Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/y4gv_eM0FCZ5Y0K6Ch7CgsTOoCU.roa
File: y4gv_eM0FCZ5Y0K6Ch7CgsTOoCU.roa (raw, json)
Hash identifier: wtgzNlXE4/48ucBtZip1DeW1WYNNbuXILg9ye5A7ICs=
Subject key identifier: CB:88:2F:FD:E3:34:14:26:79:63:42:BA:0A:1E:C2:82:C4:CE:A0:25
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019427488B4F0AA0DFCEA0C199B2B2E8B1D6
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/y4gv_eM0FCZ5Y0K6Ch7CgsTOoCU.roa
Signing time: Thu 02 Jan 2025 13:50:53 +0000
ROA not before: Thu 02 Jan 2025 13:50:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52053
IP address blocks: 45.137.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:8b:4f:0a:a0:df:ce:a0:c1:99:b2:b2:e8:b1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb882ffde3341426796342ba0a1ec282c4cea025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:6e:fb:9d:73:81:df:76:75:74:23:0c:dc:
c0:a4:23:8d:9a:46:c7:c8:b4:2e:87:b1:39:ae:17:
2c:3e:ad:d0:11:fa:14:0c:fd:cc:96:31:35:d4:72:
1b:f6:52:bf:3f:7b:0d:92:7c:11:ca:c0:86:ca:6f:
fd:36:f8:14:dd:3f:6b:88:8d:75:65:4f:c9:88:3c:
ef:31:71:5e:5b:a2:a4:c1:07:92:50:2a:ed:8b:3c:
fc:08:07:af:a5:fa:ce:1d:17:d2:4d:6f:85:f0:29:
7b:24:b6:30:88:49:36:6a:a6:0b:e6:7f:cc:f2:93:
9d:85:8b:9e:eb:09:0d:80:5f:36:32:3d:8d:d7:68:
2b:05:0d:ef:2d:a3:25:25:37:a0:4a:11:98:9f:7d:
9d:02:61:d6:50:93:5e:08:ad:a8:96:2a:da:22:63:
92:f9:65:0d:29:76:31:1e:bd:b6:6a:d7:c5:72:94:
29:21:fa:6f:d7:a4:44:d2:35:df:00:d4:69:46:82:
2d:2b:2c:5c:d3:73:6d:4c:23:a7:84:bc:c4:c3:00:
9a:53:f7:1e:88:6e:9c:1d:07:14:68:8e:67:a9:66:
a1:d1:4d:19:be:33:f3:5f:9a:2f:5e:36:da:50:ef:
fb:9d:fc:91:0c:67:0d:c3:68:63:0f:2b:34:b1:02:
ed:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:88:2F:FD:E3:34:14:26:79:63:42:BA:0A:1E:C2:82:C4:CE:A0:25
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/y4gv_eM0FCZ5Y0K6Ch7CgsTOoCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.69.0/24
Signature Algorithm: sha256WithRSAEncryption
97:cc:27:b7:79:7a:08:93:d2:0f:4c:f8:e3:e8:7c:38:37:d4:
b0:bb:63:65:16:17:78:43:34:53:1d:d9:d0:4e:e0:59:f5:0e:
41:1b:08:af:a8:6e:de:d6:a2:24:e6:15:00:1d:8d:6f:aa:3d:
15:ec:4a:36:dd:82:21:93:8a:ff:89:64:eb:03:10:19:ba:4b:
2a:a2:5e:4c:08:f9:f1:31:37:c7:f0:bd:c5:a6:c0:01:42:ec:
ae:90:ed:f6:e4:ac:f5:51:ac:42:25:88:83:7c:ff:47:9c:4d:
51:8a:9a:72:38:c5:4a:df:8a:1e:f2:68:d3:cb:9a:af:38:ca:
57:99:3d:82:79:1d:db:31:8d:a1:21:a2:74:4c:76:31:e3:d0:
a0:f1:e3:ca:b1:20:f5:d5:4b:1a:42:e9:5d:27:44:cf:d0:11:
17:ea:46:ac:e1:ad:07:1b:53:ee:32:f4:7b:ae:98:77:e9:59:
db:c3:37:27:9d:ff:e6:fe:bf:cf:29:e6:c7:e0:74:06:b4:2d:
6a:47:a4:98:60:80:37:e8:e1:18:49:e2:33:a2:cf:6c:cf:d7:
ef:ea:8a:01:9a:09:af:e3:1f:13:e7:3a:ec:74:37:9f:ed:26:
04:96:b5:ed:ce:7a:5d:9f:a9:64:6b:02:7c:01:91:72:b7:5d:
a2:c5:05:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:13:07 2025 by rpki-client