Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/zcLtcjUtyxFL1FO3b-VJlyOeg6k.roa
File: zcLtcjUtyxFL1FO3b-VJlyOeg6k.roa (raw, json)
Hash identifier: g80ZM0Uc7RbA4rF7A3IOl5uS7MyE5SE2vouCF+EvudA=
Subject key identifier: CD:C2:ED:72:35:2D:CB:11:4B:D4:53:B7:6F:E5:49:97:23:9E:83:A9
Certificate issuer: /CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
Certificate serial: 019428265F6AD12A6B64627C21AE862F971F
Authority key identifier: 1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/zcLtcjUtyxFL1FO3b-VJlyOeg6k.roa
Signing time: Thu 02 Jan 2025 17:53:10 +0000
ROA not before: Thu 02 Jan 2025 17:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 45.134.248.0/24 maxlen: 24
45.134.250.0/24 maxlen: 24
45.140.68.0/24 maxlen: 24
45.140.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:5f:6a:d1:2a:6b:64:62:7c:21:ae:86:2f:97:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
Validity
Not Before: Jan 2 17:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdc2ed72352dcb114bd453b76fe54997239e83a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:09:fa:e5:18:2c:c9:f1:67:d3:5d:d6:ae:d9:
8b:47:0b:f4:cb:47:2d:22:aa:cf:20:34:4d:ac:b1:
2d:60:37:07:a4:c7:1b:39:26:6a:96:d2:fd:bd:2d:
6e:58:28:b8:27:86:14:e0:d8:58:b7:1f:36:49:9e:
92:b7:56:70:e3:06:42:c3:6b:a2:a5:d7:63:a2:70:
67:2b:4d:5f:94:09:39:08:81:a5:66:dc:09:63:9b:
2f:36:85:b2:95:56:1a:28:6d:3a:9d:74:ac:72:7a:
e0:7f:d2:07:2a:ee:46:88:8e:69:d9:9f:39:d8:81:
80:34:dc:40:05:85:d4:25:d3:cb:3c:f0:3f:b5:7a:
9e:8e:10:25:da:83:92:cd:69:ab:f0:58:47:44:47:
44:76:92:59:e5:5d:f2:26:79:fa:45:ac:7b:bf:fa:
55:47:10:62:76:af:13:09:c0:7c:a2:29:fc:f3:9a:
10:53:b8:f5:05:bf:98:55:a4:e8:2a:cb:1c:d7:05:
54:97:3f:9d:d6:1a:e2:2f:55:57:40:fb:af:c2:c1:
05:0c:89:1c:b6:de:2d:10:81:bc:f6:d2:b9:09:62:
a7:94:1e:fe:16:bf:36:f5:51:da:f1:b1:20:05:e9:
c3:ee:b5:65:1b:14:8e:b2:e0:05:54:5e:d0:52:11:
eb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C2:ED:72:35:2D:CB:11:4B:D4:53:B7:6F:E5:49:97:23:9E:83:A9
X509v3 Authority Key Identifier:
keyid:1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/zcLtcjUtyxFL1FO3b-VJlyOeg6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.248.0/24
45.134.250.0/24
45.140.68.0/24
45.140.70.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:2b:9b:61:3b:04:8d:ae:af:dc:66:86:9d:66:a7:0a:0e:e8:
6d:46:d8:58:fc:b7:3e:22:0f:ca:f5:5f:ed:48:9b:8e:b0:3d:
a1:ea:f2:99:bb:b9:d3:a9:70:50:a0:c1:53:4a:2e:ca:a8:6f:
2c:dc:2b:60:71:84:e3:fd:0b:de:0d:01:c6:dc:c2:0c:69:bb:
a1:8b:33:d2:d1:ae:22:62:b4:1d:c0:c7:16:59:8d:7b:7e:a2:
e9:7b:8c:b4:1c:e1:5a:f9:41:a1:3d:87:68:5c:2c:17:91:38:
a1:02:a5:1d:a2:b0:0f:df:9a:80:84:25:dd:f7:56:27:9e:f7:
5d:f2:9e:ee:58:75:e1:02:98:d8:53:84:0c:b5:06:6c:ab:c6:
48:e2:2a:55:ec:07:74:1d:46:e5:69:d5:24:ac:6b:e4:d8:0e:
5a:80:ba:e5:2b:4e:d7:97:02:ec:f0:bf:70:78:61:93:9c:59:
32:32:b7:cc:94:33:45:f1:52:94:36:20:d8:d6:95:74:0f:3e:
3a:eb:ea:9f:74:47:79:45:b0:cd:29:c0:46:79:6b:03:07:ba:
cb:f0:e4:6a:e8:d9:95:e0:42:1d:48:de:8a:32:60:dc:a6:92:
70:4f:54:49:03:63:a4:e9:c1:b9:45:ff:d9:9c:c6:18:e6:60:
ae:0e:cb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:08:29 2025 by rpki-client