Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/B5vrhwWeN1u04JarSN4IYCbo8Xc.roa
File: B5vrhwWeN1u04JarSN4IYCbo8Xc.roa (raw, json)
Hash identifier: t+R3zUYIJ8xs8XX0sngECa4QZBYlpNaidayI3GIo934=
Subject key identifier: 07:9B:EB:87:05:9E:37:5B:B4:E0:96:AB:48:DE:08:60:26:E8:F1:77
Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial: 0194214459AF441F17A48C7EAA7C6ACF4CBE
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/B5vrhwWeN1u04JarSN4IYCbo8Xc.roa
Signing time: Wed 01 Jan 2025 09:48:35 +0000
ROA not before: Wed 01 Jan 2025 09:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 45.134.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:59:af:44:1f:17:a4:8c:7e:aa:7c:6a:cf:4c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
Validity
Not Before: Jan 1 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=079beb87059e375bb4e096ab48de086026e8f177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:dd:15:f9:42:9b:11:c7:c0:20:61:a1:58:
fd:96:dc:1e:b6:da:66:79:85:00:80:2f:1e:83:8d:
2f:57:f4:ca:1a:f6:34:8a:6d:bc:0b:ee:c3:05:1b:
67:09:47:eb:02:44:0d:75:c6:c4:77:f4:5d:d1:9d:
0c:11:02:8a:fd:02:bd:f1:85:c2:85:8b:95:96:98:
24:e3:6a:3e:c0:64:56:c0:47:65:39:da:88:4c:40:
38:14:42:13:35:7c:e7:9d:76:e4:d1:8e:df:a6:1b:
18:85:68:5d:ee:43:f9:92:da:c7:43:b0:cb:9b:5e:
a8:1b:9e:fb:f6:79:f9:27:c8:2b:30:a5:bb:b9:51:
9d:7f:9f:0a:13:d0:af:59:9d:b8:29:a8:14:ba:1b:
66:6f:10:fd:36:9c:9a:06:a5:e8:3e:a0:96:56:97:
ea:e6:29:a3:18:de:aa:e9:b4:40:2b:e0:3c:4e:f1:
21:81:56:88:b1:b3:f9:7d:c5:c0:92:df:ff:09:0b:
61:66:be:23:10:1d:ab:f0:d5:00:84:47:c9:57:49:
17:66:12:8a:22:89:f6:1c:e0:6b:70:84:b8:35:21:
94:51:a8:5b:d4:7b:3d:41:33:71:34:0a:19:66:33:
b4:5c:0a:24:a9:cd:53:27:05:6a:fa:16:05:73:92:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9B:EB:87:05:9E:37:5B:B4:E0:96:AB:48:DE:08:60:26:E8:F1:77
X509v3 Authority Key Identifier:
keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/B5vrhwWeN1u04JarSN4IYCbo8Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.92.0/22
Signature Algorithm: sha256WithRSAEncryption
06:3e:89:5a:9a:37:e8:aa:c7:9c:89:ab:32:ec:29:9e:6d:52:
57:1b:b2:ee:bf:7d:bc:24:08:6e:b9:35:d6:5d:91:fb:67:6e:
9a:db:9a:9d:b1:7b:56:9e:20:29:d0:ba:24:95:e4:1c:3f:6d:
96:32:bc:c6:fb:12:62:74:9a:5b:96:38:46:75:9c:f1:fe:b1:
95:c1:c9:bb:ef:2c:3d:76:4c:d3:69:8b:93:7a:20:25:25:01:
ff:a1:82:b2:7d:87:2e:b2:33:61:07:6d:74:84:cb:5b:ce:c0:
25:3e:ef:8e:b1:fc:a0:00:3c:7c:1b:d8:a4:05:70:2f:5f:30:
40:63:52:ec:d3:9e:b6:61:ed:04:c3:66:e6:d8:09:cc:f8:ab:
55:4c:9f:d2:3e:6b:88:6c:a9:22:68:b0:a7:71:5d:99:81:1f:
75:66:8b:60:95:24:a7:71:f7:b7:5c:31:2c:d1:7a:f6:53:96:
ea:00:27:b8:b4:ba:99:4d:33:c1:e3:80:92:c2:9f:ba:94:83:
a3:4c:5f:5a:41:8c:05:f4:f6:47:96:cf:46:cb:0a:8f:1b:e3:
b7:c3:ab:09:c1:57:e2:ee:d9:01:d7:fa:e8:02:29:cd:fe:d5:
e4:9b:89:8c:a2:48:cb:d4:87:b6:0e:a3:5a:3d:ce:ab:4d:b9:
b7:75:3d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:25:40 2025 by rpki-client