Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/5C4YA50fBN7vcdBY1HqNC2bmMjc.roa
File: 5C4YA50fBN7vcdBY1HqNC2bmMjc.roa (raw, json)
Hash identifier: sc/YMsXU3PgkkGc1oSkpeF8aFtzCCD0ar7drCdMUnQA=
Subject key identifier: E4:2E:18:03:9D:1F:04:DE:EF:71:D0:58:D4:7A:8D:0B:66:E6:32:37
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0194206812AB2B1FBF5A7D534ADF2A3516F8
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/5C4YA50fBN7vcdBY1HqNC2bmMjc.roa
Signing time: Wed 01 Jan 2025 05:47:58 +0000
ROA not before: Wed 01 Jan 2025 05:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215933
IP address blocks: 45.130.53.0/24 maxlen: 24
45.157.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:12:ab:2b:1f:bf:5a:7d:53:4a:df:2a:35:16:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 05:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e42e18039d1f04deef71d058d47a8d0b66e63237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3c:98:d3:ba:63:56:1e:47:63:f2:39:31:36:
43:ce:f1:dd:83:f0:39:09:51:02:20:f2:e0:a5:bd:
5a:d1:27:9e:8f:0d:89:24:d0:39:ea:fc:59:92:20:
77:11:36:4f:a4:ae:9e:63:48:45:d6:7d:f9:15:3d:
12:13:63:f2:15:1e:51:f6:a4:c6:5c:14:ac:1d:e4:
25:2c:e9:22:dc:04:03:57:05:74:ef:18:79:38:df:
68:6e:f2:da:98:aa:33:b1:7f:5e:1d:fa:bf:02:30:
26:af:7a:50:ab:7a:db:b1:f0:45:92:d1:c6:ee:a2:
ad:36:62:57:6f:68:28:c9:99:45:2a:45:8c:92:c6:
ac:c1:2c:87:55:90:6b:39:73:6e:1c:64:4a:cd:38:
9b:04:31:cd:37:f7:14:da:85:18:fa:28:31:e9:c0:
cc:d7:14:d5:c7:e1:17:d3:1f:de:25:fe:7a:19:23:
ec:94:2c:c2:30:f4:67:93:d8:f2:a1:f3:32:a1:3f:
5f:96:a7:8c:c9:87:fe:de:4b:79:f8:7e:d9:73:c7:
2f:8c:6e:e4:c3:a9:d2:51:25:a8:ad:cc:fb:3c:28:
d2:47:c1:74:46:ae:d9:24:58:6f:1a:59:95:7e:d4:
4e:a2:a7:73:72:66:ad:c2:5d:b5:c6:9f:f3:15:6d:
de:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2E:18:03:9D:1F:04:DE:EF:71:D0:58:D4:7A:8D:0B:66:E6:32:37
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/5C4YA50fBN7vcdBY1HqNC2bmMjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.53.0/24
45.157.35.0/24
Signature Algorithm: sha256WithRSAEncryption
94:50:21:0c:78:a4:7f:ef:23:de:f6:b5:c7:8d:1a:d0:9b:a1:
e0:cf:85:82:cb:12:84:e1:23:46:db:6d:87:bd:f6:c0:22:21:
8e:2c:bc:28:f2:a8:d2:58:f9:91:fa:f5:9f:b0:26:f4:05:49:
f3:ab:5d:de:2d:0f:b8:f8:ae:70:50:b0:a3:cb:46:96:f4:e2:
46:c6:a4:f5:cc:cc:cc:bb:f3:6e:5f:07:b8:4d:9e:47:88:a6:
00:db:21:67:da:c3:e0:f6:1c:f8:70:98:81:c2:63:c6:2b:6d:
58:cd:42:eb:0e:cd:94:f8:78:a5:e7:63:f4:8a:5d:59:28:d4:
b4:1f:57:d7:35:cc:fe:f2:c4:84:61:c6:88:9d:b2:35:9f:16:
f2:8f:8c:b6:fd:0d:d8:5b:c6:07:be:f9:7b:d9:28:4b:17:7b:
8b:05:0f:8c:f2:b3:79:97:a3:f6:b6:a7:53:00:0c:ae:b5:be:
eb:d7:f9:dd:2a:77:87:8b:47:8b:b9:71:32:40:d3:f5:19:3d:
d0:0a:e4:1f:4e:56:06:d6:1e:dc:27:c1:07:03:44:57:ac:c3:
55:38:b8:68:b9:bc:72:12:0b:13:17:71:98:43:f2:16:44:42:
9e:96:e0:41:7f:bb:33:09:b7:80:5b:e8:8f:53:4b:2d:87:3a:
6b:99:2b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:45:26 2025 by rpki-client