Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/kxW1ACFlthp6zFliAhXG5aZtJrg.roa
File: kxW1ACFlthp6zFliAhXG5aZtJrg.roa (raw, json)
Hash identifier: gl4ysipzIWR3k1Nea68+h+I7SDKD7ZPTCg44K0WQbck=
Subject key identifier: 93:15:B5:00:21:65:B6:1A:7A:CC:59:62:02:15:C6:E5:A6:6D:26:B8
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 01954EF516E4A19166575883C779B360529C
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/kxW1ACFlthp6zFliAhXG5aZtJrg.roa
Signing time: Fri 28 Feb 2025 23:47:19 +0000
ROA not before: Fri 28 Feb 2025 23:47:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213438
IP address blocks: 45.129.13.0/24 maxlen: 24
45.142.192.0/24 maxlen: 24
45.148.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4e:f5:16:e4:a1:91:66:57:58:83:c7:79:b3:60:52:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Feb 28 23:47:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9315b5002165b61a7acc59620215c6e5a66d26b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:12:e6:3d:2f:ac:d2:3d:0f:6a:1a:76:dd:27:
6d:e7:94:a7:26:aa:e1:99:7d:16:94:96:c9:9b:28:
a4:10:35:ba:27:41:4a:ea:f7:aa:c7:3d:0a:df:cd:
f4:be:22:8b:f0:e4:83:6d:a1:f7:cb:4c:c1:83:db:
aa:1b:a2:ad:c3:a0:dc:36:94:78:1a:49:9b:e4:72:
11:62:46:95:c2:a9:87:03:43:94:3a:ba:da:9b:ad:
02:b2:d3:82:10:6b:c8:e7:3a:1b:76:aa:ed:7b:58:
d8:c9:88:c9:b7:03:84:81:8a:b9:07:68:95:00:5b:
d3:6a:63:f1:a3:f6:77:cd:b3:a4:fd:38:a9:ce:58:
41:d7:5f:29:4d:61:e9:4e:4d:1e:c4:ec:10:e5:5b:
4c:f4:66:14:ec:b7:ac:c5:e9:69:73:4b:64:79:46:
90:ca:83:9c:bf:46:14:92:db:db:17:2b:79:fe:ac:
bd:ee:37:a3:4b:a8:a5:c4:b3:b2:b0:c6:51:51:33:
e6:d2:02:7b:e9:20:76:4b:f1:9c:3b:a3:bb:e3:00:
f0:f0:7d:38:96:5e:5c:88:2c:77:a2:b3:a5:aa:0b:
3d:74:b9:6c:64:4a:fa:16:31:b8:7a:3a:ff:fd:61:
1a:a3:e1:08:b9:26:d2:b2:bc:21:8e:81:a7:74:e8:
07:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:15:B5:00:21:65:B6:1A:7A:CC:59:62:02:15:C6:E5:A6:6D:26:B8
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/kxW1ACFlthp6zFliAhXG5aZtJrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.13.0/24
45.142.192.0/24
45.148.11.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:8c:4e:17:02:6c:e0:c9:28:88:2f:e4:f2:61:e1:25:16:1e:
18:90:91:3b:cf:6c:c6:a4:44:e3:f9:71:4f:2e:99:51:8e:f1:
0c:c2:d2:fd:83:6d:c6:30:cb:28:50:33:e4:49:d1:fa:22:26:
34:1f:32:83:2f:0f:66:4f:e5:40:5b:ab:9a:a4:b6:fd:11:85:
64:e0:ad:33:30:1a:60:bf:1b:82:e8:3b:52:ee:d3:ff:d2:91:
af:c0:2b:3e:3c:7b:40:17:91:d8:21:a9:9d:ab:44:fe:7e:b1:
14:0f:b0:a0:ad:de:7d:00:b4:5e:5a:e0:a7:47:39:f7:ec:46:
af:59:b3:d2:b2:6e:1c:6e:81:0d:a2:34:5f:fd:6f:26:52:ae:
60:09:a5:84:01:ff:f7:b0:d5:6c:ba:91:10:4b:8f:83:52:bb:
4f:f6:de:cf:be:36:99:80:7f:5f:58:5f:af:91:c4:20:9d:4b:
02:6a:a7:a8:be:14:94:45:73:5b:83:7f:8e:68:75:03:05:2a:
7d:d4:7e:50:07:ad:06:b7:1c:8c:8d:8b:94:c0:37:80:5e:c7:
56:58:0e:2b:d8:86:d6:a5:92:f4:e9:1c:81:48:a2:32:4d:81:
b1:89:74:96:3d:a3:10:b3:d2:4b:42:e9:53:bd:a7:61:4a:b8:
5a:78:f9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:13:57 2025 by rpki-client