Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IXpjHlEbBZjy_1bCTbHZ7mD1SVo.roa
File: IXpjHlEbBZjy_1bCTbHZ7mD1SVo.roa (raw, json)
Hash identifier: U7CXtFmeoamRTntn3RZsw8ewzxSNfsbo/pl0QGARzIA=
Subject key identifier: 21:7A:63:1E:51:1B:05:98:F2:FF:56:C2:4D:B1:D9:EE:60:F5:49:5A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428248B239A87FCD977639D8BAC5BF115
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IXpjHlEbBZjy_1bCTbHZ7mD1SVo.roa
Signing time: Thu 02 Jan 2025 17:51:11 +0000
ROA not before: Thu 02 Jan 2025 17:51:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53356
IP address blocks: 45.128.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:8b:23:9a:87:fc:d9:77:63:9d:8b:ac:5b:f1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=217a631e511b0598f2ff56c24db1d9ee60f5495a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:ee:48:ae:ee:b4:8a:c6:f5:6e:4e:c8:34:
69:7e:57:66:8e:87:e8:95:f4:4e:16:87:66:d3:e2:
22:db:84:82:a3:6a:fe:73:10:f6:d4:90:98:81:9c:
c8:53:2b:33:8f:50:ac:7b:68:7b:97:ec:89:b2:63:
a3:da:da:99:cc:1c:d1:06:99:ff:be:88:68:02:eb:
65:d4:16:38:3f:fb:d9:51:10:0a:21:6c:28:d6:ca:
31:a1:01:a6:ac:57:f9:be:b0:43:04:94:13:24:f2:
72:35:03:37:07:54:46:01:53:30:f5:8a:fa:28:dd:
91:fa:a8:2c:67:50:d9:dd:45:db:27:e4:8a:55:2a:
ca:a3:4b:db:19:13:28:7e:62:b3:9f:9d:72:af:8c:
a8:29:3a:37:15:88:5a:bc:15:6c:e6:a8:20:c2:d2:
87:2e:e3:eb:0b:99:fe:12:7d:c7:1f:9f:d5:02:82:
d5:79:40:0a:58:45:97:ee:85:56:16:44:a0:d0:6f:
dc:e5:ea:7a:9f:93:1e:55:ee:7d:fd:6f:6b:fd:a9:
29:ee:7f:c3:44:f9:8e:ec:41:07:1b:ad:6c:89:86:
dd:f8:82:c9:84:43:39:44:37:60:02:0b:15:d9:70:
69:58:5b:72:f3:20:34:bf:ab:76:2a:33:b1:14:69:
1f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7A:63:1E:51:1B:05:98:F2:FF:56:C2:4D:B1:D9:EE:60:F5:49:5A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IXpjHlEbBZjy_1bCTbHZ7mD1SVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.232.0/24
Signature Algorithm: sha256WithRSAEncryption
90:d4:35:c1:db:87:0b:5d:7a:7b:12:6b:5c:a3:87:a6:44:94:
50:0d:01:09:09:76:94:fb:a9:e1:70:0d:65:ac:36:c8:b0:ae:
6d:00:1d:5a:eb:4a:cd:36:93:03:dc:00:f5:68:f2:ab:8c:1f:
5b:20:1e:da:25:a5:71:e3:64:00:ec:2d:8d:1e:f0:8a:79:71:
c9:cc:1d:52:ac:e3:e2:31:a0:e6:a2:d1:6a:7b:dd:a5:fc:8f:
38:2b:37:a2:4d:10:47:a2:96:cc:00:3a:59:b9:a3:54:7f:6d:
7e:8a:15:bf:59:72:00:71:04:2b:f7:00:1a:9a:01:60:9b:24:
6f:4e:df:f3:cd:40:c4:b0:d7:83:4f:c5:9d:19:59:09:57:89:
06:8a:1d:ba:d1:ad:6c:89:f1:f8:1e:ba:d3:63:4c:de:d4:3f:
d2:09:0c:b0:24:06:5d:c4:67:2c:57:c4:10:3a:59:62:42:63:
76:67:a5:4a:ff:2f:7a:9c:b1:bd:55:37:c1:d9:a8:c0:f6:d0:
97:b8:fd:77:db:18:a5:50:32:b0:44:16:14:88:a2:51:24:82:
4f:57:29:2b:0f:60:17:0b:b9:27:e0:f1:ee:d1:c6:36:71:cc:
c2:76:b0:3b:9c:08:cd:d2:2e:46:13:8b:a4:60:3f:16:33:0c:
e5:03:e6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:04 2025 by rpki-client