Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/V6Fx8HKW5vYtwoUl9-FGq139rH4.roa
File: V6Fx8HKW5vYtwoUl9-FGq139rH4.roa (raw, json)
Hash identifier: VbwVmnD3kf6YOoUlp8nFzAYfvI3kHMT1G3evyq8grxI=
Subject key identifier: 57:A1:71:F0:72:96:E6:F6:2D:C2:85:25:F7:E1:46:AB:5D:FD:AC:7E
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 01954CDAC22E651B38A8D1587BDD4F0F495A
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/V6Fx8HKW5vYtwoUl9-FGq139rH4.roa
Signing time: Fri 28 Feb 2025 13:59:19 +0000
ROA not before: Fri 28 Feb 2025 13:59:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197071
IP address blocks: 45.65.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:da:c2:2e:65:1b:38:a8:d1:58:7b:dd:4f:0f:49:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Feb 28 13:59:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57a171f07296e6f62dc28525f7e146ab5dfdac7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:aa:d3:2d:a2:c4:9e:5e:7d:84:44:12:57:3c:
b8:1c:31:46:d9:01:27:ca:58:cd:9c:e5:19:bd:b3:
14:4f:f5:9c:1d:ee:15:33:a0:57:bb:b3:61:bd:cc:
9c:1c:44:82:d5:78:cc:02:aa:7a:be:8f:1d:7d:82:
97:ff:15:96:5c:d8:be:e9:5a:0d:0a:85:e2:6d:10:
a2:c8:06:a6:92:0e:e7:e6:a0:03:3d:13:b2:cb:11:
8d:40:6c:18:87:12:6d:42:02:17:be:e7:1d:b1:e5:
3d:e4:ea:68:a7:23:5b:b9:52:b9:03:24:e2:63:dd:
a2:38:c3:ed:77:f9:fe:a2:5b:2e:f3:9f:ca:a4:23:
e0:81:af:67:70:e0:48:38:3b:1a:47:24:83:11:a1:
f5:6a:4f:5b:05:27:ba:3c:45:e7:a5:94:ed:e7:67:
c5:10:51:9c:cd:6d:53:4b:09:fc:4a:e3:d4:0e:e9:
91:bf:75:e9:a6:d0:f4:eb:cf:31:5d:2c:2a:a0:5b:
15:69:e3:76:ef:1d:9f:02:c0:bb:82:1e:b8:0d:ac:
86:4c:01:6d:a0:58:4d:fe:a4:ac:1b:95:e3:c7:4c:
32:26:54:b1:03:88:b3:07:03:b5:9d:a8:1d:c9:e5:
5e:15:d4:84:be:eb:d1:36:ad:af:66:52:48:93:4a:
fd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A1:71:F0:72:96:E6:F6:2D:C2:85:25:F7:E1:46:AB:5D:FD:AC:7E
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/V6Fx8HKW5vYtwoUl9-FGq139rH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.115.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f9:8c:3a:ce:31:49:1f:12:63:57:a5:56:61:11:50:eb:2f:
a8:22:5f:17:a8:99:71:24:0d:58:e5:5a:95:4a:53:33:38:ff:
6a:f6:4d:32:0a:b6:00:4f:36:84:0e:1d:79:35:1c:36:83:08:
2e:89:69:3d:3e:4b:1b:d4:72:aa:9a:44:f9:aa:6b:2b:60:d6:
cc:3f:09:42:d5:bf:e3:f0:c8:8a:c2:28:55:b0:45:df:cf:56:
f2:8a:b2:13:e7:c6:31:92:f2:a1:3f:d1:4e:61:71:55:65:b1:
bd:93:af:40:7d:0b:22:d3:d3:15:aa:7f:58:7a:f6:c4:ec:b0:
bd:3e:80:65:cb:3c:33:54:1e:a9:24:a4:c0:ef:74:f5:f7:d0:
86:9e:a8:3e:01:f1:26:3a:a7:d2:3b:ca:52:cd:4a:7b:a7:20:
81:a4:d3:07:c6:b1:b8:3f:97:b3:5c:c3:c8:23:f4:78:e3:4a:
b7:50:ad:2e:ff:ac:0c:6c:0e:d9:a2:62:c2:5f:eb:0c:f2:9c:
be:b9:51:93:de:4a:2c:0b:32:58:80:54:82:ff:83:55:81:28:
83:96:de:11:43:ed:9f:b5:eb:18:93:3d:ae:b4:4f:f2:25:ea:
d1:e3:85:0d:97:d0:56:c7:cc:5d:7d:6d:e4:58:47:4f:2e:01:
28:a5:37:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:41:48 2025 by rpki-client