Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/a5dgM43xwH6TzzG3OU4-DU-VReU.roa
File: a5dgM43xwH6TzzG3OU4-DU-VReU.roa (raw, json)
Hash identifier: lvQLcSmhppO+nBAUrEWVk8HCNuzIbjnnhIRTEmwBZUw=
Subject key identifier: 6B:97:60:33:8D:F1:C0:7E:93:CF:31:B7:39:4E:3E:0D:4F:95:45:E5
Certificate issuer: /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Certificate serial: 0194266A4DBAA92A6A6D7935472DB370A0BA
Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/a5dgM43xwH6TzzG3OU4-DU-VReU.roa
Signing time: Thu 02 Jan 2025 09:48:08 +0000
ROA not before: Thu 02 Jan 2025 09:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8132
IP address blocks: 155.45.0.0/17 maxlen: 17
155.45.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:4d:ba:a9:2a:6a:6d:79:35:47:2d:b3:70:a0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Validity
Not Before: Jan 2 09:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b9760338df1c07e93cf31b7394e3e0d4f9545e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e4:68:3c:e5:b1:40:a3:55:82:2c:28:42:56:
53:c0:fc:e0:67:f0:ba:d3:5d:b3:22:81:03:4e:0a:
30:5a:0e:fa:8b:18:d9:b0:50:73:64:0e:d7:7f:fb:
f9:cd:45:1f:15:12:c1:6b:4c:f4:30:da:91:b4:2a:
fb:27:f1:91:6f:af:94:6e:eb:f4:a8:2b:58:d2:c0:
b2:8b:96:62:bf:67:c7:05:c3:de:d6:f4:89:76:fd:
5b:2a:74:5f:96:87:4a:e0:04:d1:fc:54:86:42:88:
3f:9b:5a:e8:ae:38:46:3c:da:9b:4e:7c:27:f7:09:
2a:45:da:6b:8a:f5:6a:8e:b2:51:ab:c0:2a:fd:45:
45:85:81:ab:7f:09:ed:02:1f:b2:14:61:f3:78:7c:
b6:8e:ac:04:cb:21:0c:77:0d:25:db:a9:91:69:92:
8a:02:4d:1c:13:71:2b:98:d1:7e:e6:67:5e:de:20:
34:51:93:1d:c1:96:26:86:f5:7a:5d:d6:b0:97:34:
fd:82:25:d2:14:f7:0d:98:47:97:6c:7d:a7:3a:83:
8a:48:36:9e:4c:91:17:de:b8:90:56:c4:ac:58:60:
fa:c3:c0:0b:fe:72:1a:b2:1b:cd:69:04:15:fa:ce:
fd:b0:28:d6:45:5a:2a:74:07:5c:a2:04:d5:1c:d6:
c0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:97:60:33:8D:F1:C0:7E:93:CF:31:B7:39:4E:3E:0D:4F:95:45:E5
X509v3 Authority Key Identifier:
keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/a5dgM43xwH6TzzG3OU4-DU-VReU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.45.0.0/17
155.45.249.0/24
Signature Algorithm: sha256WithRSAEncryption
08:32:ed:51:00:3a:c9:7f:b9:34:a9:5b:28:e3:02:27:3a:1e:
16:31:d0:11:b7:82:76:10:b3:91:1a:50:e1:30:d2:a4:5e:eb:
d3:17:d0:ec:e3:8e:77:40:e1:54:5f:5b:8a:c4:a9:3e:9f:2f:
42:5e:20:6b:23:7e:3c:53:8f:f3:38:79:40:0b:fc:e7:0e:77:
a3:0b:cd:fe:04:20:05:4f:15:49:ff:17:91:87:8d:54:59:63:
93:69:9e:8e:62:df:07:9a:4e:a9:4d:32:db:0a:49:a4:ba:ec:
05:4b:42:6a:66:ca:9d:6f:7b:7e:4a:70:0c:44:cd:d3:4c:c6:
44:87:e4:1e:51:99:95:b7:a5:30:16:a7:55:89:d0:4b:2f:75:
5c:29:fe:e2:2b:35:12:e2:aa:c5:a9:5f:0b:f8:ff:d2:b8:5d:
40:f3:32:fa:ac:9c:d7:c9:36:99:d0:ff:d7:e7:ff:c2:8f:d4:
a5:a9:da:1c:ef:0d:50:e6:75:96:dc:7e:f9:d6:26:c0:e9:38:
38:ba:53:4e:bc:de:17:1f:fb:87:0f:73:59:f9:2c:a8:07:9d:
47:8f:19:66:d9:fe:34:b9:8d:84:12:c7:2d:12:3d:5a:de:a1:
66:ae:ae:ab:f2:3a:56:16:80:c1:55:4b:3c:8c:cb:0b:24:b3:
84:b5:e2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:01:21 2025 by rpki-client