:0b:ce:19:dd:1a:63:9c:dd:ce:ff:af:25:c1:ae:1f:d0:27:
62:f7:78:ba:77:64:3e:9f:8b:94:af:cd:da:f3:bd:41:73:49:
71:0f:48:8b:e3:fe:33:30:5e:8b:49:f2:4a:4d:db:d3:9e:86:
47:18:34:74:dd:bb:f8:34:da:12:4e:df:b4:c8:93:bf:d9:41:
83:9e:de:61:8d:cc:fe:d5:25:6a:54:e9:de:99:89:0e:44:4b:
26:d5:02:b0:a8:0f:58:9d:69:a2:e2:d3:1e:d1:50:38:cd:64:
30:b4:fb:90:19:f3:41:e9:6a:b6:73:56:bd:16:1e:31:0f:0f:
19:92:f5:98:e1:83:83:c3:6c:0e:19:61:9d:96:54:be:a2:c6:
8a:5a:80:c7:3c:98:16:21:35:46:a4:3a:76:ea:04:47:87:c1:
62:b2:5a:51:cd:19:27:d9:f0:56:e6:b9:9e:1c:d2:da:a0:ea:
5b:3b:e5:b7:00:54:8e:4d:95:9d:1a:69:60:a9:60:49:57:53:
08:8b:d2:2d:35:42:f9:35:03:28:85:6a:bb:15:75:f5:40:81:
ec:93:02:c0:ac:9b:61:b7:89:29:f8:1b:69:da:fe:e7:af:fd:
48:df:61:29:4a:5d:15:db:72:e2:05:6d:13:17:4c:fa:10:8c:
92:02:c9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:55:38 2025 by rpki-client