Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/AH1fYCisNvWUCcWZJJbc5zPLMRU.roa
File: AH1fYCisNvWUCcWZJJbc5zPLMRU.roa (raw, json)
Hash identifier: s+2KL0+h3z4IZLbOG7KqHEPYlQnsY+Ydmzt6zzeZv0I=
Subject key identifier: 00:7D:5F:60:28:AC:36:F5:94:09:C5:99:24:96:DC:E7:33:CB:31:15
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 019423D706C666D2B14400EF3070D7A4A1E6
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/AH1fYCisNvWUCcWZJJbc5zPLMRU.roa
Signing time: Wed 01 Jan 2025 21:48:02 +0000
ROA not before: Wed 01 Jan 2025 21:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 45.43.64.0/23 maxlen: 24
45.43.68.0/22 maxlen: 24
45.43.80.0/22 maxlen: 24
45.43.84.0/23 maxlen: 24
45.43.86.0/24 maxlen: 24
89.33.6.0/23 maxlen: 24
107.181.128.0/22 maxlen: 24
107.181.132.0/23 maxlen: 24
107.181.140.0/22 maxlen: 24
107.181.148.0/23 maxlen: 24
107.181.152.0/24 maxlen: 24
107.181.153.0/24 maxlen: 24
107.181.154.0/24 maxlen: 24
113.20.157.0/24 maxlen: 24
113.20.158.0/24 maxlen: 24
155.254.33.0/24 maxlen: 24
155.254.34.0/24 maxlen: 24
155.254.36.0/22 maxlen: 24
155.254.48.0/23 maxlen: 24
162.220.246.0/23 maxlen: 24
198.105.100.0/22 maxlen: 24
198.105.108.0/24 maxlen: 24
198.105.109.0/24 maxlen: 24
198.105.111.0/24 maxlen: 24
198.105.121.0/24 maxlen: 24
198.105.122.0/24 maxlen: 24
2a05:9f40:1f::/48 maxlen: 48
2a05:9f44:2a05::/48 maxlen: 48
2a05:9f46::/32 maxlen: 48
2a05:9f47::/32 maxlen: 48
2a07:9946::/32 maxlen: 48
2a07:9947::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:06:c6:66:d2:b1:44:00:ef:30:70:d7:a4:a1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 21:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=007d5f6028ac36f59409c5992496dce733cb3115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:72:39:9d:40:d5:44:e2:9b:3f:6e:7b:51:c0:
24:e7:85:27:d3:4e:db:54:85:e8:98:cc:a1:e5:7c:
20:e4:50:5f:fe:16:b3:51:5a:79:83:4f:9f:c3:28:
0f:1e:35:44:c4:24:6d:9e:97:08:83:67:b4:b3:88:
ba:84:f6:73:ea:9d:c6:58:34:55:30:69:e0:24:eb:
9b:64:9f:b4:ac:54:fa:23:6b:f3:a2:fa:d0:76:43:
bc:4f:14:cb:bf:d0:0a:bd:cf:8d:90:33:f3:1e:bf:
97:ec:49:cf:26:d9:2f:57:3f:b5:6a:af:8d:b4:5e:
43:bf:98:f2:ed:b4:3e:a5:70:ae:e7:e3:02:81:56:
d5:c5:eb:a7:d8:01:8f:0f:9d:79:35:1b:68:74:74:
40:ad:71:a0:30:d4:5f:89:e7:32:66:ad:4d:c8:ce:
99:6d:7b:83:f1:99:b5:d1:c1:71:1a:3e:bd:fa:5e:
4f:0c:72:6f:69:45:e1:76:1e:ac:20:42:80:61:f4:
7d:7e:0d:ed:2d:35:e5:ef:6a:5b:44:ed:42:a0:0e:
d8:ca:77:33:e5:65:43:07:ba:e4:ed:90:4b:11:14:
17:88:62:34:6a:8a:d5:8b:e5:8a:fc:36:bb:f8:63:
97:e7:52:ce:31:95:e3:e3:ec:f6:0c:39:75:75:04:
90:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7D:5F:60:28:AC:36:F5:94:09:C5:99:24:96:DC:E7:33:CB:31:15
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/AH1fYCisNvWUCcWZJJbc5zPLMRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.64.0/23
45.43.68.0/22
45.43.80.0-45.43.86.255
89.33.6.0/23
107.181.128.0-107.181.133.255
107.181.140.0/22
107.181.148.0/23
107.181.152.0-107.181.154.255
113.20.157.0-113.20.158.255
155.254.33.0-155.254.34.255
155.254.36.0/22
155.254.48.0/23
162.220.246.0/23
198.105.100.0/22
198.105.108.0/23
198.105.111.0/24
198.105.121.0-198.105.122.255
IPv6:
2a05:9f40:1f::/48
2a05:9f44:2a05::/48
2a05:9f46::/31
2a07:9946::/31
Signature Algorithm: sha256WithRSAEncryption
17:6d:59:2b:f6:ed:af:b4:6e:d8:9f:51:d1:7f:1a:4b:d8:a5:
3f:13:22:36:25:12:b9:42:71:3d:ad:ac:2b:4b:e7:28:15:94:
f8:fe:c4:46:b9:43:37:a4:e8:9e:59:b7:85:53:db:4a:9e:cc:
dc:cd:88:b3:1a:7b:15:c9:45:da:25:d3:43:c7:1d:29:36:c5:
71:70:2c:52:87:33:f8:cb:6e:65:04:65:26:36:29:1a:61:02:
ea:e4:fe:13:cf:f6:c9:a9:86:98:c4:d5:cd:98:ca:8a:36:91:
25:89:60:db:96:73:63:2d:54:22:f5:5b:dc:50:b8:e3:90:e9:
aa:b4:cf:1b:2c:78:09:79:51:47:5d:1b:83:9b:86:48:00:eb:
b6:c1:e7:f6:27:84:e9:2c:b4:8e:0d:58:8a:a4:5c:92:98:99:
bc:c7:b7:cf:3c:89:3f:eb:3b:7e:05:5e:0d:50:59:fa:03:1d:
d5:72:1e:09:b2:0c:af:23:79:26:9e:d2:ed:57:82:37:2f:f4:
a1:71:e4:5b:2c:9f:37:cd:89:58:98:a6:f7:ba:db:3c:95:be:
a7:cb:ae:da:65:e3:4c:c9:4f:9b:ca:30:b8:70:bd:a8:50:a1:
69:cd:51:46:9f:fd:7a:35:61:6f:89:f1:82:a8:58:e8:3c:ae:
0c:b5:3c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:04:23 2025 by rpki-client