Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/b5VdQg5j9vSgz5oudyrZHqedoFU.roa
File: b5VdQg5j9vSgz5oudyrZHqedoFU.roa (raw, json)
Hash identifier: UuHvJy2V011Q0MxWvJuXhNtC51TmFkh3E8YpQhDW2NI=
Subject key identifier: 6F:95:5D:42:0E:63:F6:F4:A0:CF:9A:2E:77:2A:D9:1E:A7:9D:A0:55
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194274825551954248A38CDB0801D3571FB
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/b5VdQg5j9vSgz5oudyrZHqedoFU.roa
Signing time: Thu 02 Jan 2025 13:50:27 +0000
ROA not before: Thu 02 Jan 2025 13:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58955
IP address blocks: 45.128.25.0/24 maxlen: 24
45.128.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:25:55:19:54:24:8a:38:cd:b0:80:1d:35:71:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f955d420e63f6f4a0cf9a2e772ad91ea79da055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f7:ca:04:29:11:55:73:50:27:56:56:cc:d3:
7b:36:3f:5a:2c:6b:11:2a:b5:aa:e8:08:f5:bb:d7:
49:7c:f4:a7:7e:6c:b4:09:5f:96:8f:cd:82:d6:c2:
3b:1c:ee:9d:10:e7:bf:73:fd:e0:e0:21:53:68:26:
7a:93:dd:27:36:8d:d1:6b:09:96:e3:d1:79:f6:b4:
f0:21:13:7c:87:4d:e2:aa:ec:4c:47:b2:9b:92:16:
7a:ef:80:0e:0e:96:9b:85:23:2e:59:89:be:7d:d4:
e5:04:a8:56:e2:6e:9f:40:d6:29:12:1f:3a:24:f4:
a5:96:08:e1:d2:83:53:56:51:76:79:61:5d:d4:c1:
ad:aa:32:0c:84:02:f7:34:38:f0:07:63:42:29:1e:
77:ff:6e:82:19:cf:c3:b5:fa:90:6e:55:28:10:8b:
7b:2c:c8:6b:a5:80:3c:c0:c5:c8:3c:b3:c1:72:9f:
4b:46:bc:2a:59:61:c1:3a:91:e1:44:44:57:e1:0e:
57:9f:35:e6:2e:b0:7b:72:c7:46:39:5b:a1:a6:a9:
1d:e4:3e:9f:69:4d:9d:0c:94:ac:17:11:31:e1:c2:
21:66:5e:48:d5:02:4f:0a:8d:bc:e7:e6:d6:f3:95:
8c:8d:de:b9:59:19:31:20:d8:a4:5a:c7:8c:b9:2f:
d3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:95:5D:42:0E:63:F6:F4:A0:CF:9A:2E:77:2A:D9:1E:A7:9D:A0:55
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/b5VdQg5j9vSgz5oudyrZHqedoFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.25.0-45.128.26.255
Signature Algorithm: sha256WithRSAEncryption
06:7c:dd:7b:6d:dd:d8:a5:65:d3:dd:c8:10:77:33:bf:91:01:
0e:53:09:db:66:e7:9f:d0:44:87:ff:d4:55:13:6d:a9:e0:1b:
ec:55:a6:f8:31:79:98:1c:bf:2d:09:03:af:a1:41:e7:26:61:
e4:34:8a:96:8e:4d:57:00:b9:e1:ff:9a:fb:d1:44:ef:a1:c3:
a9:77:97:6c:f6:d5:c9:bd:a4:30:7c:74:4b:4b:a2:01:44:dc:
1a:ed:59:3c:ce:71:e9:39:0a:3f:f8:7a:de:8f:66:99:b6:6f:
75:3b:bf:c6:d6:4d:8c:93:b8:d3:24:f1:02:ac:3f:cb:b9:d8:
36:b1:f4:56:ae:ca:d5:b5:65:6b:da:bd:5a:c2:65:9c:4e:7d:
a2:85:07:ff:9b:d3:2e:90:4a:81:2b:91:56:5f:11:b4:e2:22:
43:17:db:70:3c:4c:7f:e4:23:c2:d4:dd:a8:8a:ef:a1:1c:4f:
b8:ad:12:82:55:72:7c:d5:32:04:ce:b5:bc:00:50:51:dc:0a:
c6:a1:9a:a0:35:a2:20:aa:08:d3:3b:3b:87:35:6d:c9:d7:69:
f8:34:64:ab:bb:3b:b5:f3:c4:fc:e0:11:5a:be:76:a9:74:c2:
01:50:df:82:96:61:1d:27:28:72:db:c3:64:8a:ed:10:79:51:
56:ef:c1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:46:04 2025 by rpki-client