Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/66TcSNbBS48EyvLzXsLP_EU_XtE.roa
File: 66TcSNbBS48EyvLzXsLP_EU_XtE.roa (raw, json)
Hash identifier: mxP/fnqVDCctHj8c19Sszp5bbRYZ2HG/t1D6LTj1adg=
Subject key identifier: EB:A4:DC:48:D6:C1:4B:8F:04:CA:F2:F3:5E:C2:CF:FC:45:3F:5E:D1
Certificate issuer: /CN=51a0d9825103d9da4761efa91a60ea2ca758d003
Certificate serial: 0194221FE8D352E8A209CA1107379F0FE7B6
Authority key identifier: 51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/66TcSNbBS48EyvLzXsLP_EU_XtE.roa
Signing time: Wed 01 Jan 2025 13:48:24 +0000
ROA not before: Wed 01 Jan 2025 13:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 45.156.96.0/24 maxlen: 24
45.156.97.0/24 maxlen: 24
45.156.98.0/24 maxlen: 24
45.156.99.0/24 maxlen: 24
2a0f:1c80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e8:d3:52:e8:a2:09:ca:11:07:37:9f:0f:e7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a0d9825103d9da4761efa91a60ea2ca758d003
Validity
Not Before: Jan 1 13:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eba4dc48d6c14b8f04caf2f35ec2cffc453f5ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:cc:f3:7d:b8:94:17:e1:4e:e8:24:94:56:
a8:d7:fb:48:07:87:c0:41:5e:7b:53:33:b4:4c:4d:
94:a1:b0:ca:ba:f7:35:c9:86:3a:7c:53:8d:07:a2:
b1:36:b3:38:e2:1e:b6:49:d5:f5:7d:a1:b7:d2:80:
6d:9e:14:86:bb:d8:38:27:db:ca:09:b5:11:4e:21:
50:19:56:0a:54:41:5c:41:23:df:ed:db:eb:25:58:
96:fa:76:0f:cd:f7:88:fd:dc:f4:f3:b1:d8:6d:7c:
11:2f:5c:18:b6:a0:bb:fd:86:f6:4c:b7:73:b5:40:
56:97:01:47:ba:ab:76:41:47:80:2f:5f:48:ea:d5:
06:f0:f0:f1:5e:20:c0:41:72:0e:53:ba:ae:73:a4:
49:c4:11:51:13:1a:4f:7e:ff:8d:9a:ed:90:1c:92:
80:b0:f9:cf:ac:54:dc:54:35:50:25:84:b9:8a:67:
4b:ad:c4:a8:3a:24:41:93:4c:b1:de:48:1b:ad:c3:
c4:f2:a9:d3:db:d2:cf:97:6b:60:69:9a:47:ae:be:
13:bd:b0:3c:34:c5:27:d1:b1:97:91:ba:7b:09:5e:
db:40:12:cf:01:0e:c0:69:60:11:42:ad:0e:1c:fd:
aa:96:de:f5:de:1a:6f:71:93:c2:e8:6b:7f:95:bc:
12:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A4:DC:48:D6:C1:4B:8F:04:CA:F2:F3:5E:C2:CF:FC:45:3F:5E:D1
X509v3 Authority Key Identifier:
keyid:51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/66TcSNbBS48EyvLzXsLP_EU_XtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.96.0/22
IPv6:
2a0f:1c80::/29
Signature Algorithm: sha256WithRSAEncryption
0f:15:6d:c4:ee:3b:8d:d1:22:93:cd:6b:b5:1a:bb:ae:f6:93:
b0:05:e1:e6:42:c2:be:93:76:d2:a6:ba:30:d9:14:84:22:b6:
3a:1f:fc:52:b7:b6:d7:50:70:55:7b:72:bf:8e:00:17:aa:9e:
b2:99:ca:41:9c:79:a8:4d:fd:41:8b:aa:e3:a6:9c:a6:53:39:
d9:67:66:39:a8:7d:0a:b7:c6:31:d8:36:db:dc:66:05:24:36:
76:c9:90:85:f2:dd:c1:2a:f9:a8:90:7b:83:ce:00:b2:c7:0a:
55:bf:42:7a:63:7b:55:dc:84:9f:0a:ce:68:cb:72:b4:93:27:
46:69:f2:ea:2c:d4:ff:6b:dd:e9:d4:0d:62:34:9c:38:4a:cc:
b7:49:d9:f0:cf:a4:5d:0c:20:ab:09:91:84:32:9b:d0:93:cf:
7d:3c:28:53:b1:ca:c1:85:8c:9c:2f:9c:70:f1:50:b1:f1:1b:
3f:1f:19:41:63:2a:9c:f1:a3:d0:d4:a1:38:f9:b5:66:05:b1:
16:d6:0f:70:9a:97:14:f8:a2:b3:c7:b2:21:e6:58:30:da:9b:
19:fa:de:42:8b:99:a2:5f:19:67:62:75:45:5d:56:d8:b8:92:
36:7b:cc:7b:46:a6:d3:c9:44:1b:33:f7:20:f4:cb:25:65:41:
fd:99:30:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:31 2025 by rpki-client