Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/SQ1S01mKdl_pihHLfmAxp6MIz2s.roa
File: SQ1S01mKdl_pihHLfmAxp6MIz2s.roa (raw, json)
Hash identifier: johDj2G38KeECNaaDLbNbGiHRKn5fDm9dO2HYe9gZvY=
Subject key identifier: 49:0D:52:D3:59:8A:76:5F:E9:8A:11:CB:7E:60:31:A7:A3:08:CF:6B
Certificate issuer: /CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
Certificate serial: 0194282660108F1DE543C5DC1EAD04131B59
Authority key identifier: 1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/SQ1S01mKdl_pihHLfmAxp6MIz2s.roa
Signing time: Thu 02 Jan 2025 17:53:11 +0000
ROA not before: Thu 02 Jan 2025 17:53:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20712
IP address blocks: 45.134.249.0/24 maxlen: 24
45.134.251.0/24 maxlen: 24
45.140.69.0/24 maxlen: 24
45.140.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:60:10:8f:1d:e5:43:c5:dc:1e:ad:04:13:1b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
Validity
Not Before: Jan 2 17:53:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=490d52d3598a765fe98a11cb7e6031a7a308cf6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:0f:6a:07:85:e6:3c:ec:36:be:25:e8:e2:
ac:7a:da:2d:b0:34:b4:a0:6a:c4:aa:6e:d5:0a:6f:
5d:1c:9c:32:c3:24:0e:6a:5f:49:54:c0:98:1d:15:
26:46:5b:e5:88:09:7c:d6:d3:77:ac:53:9e:b7:35:
e9:32:b9:cf:ca:49:15:1c:63:45:45:48:45:f0:c4:
bf:bd:a4:88:f3:4f:a8:ed:6d:e2:87:ca:ea:9a:50:
d0:0b:92:1f:f8:56:5a:91:37:43:b1:25:69:f8:60:
3b:87:c3:e9:15:c3:2b:be:dc:a6:f6:32:37:9e:8c:
64:61:6b:f6:13:e8:a5:2a:36:90:10:45:f0:40:af:
80:a8:4e:e9:35:05:1d:7f:37:4c:e6:1f:89:ee:cc:
42:7a:02:39:0a:19:ef:41:19:4c:11:76:ff:e3:c2:
4e:0f:91:d7:64:42:97:c8:38:bf:d4:a7:2f:f0:a1:
76:1f:0b:b3:04:3e:e7:4c:cc:37:f8:78:71:c6:e3:
6e:8d:8b:c9:5c:4d:1c:8e:60:40:58:d4:32:fe:19:
cf:a1:9d:e9:32:07:e2:93:20:d1:3f:58:65:fb:38:
17:d7:82:71:12:e8:21:d8:29:87:54:94:6a:86:77:
97:54:ff:e1:22:b5:ce:53:bb:09:3b:d8:04:ae:7f:
69:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0D:52:D3:59:8A:76:5F:E9:8A:11:CB:7E:60:31:A7:A3:08:CF:6B
X509v3 Authority Key Identifier:
keyid:1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/SQ1S01mKdl_pihHLfmAxp6MIz2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.249.0/24
45.134.251.0/24
45.140.69.0/24
45.140.71.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d3:04:2e:d9:cd:17:1a:d3:f1:59:fa:5d:bf:c7:6a:c0:55:
5a:7b:8f:a2:80:c6:7b:08:9a:d1:fd:57:d1:93:67:d6:f2:64:
6d:a3:86:05:6b:54:65:c6:5b:b5:d1:52:0f:66:e3:8e:1a:21:
39:87:9a:de:8f:4f:d2:81:46:6a:01:4a:77:3d:ed:9c:7b:88:
41:68:97:dd:2d:36:1d:da:0a:85:2a:5a:2d:a0:8b:ed:a9:c4:
6b:4d:e1:7d:15:7d:3d:da:ee:a2:18:31:c4:21:d5:20:12:d8:
bf:cc:09:68:20:bb:2a:e3:75:50:0c:98:0e:04:7b:da:64:2d:
26:ef:ff:15:c3:07:b5:60:68:4a:3d:0e:f0:0a:04:38:a3:bd:
7c:0a:9a:47:6e:fc:11:b3:0f:eb:d5:75:af:71:2b:e1:21:3a:
67:a5:7e:a9:ed:40:9e:aa:88:78:f4:18:62:ef:2c:8f:22:3a:
3a:d2:d0:5d:f2:13:2c:e8:6a:67:25:1a:75:3a:30:2b:75:5b:
45:0d:d6:9c:e8:aa:27:ef:b2:f0:49:5a:2d:5f:eb:76:da:b0:
7e:2d:dc:a6:bf:bc:2a:d4:e4:a7:0f:62:3a:f8:3d:92:0c:f7:
a9:4e:fe:ad:11:b8:77:84:6a:44:2d:25:30:8b:2c:cc:bb:16:
00:e2:4b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:15 2025 by rpki-client