Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/W8rAczl4jdhrgDFRWwWo69-7oEs.roa
File: W8rAczl4jdhrgDFRWwWo69-7oEs.roa (raw, json)
Hash identifier: 5C6AUzyfvAeK/esgYM5GIYs3hRv6FbN5Agd8vil6DtI=
Subject key identifier: 5B:CA:C0:73:39:78:8D:D8:6B:80:31:51:5B:05:A8:EB:DF:BB:A0:4B
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 0194258F146E33402C531F66391D7CE63AF7
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/W8rAczl4jdhrgDFRWwWo69-7oEs.roa
Signing time: Thu 02 Jan 2025 05:48:41 +0000
ROA not before: Thu 02 Jan 2025 05:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395899
IP address blocks: 45.129.240.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:14:6e:33:40:2c:53:1f:66:39:1d:7c:e6:3a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Jan 2 05:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bcac07339788dd86b8031515b05a8ebdfbba04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fe:43:7d:44:c2:51:5e:12:37:2e:3a:fb:75:
b4:70:90:29:ed:b1:c7:9b:8c:dd:f5:11:99:54:6f:
e1:de:6d:83:92:ae:24:81:5a:1a:a9:96:c0:89:45:
0a:69:03:22:87:33:70:a4:17:68:47:66:dc:f5:6b:
ec:d4:84:a7:c7:3b:8b:e8:23:6c:6b:cf:48:1d:30:
ee:95:a2:d5:6f:ed:3c:dd:50:7f:da:1e:ac:15:9b:
e7:a5:8c:28:cf:1e:e5:3a:8e:2f:71:66:d9:63:ca:
ff:01:3e:78:f2:dc:ef:de:8e:ea:77:6a:e6:46:60:
c4:66:52:30:69:10:9b:d1:7c:58:a5:8d:10:f5:13:
82:64:02:d9:7a:9c:75:f5:5a:40:ab:ac:5c:b5:13:
4d:8d:d6:75:fd:ab:73:39:35:21:d4:f3:ab:0f:a8:
04:ef:2d:a2:7d:84:c9:1e:bf:e9:9d:ef:ff:be:f2:
e6:36:8f:5b:47:98:9b:b2:63:0c:c4:9b:9f:2f:50:
e5:21:f0:0e:2f:f7:bf:7d:df:7e:2e:5f:1e:4d:fb:
29:44:a8:78:94:3f:05:db:dd:3f:c7:bb:b5:87:bf:
91:b8:93:37:72:31:57:be:5a:3c:99:08:b0:0f:23:
c6:c1:37:24:e1:30:73:8b:df:aa:de:3e:82:9f:c7:
6a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CA:C0:73:39:78:8D:D8:6B:80:31:51:5B:05:A8:EB:DF:BB:A0:4B
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/W8rAczl4jdhrgDFRWwWo69-7oEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.240.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:c5:37:f2:c2:27:51:e6:b1:c7:31:4a:37:ff:3d:06:8a:f1:
97:ad:5f:ed:e6:03:a6:9c:3f:5f:23:33:59:5e:a6:ce:1e:f3:
18:ff:07:5e:cf:b0:02:3a:be:6e:d3:14:25:e0:42:4d:ce:06:
a3:d2:d6:db:97:37:f8:aa:b1:41:33:49:cb:f9:32:00:62:54:
51:e3:f4:26:4c:b2:1f:7a:c4:a4:22:23:34:2f:63:00:7c:9c:
63:0a:5f:3c:9a:65:42:f9:e0:c5:5b:da:6c:e2:a5:da:3c:84:
ae:e4:aa:89:ae:e2:11:43:c4:8f:e8:9e:4b:4b:c0:ba:2e:71:
2c:80:8c:a1:06:0f:24:06:5f:16:c9:31:ff:78:1c:6c:64:06:
26:86:f7:01:39:66:fc:6c:9f:67:89:fa:26:d9:e8:14:9b:77:
70:f8:5b:54:f6:de:58:3b:d0:80:f3:64:0b:63:2e:4c:8e:49:
9b:c0:6f:e1:9e:6e:c0:dc:1f:66:17:76:32:66:a1:c1:58:d4:
1c:a4:93:d4:5a:49:10:3f:e0:98:9e:72:3f:50:e3:46:25:4d:
85:a2:c9:68:ff:4c:d4:e4:1f:10:c0:6e:79:ad:34:75:dc:94:
02:e3:72:47:68:49:43:81:72:8b:e1:ef:74:fd:42:0b:01:dc:
78:75:c0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:44:29 2025 by rpki-client