Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/5175e6-e22f-448e-a538-5c431c4da2d8/1/aaO1ltgKRQZ8e3_PCyYPYty7Qlg.roa
File: aaO1ltgKRQZ8e3_PCyYPYty7Qlg.roa (raw, json)
Hash identifier: cWdvtNc2pLfRwz6f8xHtvj+onzoC6cEW/ozQlqhVAhE=
Subject key identifier: 69:A3:B5:96:D8:0A:45:06:7C:7B:7F:CF:0B:26:0F:62:DC:BB:42:58
Certificate issuer: /CN=a26aac439e09672dba8835185b8b390c22e35405
Certificate serial: DDE2
Authority key identifier: A2:6A:AC:43:9E:09:67:2D:BA:88:35:18:5B:8B:39:0C:22:E3:54:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/omqsQ54JZy26iDUYW4s5DCLjVAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/5175e6-e22f-448e-a538-5c431c4da2d8/1/aaO1ltgKRQZ8e3_PCyYPYty7Qlg.roa
Signing time: Tue 08 Mar 2022 09:45:56 +0000
ROA not before: Tue 08 Mar 2022 09:45:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141159
IP address blocks: 45.131.186.0/24 maxlen: 24
45.131.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56802 (0xdde2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26aac439e09672dba8835185b8b390c22e35405
Validity
Not Before: Mar 8 09:45:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69a3b596d80a45067c7b7fcf0b260f62dcbb4258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e2:78:ee:6a:77:b3:c3:8b:ba:21:35:92:c0:
5b:28:a6:8b:6e:b4:7a:45:b7:2e:3a:b7:0b:92:d0:
33:06:41:91:25:ab:27:43:40:82:ad:48:b5:d6:88:
50:16:f2:04:2a:f4:95:bc:82:7f:06:69:45:a4:a5:
dd:fa:0d:bd:98:fd:a3:03:30:bd:5c:59:2c:c9:bf:
6b:e2:46:f1:db:b2:c7:62:7f:bd:8b:e1:59:6e:c1:
3b:3a:12:e9:48:63:4c:f6:c4:58:65:48:c6:f0:c2:
dd:57:c5:55:48:5f:eb:39:39:fc:b8:e9:a1:d4:01:
d1:fe:b0:eb:cf:b9:c2:72:94:d9:2e:d8:7a:80:fd:
e7:55:68:f3:16:49:57:43:44:e4:24:4d:e2:89:7a:
f6:71:2d:9f:91:09:03:20:80:ea:fe:d0:3d:c7:a6:
e9:1c:68:9d:20:08:56:e7:43:24:10:20:2e:1b:bb:
a9:52:19:1f:cf:cc:bd:05:f7:89:68:28:4f:ec:72:
83:10:20:c8:de:84:9b:a1:9f:40:ed:8d:75:4d:18:
96:09:31:e7:1e:88:10:27:88:95:29:1e:fb:ed:d6:
a4:5e:58:e1:53:74:a3:cc:94:3a:3c:28:3d:6a:b0:
c4:0e:e5:81:5b:ca:0a:25:d6:62:75:75:6f:f4:5b:
62:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A3:B5:96:D8:0A:45:06:7C:7B:7F:CF:0B:26:0F:62:DC:BB:42:58
X509v3 Authority Key Identifier:
keyid:A2:6A:AC:43:9E:09:67:2D:BA:88:35:18:5B:8B:39:0C:22:E3:54:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/omqsQ54JZy26iDUYW4s5DCLjVAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/5175e6-e22f-448e-a538-5c431c4da2d8/1/aaO1ltgKRQZ8e3_PCyYPYty7Qlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/5175e6-e22f-448e-a538-5c431c4da2d8/1/omqsQ54JZy26iDUYW4s5DCLjVAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.186.0/23
Signature Algorithm: sha256WithRSAEncryption
22:8e:87:83:a5:aa:c7:f3:a1:39:e5:fd:ea:49:5a:2b:f3:30:
42:3e:fc:b8:41:4a:f3:ff:de:48:42:b9:3f:2b:d7:44:8c:72:
4b:95:97:72:c0:4a:26:a0:c5:3a:e8:dc:2c:38:84:c7:60:90:
e3:17:46:17:f8:97:78:f8:4e:b2:25:d4:5a:ec:c8:73:a0:e1:
19:47:64:98:f8:a0:8d:7a:93:dc:71:8b:8d:cc:3e:6d:33:fc:
77:e6:66:67:22:c3:10:64:0c:39:66:5c:eb:c8:54:5b:a6:ea:
84:bd:f5:6a:f5:4c:b5:41:47:cb:fc:3d:29:c3:60:05:bd:76:
7a:2a:6b:61:51:54:f6:c3:41:82:77:88:f1:06:95:3d:39:23:
04:c7:11:37:a8:73:8e:78:e8:8b:d1:51:f0:98:46:7c:0f:b1:
fd:ad:67:bf:bc:ad:ea:cc:8a:a3:61:9d:7e:e8:14:73:85:0d:
1d:9c:1d:bd:80:e8:fc:89:ba:e9:21:5a:b1:60:ed:e0:18:0b:
67:36:65:ea:10:c2:51:f4:b1:14:6d:f3:c1:0f:21:95:3f:c5:
e8:5f:84:13:36:62:c6:13:26:3d:a7:ef:1c:89:b4:d5:54:bd:
68:51:8b:a6:c4:47:5d:4b:75:f0:26:3a:53:fc:c5:01:c8:38:
5a:99:62:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:37 2025 by rpki-client