Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/3FoGeKCbU-ndowgi5_zzr9mEg-Q.roa
File: 3FoGeKCbU-ndowgi5_zzr9mEg-Q.roa (raw, json)
Hash identifier: uP+iTcIQmkTctahn09h6SyCVnftUax67E4iCr96d6Gg=
Subject key identifier: DC:5A:06:78:A0:9B:53:E9:DD:A3:08:22:E7:FC:F3:AF:D9:84:83:E4
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 0194E25AFB216643E780A4AAD19E5874A420
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/3FoGeKCbU-ndowgi5_zzr9mEg-Q.roa
Signing time: Fri 07 Feb 2025 21:40:00 +0000
ROA not before: Fri 07 Feb 2025 21:40:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58305
IP address blocks: 45.43.64.0/19 maxlen: 24
107.181.128.0/19 maxlen: 24
155.254.32.0/19 maxlen: 24
162.217.251.0/24 maxlen: 24
198.105.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e2:5a:fb:21:66:43:e7:80:a4:aa:d1:9e:58:74:a4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Feb 7 21:40:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc5a0678a09b53e9dda30822e7fcf3afd98483e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:46:9d:ed:3d:b2:38:ec:c4:ef:35:91:e5:
9e:75:61:b9:b5:51:dd:08:4f:44:39:d6:0d:8f:fc:
4d:c6:2f:b6:3f:3e:10:fe:73:2c:8a:30:42:d7:0f:
46:5e:c7:01:0b:a9:4e:c7:46:17:81:f0:12:8b:ef:
11:01:ca:b5:e7:ac:05:81:64:14:93:e9:7d:5b:f8:
09:61:55:cf:47:32:d2:c2:37:eb:d9:f5:5a:9e:3f:
dd:03:a7:a4:e9:85:49:16:c5:85:e5:f1:5e:34:78:
57:4a:d6:93:cc:08:dd:6a:82:ab:b4:80:3d:b1:f8:
f4:83:a2:8e:6b:41:d1:37:86:61:6a:ba:1d:37:38:
a4:de:16:04:12:57:56:d1:0f:4c:ed:90:08:cd:0b:
c6:08:e8:c2:e9:a4:81:68:80:50:e1:c2:dc:92:9a:
da:1f:03:cf:d9:95:02:3b:6d:84:15:46:6a:02:aa:
61:b3:cf:d2:a3:04:a6:a3:eb:72:67:e9:6b:8f:4d:
1f:83:7d:ba:bf:09:f8:39:9b:fb:37:cb:ba:53:31:
8c:c5:33:fe:94:1c:86:6f:b0:79:46:d3:c6:62:68:
b8:4f:1e:53:f0:93:a7:d7:4b:a5:0a:c5:95:02:f0:
22:cc:61:91:62:fd:1c:1a:ed:cb:fb:d1:2d:9b:c8:
ab:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5A:06:78:A0:9B:53:E9:DD:A3:08:22:E7:FC:F3:AF:D9:84:83:E4
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/3FoGeKCbU-ndowgi5_zzr9mEg-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.64.0/19
107.181.128.0/19
155.254.32.0/19
162.217.251.0/24
198.105.96.0/19
Signature Algorithm: sha256WithRSAEncryption
59:dc:2f:4e:83:96:5b:3d:ae:03:75:0b:8e:3a:05:df:6f:9e:
3b:3d:02:20:51:5e:27:58:06:3e:38:e5:ea:30:c7:80:19:9d:
97:95:8f:1a:24:e7:f5:37:e6:e6:62:68:dd:30:20:f1:67:68:
9e:64:54:a7:df:22:ac:d1:eb:fb:59:f0:e8:af:53:67:60:e8:
bf:e1:d6:a3:36:86:31:70:20:6d:7f:fe:eb:bf:3e:f0:9f:dd:
2b:42:3f:00:fc:02:12:be:c8:fa:fe:cf:62:f1:01:4b:7b:a5:
26:75:2c:41:fe:8a:b5:6c:0c:5c:72:ed:1c:d3:60:f8:26:43:
ac:3c:88:ff:1a:0e:fd:49:7f:c6:e9:f8:20:8e:2d:27:92:66:
a2:05:95:1f:73:c2:c7:b3:0e:75:f9:8a:f7:a6:e5:c3:86:be:
82:20:5c:ac:0d:12:11:b7:45:ec:51:0a:93:9a:3b:6f:b7:b1:
3c:bb:e6:a6:75:aa:49:d2:1e:2a:6e:dc:01:43:3a:5c:11:24:
67:eb:d5:0a:42:da:22:73:31:30:26:ce:44:2c:7f:f7:b1:e5:
13:c9:68:f2:65:78:f9:83:3f:06:81:c9:27:3e:43:32:a1:7c:
19:7b:73:5d:0c:87:cb:d3:fc:20:d0:73:69:b0:88:84:40:22:
ba:d3:8c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:24:46 2025 by rpki-client