Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/evdpU8RxaI_pbdRiidwVOCapui0.roa
File: evdpU8RxaI_pbdRiidwVOCapui0.roa (raw, json)
Hash identifier: gmEXsktEnud6XxBSpR/JYtLPKpbESxZW8V98Ytskm+o=
Subject key identifier: 7A:F7:69:53:C4:71:68:8F:E9:6D:D4:62:89:DC:15:38:26:A9:BA:2D
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 019422FB69EB289D4D771B6E9BFC1F9A6BB0
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/evdpU8RxaI_pbdRiidwVOCapui0.roa
Signing time: Wed 01 Jan 2025 17:48:09 +0000
ROA not before: Wed 01 Jan 2025 17:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208007
IP address blocks: 45.155.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:69:eb:28:9d:4d:77:1b:6e:9b:fc:1f:9a:6b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Jan 1 17:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7af76953c471688fe96dd46289dc153826a9ba2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:af:8a:7e:6b:b7:97:8a:2e:62:95:80:0f:ab:
37:6e:1d:66:d6:5d:84:c5:5b:cb:53:26:ab:be:59:
65:4d:c9:57:29:be:ef:99:7e:8a:65:33:56:27:28:
5d:e0:73:f1:b1:e8:d6:82:7b:ba:0c:c0:db:84:67:
c6:b3:b9:d0:94:19:f8:d0:2c:44:31:26:e0:43:4c:
e2:9b:86:55:6a:cb:c0:a0:fd:e9:f5:44:b1:17:fd:
86:da:84:85:f8:72:48:be:c7:bf:d4:42:55:45:4d:
b6:0e:40:41:43:32:3e:81:ac:e7:2f:c7:26:f8:9a:
78:f7:bf:4b:68:fa:3e:32:31:4d:3b:69:b2:eb:37:
95:d4:fe:97:d1:7c:60:9e:00:34:d8:19:f3:cf:68:
fe:2a:f2:50:4f:0b:4d:8c:ef:c2:5d:dd:6b:4e:ea:
45:00:07:aa:3a:83:71:3d:50:bf:22:d5:67:7f:06:
2d:dc:fa:6b:62:2f:f9:98:88:10:1b:fb:83:fa:2e:
93:d0:54:96:5b:c7:ce:1e:37:90:29:1b:d0:5f:50:
fb:6d:9e:6c:ea:8f:7a:86:cd:a4:b4:7d:72:6f:71:
eb:7d:3c:9c:0a:dd:8e:de:67:26:6a:4e:34:01:ed:
38:86:29:c1:a7:49:3d:f0:45:aa:4e:32:d7:b4:bc:
5e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F7:69:53:C4:71:68:8F:E9:6D:D4:62:89:DC:15:38:26:A9:BA:2D
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/evdpU8RxaI_pbdRiidwVOCapui0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.135.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:13:0a:57:09:12:69:83:73:64:1d:1e:54:27:db:48:1b:b4:
8f:a5:ca:71:b2:a7:61:ff:b0:a8:61:b5:78:6e:e1:d2:9d:4e:
65:fa:0f:55:94:77:13:6c:a5:5d:3d:c9:72:11:27:ff:42:dc:
97:1f:b8:e7:17:bf:e8:f9:ab:a7:a1:e5:77:fd:2f:7f:1a:08:
3b:a9:45:0e:ff:d8:87:e3:95:91:47:e4:3b:a2:82:a0:dd:e8:
9b:28:d4:1a:6c:e3:ef:b8:94:62:de:e9:05:bf:e1:27:c8:60:
91:b5:e3:9c:56:01:9c:20:9b:96:76:3c:00:8a:f2:4d:8a:94:
6c:94:dd:fc:c7:00:e2:7c:01:71:83:e3:9b:72:f2:a1:8c:06:
6e:4e:75:da:63:bc:01:89:1f:15:1a:26:ff:21:16:9a:c0:40:
a2:92:0e:3a:95:e4:a5:de:f8:c1:ea:a9:ae:73:8d:5d:f0:a3:
9c:cb:87:cc:af:b8:41:ee:2f:25:af:dc:3c:8c:ea:46:c0:e5:
12:0c:e3:cf:a4:b5:09:8e:86:f4:1d:c5:83:cf:f3:fe:95:96:
00:7d:de:cf:08:55:55:a4:3b:14:73:49:b7:c0:07:97:19:18:
3e:e2:ef:cf:1b:1e:79:a6:74:1f:22:eb:90:67:9a:9e:1c:8e:
fb:23:37:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:59 2025 by rpki-client