Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/e2Jeqb9Uzg6EG4YHbxV47PgTWzk.roa
File: e2Jeqb9Uzg6EG4YHbxV47PgTWzk.roa (raw, json)
Hash identifier: j8o4Nte6arS2S28o9H96r23GZrhvfGEjib56R7pWjcA=
Subject key identifier: 7B:62:5E:A9:BF:54:CE:0E:84:1B:86:07:6F:15:78:EC:F8:13:5B:39
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 019421B1A93643A639FD431561B72C05B2B9
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/e2Jeqb9Uzg6EG4YHbxV47PgTWzk.roa
Signing time: Wed 01 Jan 2025 11:47:58 +0000
ROA not before: Wed 01 Jan 2025 11:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 45.9.128.0/24 maxlen: 24
45.9.129.0/24 maxlen: 24
45.9.130.0/24 maxlen: 24
45.9.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a9:36:43:a6:39:fd:43:15:61:b7:2c:05:b2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: Jan 1 11:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b625ea9bf54ce0e841b86076f1578ecf8135b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:54:78:8d:04:6b:77:f2:46:38:58:dd:5d:
ae:7f:8f:1a:fa:b2:7e:17:1d:e5:cf:bd:ef:e1:86:
5b:c2:05:6d:99:69:be:10:f7:04:f9:c1:6b:cc:d8:
78:5d:53:f7:5c:7f:4e:24:0e:07:06:33:57:d0:e6:
67:1f:ae:b9:61:d2:b9:e5:77:e2:19:af:1b:9a:2a:
91:df:95:f1:f9:0f:6b:17:75:5a:88:2b:26:c4:87:
30:54:3d:f5:4e:55:f2:7d:38:b6:be:8d:dd:69:b6:
b8:1b:ca:55:ee:c8:f6:a3:2d:42:fa:9b:5e:4e:c6:
15:76:86:60:4e:0e:97:13:37:c5:41:aa:6f:d3:e8:
2d:0e:08:e1:ee:24:f4:ba:c2:35:83:2e:11:c9:1a:
f1:b6:26:4b:d3:e5:1c:11:cd:a0:02:57:a1:7f:c7:
35:2a:a7:af:ab:0c:16:0a:a9:38:c4:75:02:03:bd:
ac:b4:13:39:76:87:08:a2:1a:4f:13:d3:55:1c:e9:
c4:03:33:47:0d:9a:4b:00:c2:04:87:c9:c8:11:ae:
8a:89:45:c7:19:fa:fc:4d:7b:df:d0:1e:02:6d:21:
76:61:e6:93:a0:cb:73:a8:0a:54:1d:0c:0d:af:04:
23:ed:aa:a0:51:35:7a:20:31:54:a7:b4:f8:b3:e0:
ff:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:62:5E:A9:BF:54:CE:0E:84:1B:86:07:6F:15:78:EC:F8:13:5B:39
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/e2Jeqb9Uzg6EG4YHbxV47PgTWzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.128.0/22
Signature Algorithm: sha256WithRSAEncryption
40:4e:d8:3b:72:5b:76:b4:57:0c:23:a7:82:11:14:ec:ed:4a:
ef:e8:2e:57:26:e2:c9:d0:50:19:04:00:a4:58:f0:7d:00:47:
7a:53:48:02:c5:d6:2b:6f:fa:de:0e:6e:8c:32:58:a6:8b:de:
b6:69:ae:13:81:cc:ef:98:ca:ca:62:0a:0d:1d:c0:4d:8f:e9:
f2:1d:24:bb:25:f7:14:2d:f1:2b:4e:49:5f:db:5d:b4:de:8a:
6f:47:50:4a:6d:5c:db:24:10:cd:c7:a4:cf:e1:ce:b2:cd:a6:
85:fc:87:44:e8:2d:11:55:22:18:b6:07:a8:2c:15:19:62:31:
e3:a5:2d:79:02:a5:52:01:73:f0:8c:9c:30:31:a4:38:47:17:
a2:ca:ab:09:37:42:56:ab:f6:20:fd:d7:25:62:26:c7:66:44:
c5:11:8b:53:ad:a2:d1:45:b7:ea:43:0c:c4:87:07:9b:32:63:
2c:cb:47:6a:f4:e2:37:88:a6:c2:bb:9f:79:60:67:68:4b:47:
6a:d7:ee:58:6d:b9:79:f3:51:7c:fa:fc:94:5d:1a:cb:e7:ca:
63:f9:ab:93:d5:82:d0:df:82:b1:5e:8d:38:28:66:5b:22:08:
70:fe:5d:97:32:59:f4:e7:16:c0:4a:30:41:3f:b8:d3:65:30:
8e:8b:88:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:37 2025 by rpki-client