Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/ByHPyEaADbbqpeyBTeUJrhmCuYQ.roa
File: ByHPyEaADbbqpeyBTeUJrhmCuYQ.roa (raw, json)
Hash identifier: dRJ7Xfhd2IktdnYweUcsqpbKflQdcxF/jmr99tlC1i0=
Subject key identifier: 07:21:CF:C8:46:80:0D:B6:EA:A5:EC:81:4D:E5:09:AE:19:82:B9:84
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 019594B9A7E6EF7D63FC996145FAF6934997
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/ByHPyEaADbbqpeyBTeUJrhmCuYQ.roa
Signing time: Fri 14 Mar 2025 12:55:49 +0000
ROA not before: Fri 14 Mar 2025 12:55:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26737
IP address blocks: 45.65.114.0/24 maxlen: 24
45.65.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:94:b9:a7:e6:ef:7d:63:fc:99:61:45:fa:f6:93:49:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 14 12:55:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0721cfc846800db6eaa5ec814de509ae1982b984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5d:22:59:31:bb:a0:a2:46:74:ca:73:6c:b8:
8c:5f:1c:1d:88:a0:40:e3:21:d6:7f:14:6b:a1:3a:
2f:e6:56:28:9f:77:ad:cc:d2:1b:51:28:79:1e:dd:
11:db:92:ec:83:cc:33:cd:0c:42:70:9a:a2:56:29:
1f:1c:da:02:d6:da:9b:5e:25:fb:92:78:c4:98:ea:
2a:d2:b6:8f:bd:56:a5:39:80:d0:89:d7:92:87:41:
29:cf:7a:96:7f:c0:50:5e:95:7f:22:04:68:7a:6f:
4b:37:58:20:bc:5a:b2:84:db:58:10:ba:5d:73:08:
fd:f0:2e:61:25:ec:28:8e:80:96:fa:e2:8d:ac:a1:
4c:54:b9:46:30:af:ba:45:2b:86:5f:b0:6a:f3:ed:
ce:44:aa:dd:5d:35:38:47:7c:20:2c:e4:9e:05:7a:
6f:d3:f5:4c:84:23:2e:2f:8b:4b:6c:22:18:63:7a:
3b:d3:d1:f2:1c:04:2f:75:b2:64:31:ea:c8:1b:5f:
84:70:83:eb:0f:17:b6:ae:83:6b:c8:e0:78:d2:51:
74:99:65:08:35:85:7e:75:ab:9c:a9:02:e6:06:d6:
b3:66:cf:48:f2:93:7c:34:6a:59:c0:79:49:fe:52:
11:06:0f:1e:e0:d0:8a:91:71:20:5f:c5:4f:bb:9c:
b8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:21:CF:C8:46:80:0D:B6:EA:A5:EC:81:4D:E5:09:AE:19:82:B9:84
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/ByHPyEaADbbqpeyBTeUJrhmCuYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.114.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:a7:2b:22:ec:ab:2c:5b:6e:7c:ad:05:41:af:2e:1c:ac:22:
16:bd:1d:cc:af:69:bd:2d:dd:ac:c0:fc:70:50:93:c2:b9:72:
2b:42:79:18:7d:c8:93:02:64:35:8c:1c:d0:c4:bc:58:13:34:
52:aa:f1:98:94:e2:31:2a:67:3d:50:b9:43:f4:36:45:71:dc:
9f:28:dc:00:6c:70:14:8d:ad:fd:08:8d:84:3f:74:ba:6c:89:
03:1d:5b:80:d8:18:e4:e6:c0:6d:9d:0b:b7:0f:37:2a:ce:99:
bc:de:7c:bc:5f:3a:cd:c6:e9:6e:96:1f:c3:a2:6d:b4:d2:ac:
35:0a:ba:e8:07:69:03:aa:6e:74:aa:4a:c4:7f:54:b3:1a:34:
6d:29:c9:f3:a9:f1:75:2d:c2:c6:58:4a:db:40:a1:1b:ce:46:
c8:13:7a:d0:28:10:40:ce:d8:12:40:c7:bc:18:6d:b1:ab:7e:
a7:f9:2f:49:2b:a9:dd:bd:cd:e6:7a:bc:f9:5e:0c:f7:7c:f7:
12:28:f4:14:df:bc:be:aa:ca:c5:da:e1:89:2a:95:01:b9:50:
b8:c4:aa:15:a4:1a:6b:77:43:3c:ba:c6:02:bd:21:d8:b4:2d:
d2:93:07:1b:1a:1a:91:f8:63:f4:d5:5e:dc:57:cb:a1:a3:ce:
a3:a2:2f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:29:50 2025 by rpki-client