Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/bm9uyu2H4bT8Q5T9hiFPsSJWZ50.roa
File: bm9uyu2H4bT8Q5T9hiFPsSJWZ50.roa (raw, json)
Hash identifier: pbLgZJUGIUu521pN/d9y2YZ244Tt10VuDcP4xlG0jPI=
Subject key identifier: 6E:6F:6E:CA:ED:87:E1:B4:FC:43:94:FD:86:21:4F:B1:22:56:67:9D
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 0194258F0AED1C7D2D83146D1E09E8478259
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/bm9uyu2H4bT8Q5T9hiFPsSJWZ50.roa
Signing time: Thu 02 Jan 2025 05:48:38 +0000
ROA not before: Thu 02 Jan 2025 05:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 45.129.240.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:0a:ed:1c:7d:2d:83:14:6d:1e:09:e8:47:82:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Jan 2 05:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e6f6ecaed87e1b4fc4394fd86214fb12256679d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:5f:a0:52:0e:64:70:9f:ab:46:73:ee:3e:
1c:98:d6:70:71:75:f4:33:a7:38:7e:67:0f:60:f7:
af:c2:6c:2b:15:16:ee:38:5b:a7:e5:59:09:45:44:
d6:d2:f5:af:07:88:43:d3:1d:25:58:98:e6:69:db:
39:97:56:ec:f3:87:86:f8:a6:61:4c:fa:de:03:21:
ef:02:a1:ce:ad:6c:80:72:d9:51:63:df:a6:22:2f:
b6:05:a6:bc:a1:71:d9:b8:24:df:d1:30:4a:f5:42:
f6:22:59:09:90:1b:05:92:cd:20:eb:b5:e0:5e:af:
a5:8b:21:de:f8:52:d5:b4:3e:9e:1e:3d:ed:cb:75:
8d:a5:ac:d0:0c:bb:cf:a6:cd:37:62:de:46:06:1c:
0c:b4:eb:a1:a9:d5:1b:66:a7:e2:ca:78:fb:20:47:
3c:de:a5:e6:76:85:70:a8:b0:28:98:16:c9:6a:1a:
90:9f:33:f8:49:14:be:e1:d5:ff:c7:3b:55:9c:80:
fd:4a:ae:61:a0:53:ea:37:db:2e:ba:af:73:17:e8:
01:04:2c:b7:0e:e3:89:f4:bc:4a:b4:70:08:86:45:
f6:69:a6:74:97:1c:60:c8:ca:41:1b:50:5d:bd:ff:
38:f1:8b:e3:d3:bf:44:93:b3:cb:d7:d5:a3:00:c4:
fb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6F:6E:CA:ED:87:E1:B4:FC:43:94:FD:86:21:4F:B1:22:56:67:9D
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/bm9uyu2H4bT8Q5T9hiFPsSJWZ50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.240.0/23
Signature Algorithm: sha256WithRSAEncryption
19:48:cd:05:a5:71:1d:5f:7f:c0:e4:e5:d6:a8:3d:e5:cb:2d:
5c:27:4a:ec:4c:19:ca:5f:68:70:1c:66:c7:dc:2a:90:73:32:
d6:ef:1e:b7:e5:e4:e7:e0:1f:c3:cb:c8:37:67:3c:e2:6e:9b:
ee:c4:a9:c4:55:4c:d6:e9:5e:f3:99:89:d9:c3:87:ec:ce:15:
ea:72:81:ea:3f:b1:76:93:8b:ba:c1:08:8a:97:64:bb:cc:7f:
d7:20:0c:fb:34:12:37:b3:15:d9:fa:24:c2:4d:ab:e8:18:68:
55:8b:37:6c:97:2a:82:4a:77:d7:c3:a1:11:8d:8f:56:f4:27:
44:88:14:0f:08:f8:21:93:d5:71:9a:f3:c4:ee:d4:0f:98:12:
a7:ad:09:70:2d:45:e0:e4:1e:31:0c:27:4a:9e:a3:6b:5b:95:
25:44:14:8c:c7:6c:a3:57:37:56:3d:43:96:bd:70:7f:e0:60:
b6:4b:42:fb:8d:54:a3:9a:03:f6:4d:97:2f:56:1e:98:1f:79:
f6:31:32:55:c5:e8:51:8d:01:3e:e9:00:6d:a9:a6:ee:4d:5b:
1b:d9:0d:73:b5:83:27:81:1f:ec:0a:d1:b4:5f:38:d6:94:ce:
77:32:d3:ca:a6:25:7f:6f:eb:e1:6e:8f:ae:44:46:1c:e5:7c:
9e:20:14:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:14 2025 by rpki-client