Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/vp63cAkWaLjGS7EfOPzvXpDkvIg.roa
File: vp63cAkWaLjGS7EfOPzvXpDkvIg.roa (raw, json)
Hash identifier: 0yDKdiAOJx4i16Kx9AzvOBNORKc0+nI18iL2CeaAzb0=
Subject key identifier: BE:9E:B7:70:09:16:68:B8:C6:4B:B1:1F:38:FC:EF:5E:90:E4:BC:88
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5CB288760BBA33CE65E3BB2FD61B6
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/vp63cAkWaLjGS7EfOPzvXpDkvIg.roa
Signing time: Wed 01 Jan 2025 07:47:49 +0000
ROA not before: Wed 01 Jan 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 45.133.216.0/24 maxlen: 24
45.145.0.0/24 maxlen: 24
45.155.62.0/24 maxlen: 24
45.155.63.0/24 maxlen: 24
194.156.98.0/24 maxlen: 24
194.156.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:cb:28:87:60:bb:a3:3c:e6:5e:3b:b2:fd:61:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be9eb770091668b8c64bb11f38fcef5e90e4bc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:18:eb:c7:3f:79:b6:11:23:8d:dc:3c:f1:46:
1d:5e:87:02:ca:ec:83:5f:d4:2c:99:f5:cb:66:e3:
5d:d6:81:9b:e3:dd:bb:4c:16:aa:f6:f3:f2:d6:42:
c3:72:36:c2:ad:0f:63:c5:11:80:6d:85:05:54:24:
54:ab:b3:44:89:11:0d:f0:16:72:89:70:73:57:f2:
5e:55:b9:11:41:9d:8c:fd:ae:8b:78:ef:85:60:57:
3c:df:cb:34:6c:44:02:65:80:2c:61:f6:bd:a0:83:
b4:2d:1f:f4:69:b7:37:c7:a4:e2:61:f4:88:5a:ef:
84:1a:81:8e:fd:23:8b:56:ec:54:d3:56:0d:fc:05:
88:92:df:ed:26:88:1f:15:39:51:8f:49:a0:39:48:
e9:f1:71:0f:d5:a0:dc:3f:73:f3:6c:b9:04:35:3a:
3c:dc:a3:17:1c:3f:ab:1b:a1:03:7e:03:2d:f9:53:
dd:54:b2:ca:0a:85:5f:6d:97:e1:ac:2f:1b:d8:14:
d1:f8:27:ba:33:56:ca:51:d8:6a:cb:a6:e6:cb:05:
9b:5d:63:3c:c3:08:6a:3a:92:01:6e:00:c1:d7:64:
a3:84:ed:69:2b:9c:b9:46:e3:ec:43:2c:b2:0d:5a:
63:20:79:59:7f:0e:c2:7e:37:24:66:a3:51:08:14:
28:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9E:B7:70:09:16:68:B8:C6:4B:B1:1F:38:FC:EF:5E:90:E4:BC:88
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/vp63cAkWaLjGS7EfOPzvXpDkvIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.216.0/24
45.145.0.0/24
45.155.62.0/23
194.156.98.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:03:e6:e1:57:21:95:f3:ce:37:05:4f:98:11:db:20:c1:7e:
3e:16:34:4d:b6:4f:69:5c:4e:6f:d2:4a:fa:59:53:a1:47:58:
ad:4b:52:23:29:9a:4f:39:9c:8c:9b:b9:00:c0:75:60:01:db:
f5:27:3d:13:3e:1b:85:6c:c7:83:e3:ca:36:b9:eb:33:33:f6:
7c:99:65:4f:7d:64:ee:7a:17:de:57:c7:e0:65:c2:07:f7:f4:
37:0d:0b:5e:06:2a:8e:40:c6:9d:f8:c6:15:23:fa:06:f1:32:
97:26:41:77:cb:28:5b:6f:09:87:f3:f5:27:66:2d:fb:bd:ec:
4a:06:ec:f4:a9:98:20:7f:84:ed:e6:0b:97:01:35:cb:a1:27:
47:7a:2d:f2:90:fb:96:bb:eb:fd:6d:b3:c0:04:6c:7e:13:cd:
21:51:be:f1:47:ef:22:4e:8e:cd:bb:49:56:62:02:f5:3d:8f:
fc:df:8a:a6:07:86:1e:68:b7:68:6d:ce:62:fe:27:bf:05:ff:
cb:e7:b4:09:3e:26:25:08:54:b1:60:89:9b:84:b7:0d:23:4a:
46:52:58:14:eb:4a:38:4d:e6:58:f0:29:40:c4:01:ee:2a:e6:
b6:ca:75:16:8b:86:fe:cf:d0:37:f1:61:92:81:d3:47:a8:3b:
2b:87:81:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:51:44 2025 by rpki-client