Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/LUD2e9X5YgRI-3ZtkCHu9Yflftw.roa
File: LUD2e9X5YgRI-3ZtkCHu9Yflftw.roa (raw, json)
Hash identifier: xNtD+g99F6IM6Fc5L57RcYCtCnz6FTymTmJECNWv3U8=
Subject key identifier: 2D:40:F6:7B:D5:F9:62:04:48:FB:76:6D:90:21:EE:F5:87:E5:7E:DC
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 019427B529FFC2348819868804CDA900DF96
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/LUD2e9X5YgRI-3ZtkCHu9Yflftw.roa
Signing time: Thu 02 Jan 2025 15:49:31 +0000
ROA not before: Thu 02 Jan 2025 15:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12679
IP address blocks: 45.134.13.0/24 maxlen: 24
212.8.224.0/22 maxlen: 22
212.8.228.0/24 maxlen: 24
2a07:500::/32 maxlen: 32
2a07:501::/32 maxlen: 32
2a07:502::/32 maxlen: 32
2a07:503::/32 maxlen: 32
2a07:504::/32 maxlen: 32
2a07:505::/32 maxlen: 32
2a07:506::/32 maxlen: 32
2a07:507::/32 maxlen: 32
2a0e:7c40::/32 maxlen: 32
2a0e:7c41::/32 maxlen: 32
2a0e:7c42::/32 maxlen: 32
2a0e:7c43::/32 maxlen: 32
2a0e:7c44::/32 maxlen: 32
2a0e:7c45::/32 maxlen: 32
2a0e:7c46::/32 maxlen: 32
2a0e:7c47::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:29:ff:c2:34:88:19:86:88:04:cd:a9:00:df:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Jan 2 15:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d40f67bd5f9620448fb766d9021eef587e57edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:29:e9:11:74:34:78:06:cd:25:fc:a1:47:
17:92:68:c8:e4:ca:0b:68:ec:a1:bd:c9:ad:66:c5:
a0:f7:a6:89:93:47:4d:05:ae:40:a5:31:37:5b:c9:
bf:92:28:0e:ca:6d:73:03:cd:c2:e4:8e:b9:fb:6a:
86:19:24:db:cd:7c:64:d9:02:1c:a7:b1:62:5d:b9:
95:94:8d:c4:a3:ee:9b:36:21:c2:23:f8:e9:ef:ff:
38:43:b4:fd:09:c0:d5:6b:ef:15:58:56:31:e7:0f:
8f:4d:f3:a5:a9:ae:03:0a:28:7f:2e:ac:ac:de:45:
51:1e:b3:4e:5f:33:d0:43:69:dc:b4:1b:65:e7:6b:
82:0b:7d:40:af:9f:0d:51:62:25:e3:59:e6:dc:9b:
59:6a:a0:4a:c4:2c:c6:bf:0d:0f:83:cd:30:9f:e2:
4c:f1:07:9d:6a:a2:1b:5e:38:ab:bd:96:e4:5b:de:
4f:1e:86:12:0c:57:d9:72:d7:95:f9:ad:5f:8e:31:
74:c5:1a:55:e7:40:14:a0:50:d9:7c:5d:8e:35:08:
17:72:e8:e5:78:27:0c:62:bc:c0:69:bd:fb:ef:c0:
f1:e4:e0:0a:fe:bf:19:4f:55:39:4c:24:ac:92:d4:
5e:d5:ff:08:45:d5:fe:16:2d:cd:db:ea:82:c7:75:
6f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:40:F6:7B:D5:F9:62:04:48:FB:76:6D:90:21:EE:F5:87:E5:7E:DC
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/LUD2e9X5YgRI-3ZtkCHu9Yflftw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.13.0/24
212.8.224.0-212.8.228.255
IPv6:
2a07:500::/29
2a0e:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
18:6a:f2:9b:ce:a3:bb:6c:6a:fd:e4:d5:2d:5d:be:4c:4e:35:
17:af:1e:7a:5a:00:88:43:b9:b1:03:10:80:27:c1:5c:22:e5:
8c:bf:21:2f:58:54:e6:a7:1f:e1:c7:62:cf:77:4e:2f:0f:d2:
66:70:4a:28:ed:2c:18:22:c3:1d:73:c7:19:2c:46:4d:5f:ac:
59:53:d5:77:a9:7e:ef:d4:b6:82:7e:08:cb:94:56:2f:26:8c:
b5:e5:15:9d:df:87:03:79:fb:b4:b8:dc:95:d4:09:64:64:82:
4c:1c:e9:67:6b:4a:bf:33:88:51:49:c9:ef:97:38:c4:1c:e3:
87:8b:49:28:99:f1:fd:aa:eb:96:86:a0:3a:e7:8f:c8:91:22:
fb:30:47:0f:af:3c:60:a8:cd:13:3d:b7:4c:98:0b:28:d7:64:
88:06:1e:33:dc:8c:12:a6:9f:8a:73:08:20:cf:61:10:60:0d:
7c:26:fa:00:8a:fb:f9:d2:e6:03:88:ca:40:38:77:18:31:98:
39:65:10:20:81:f7:dd:d7:1f:63:48:38:dd:ec:3e:e1:98:74:
34:ab:6c:91:a7:03:6e:d8:6f:4b:54:a1:5f:2f:f2:3d:4d:eb:
47:7f:01:8c:4a:b0:79:80:4f:40:29:95:7d:32:b7:c3:cc:71:
84:ef:d4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:00:06 2025 by rpki-client