Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/xfVr9fISlXEqAQiEKv6HOjoj5r0.roa
File: xfVr9fISlXEqAQiEKv6HOjoj5r0.roa (raw, json)
Hash identifier: E/Me9Hr6n61NIohLAXFLD6LM7KKjtEyjxNrmC/bwtgE=
Subject key identifier: C5:F5:6B:F5:F2:12:95:71:2A:01:08:84:2A:FE:87:3A:3A:23:E6:BD
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 01956A591D2239350B40B61D5857BA85B68B
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/xfVr9fISlXEqAQiEKv6HOjoj5r0.roa
Signing time: Thu 06 Mar 2025 07:26:19 +0000
ROA not before: Thu 06 Mar 2025 07:26:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.129.240.0/23 maxlen: 24
45.129.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6a:59:1d:22:39:35:0b:40:b6:1d:58:57:ba:85:b6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Mar 6 07:26:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5f56bf5f21295712a0108842afe873a3a23e6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1d:37:97:03:a2:63:2c:09:56:22:a8:4c:82:
56:f9:7a:c8:9a:be:8f:ee:05:87:30:56:89:8b:e0:
a5:0c:4b:da:4c:7f:41:06:31:e0:58:b2:ea:41:69:
b6:55:2a:e7:21:b8:ce:7a:75:02:6b:06:a8:20:a9:
2b:f1:59:3b:57:24:0c:eb:44:ce:52:19:54:5d:0f:
6b:38:8e:96:cd:72:26:62:0d:3f:8c:c3:07:ca:98:
63:4d:3b:75:96:e8:eb:84:57:09:62:c9:fb:0e:d8:
05:c4:21:2c:34:85:30:4d:67:9b:6a:a6:19:57:3a:
db:47:86:ae:24:bd:41:4d:d1:01:e8:2d:01:78:cf:
7e:12:2c:de:a1:8b:a0:62:ff:d0:fa:24:b6:18:26:
01:69:00:5a:5e:c6:61:89:38:b8:b9:8c:4a:a1:db:
b3:77:93:9e:d6:a8:b4:d4:f0:49:d8:b2:2a:76:ab:
35:f4:f5:8c:a9:3a:57:29:74:e4:18:fb:9d:d7:04:
b8:3b:49:ee:36:8a:b1:1b:39:3b:fd:e1:63:4c:ab:
8e:54:50:73:76:7d:e4:40:84:2b:6b:5f:db:ac:2c:
54:f4:74:f0:31:7f:77:8f:fc:6f:1a:6f:7e:c6:45:
54:7b:89:1f:14:31:5e:2d:e8:c9:ee:d0:36:98:11:
76:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F5:6B:F5:F2:12:95:71:2A:01:08:84:2A:FE:87:3A:3A:23:E6:BD
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/xfVr9fISlXEqAQiEKv6HOjoj5r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.240.0-45.129.242.255
Signature Algorithm: sha256WithRSAEncryption
2a:04:66:9c:94:b7:41:56:64:88:9e:96:26:0c:4a:75:20:d6:
d9:8f:a4:bd:72:54:9d:f7:45:a2:5f:96:53:6f:98:c8:a6:2d:
8c:5b:31:21:23:dc:1a:11:b6:ca:df:1d:62:91:08:4e:0c:06:
93:97:01:8c:c0:f8:71:f6:2c:18:8f:6d:09:29:a3:e2:85:cf:
e0:77:fb:8e:47:cb:a8:47:97:5d:97:8d:56:63:b8:f6:7c:e6:
53:ce:6e:71:61:11:30:f4:b8:3f:14:bb:22:b0:a9:bc:3c:87:
64:ac:e9:06:00:dc:c1:f8:27:fe:e4:bd:38:bd:06:a2:70:87:
e2:b3:9e:a7:bc:45:1e:d9:db:82:1b:e4:01:fc:ee:9a:b9:b6:
83:ad:d5:0f:53:6f:59:aa:ab:3d:3f:a9:60:33:e3:2b:2e:71:
5c:cc:89:a4:1b:de:a1:8f:86:55:97:7f:6a:1a:3a:c4:b2:a1:
3f:31:ba:42:95:5f:ad:fd:02:ab:77:f8:99:91:ba:c5:24:67:
99:50:1d:a8:cf:b8:fd:1c:7e:05:7b:79:6a:94:f6:53:f0:46:
46:6d:d8:1e:48:ea:00:1f:c7:0c:f0:b1:2f:46:01:45:d0:b7:
0b:26:34:dd:27:94:47:9b:0e:ae:9f:88:17:9e:26:fc:c5:b2:
3d:0f:86:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:50 2025 by rpki-client