Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/P3bjQ3rZ_Hxil-Bl24SGRQFZa78.roa
File: P3bjQ3rZ_Hxil-Bl24SGRQFZa78.roa (raw, json)
Hash identifier: uktV2olTk0NBryPXRqUeiNr51L4JUWE5WcMyOYNOoQk=
Subject key identifier: 3F:76:E3:43:7A:D9:FC:7C:62:97:E0:65:DB:84:86:45:01:59:6B:BF
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 01856C9CBAF2D5F53A43704182B1FCBFEE42
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/P3bjQ3rZ_Hxil-Bl24SGRQFZa78.roa
Signing time: Sun 01 Jan 2023 09:14:48 +0000
ROA not before: Sun 01 Jan 2023 09:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 45.129.54.0/24 maxlen: 32
45.129.55.0/24 maxlen: 32
45.129.52.0/24 maxlen: 32
45.129.53.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:ba:f2:d5:f5:3a:43:70:41:82:b1:fc:bf:ee:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Jan 1 09:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f76e3437ad9fc7c6297e065db84864501596bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:21:fb:25:e0:8e:e4:69:74:d7:ac:0d:54:
4f:3b:6a:02:0a:40:90:b5:ad:ad:13:9b:84:9d:2c:
d1:1e:ef:8d:0e:a5:11:3c:62:bd:72:0d:72:73:f1:
11:f7:18:88:3e:54:b5:c5:51:fb:05:13:c2:f2:0e:
98:9a:6b:00:1a:28:82:01:d3:7a:96:be:80:99:0a:
aa:94:73:ff:d6:f0:ca:1c:9b:3d:98:75:a3:c3:48:
af:d2:09:eb:01:45:7c:f1:11:93:9c:7c:59:d9:e8:
5e:04:9d:c4:11:75:74:ef:75:80:cf:c9:f2:0b:0d:
44:7f:0c:16:77:04:69:c0:8b:fd:c8:16:fd:07:12:
e4:ff:b7:c6:21:47:5c:85:6b:24:96:b0:cb:f4:8c:
47:73:69:dd:87:76:87:47:29:e2:b1:05:32:25:b9:
12:1d:50:af:de:dc:59:9a:ba:40:12:d0:63:18:91:
ac:80:88:10:80:c5:22:7a:c5:1b:da:bb:0e:91:d0:
38:48:ef:f3:3b:8c:85:61:cc:90:12:43:03:aa:c6:
65:5e:35:09:91:6c:63:7c:b7:72:24:e1:3b:23:75:
21:ee:bd:f2:2e:5e:b1:b2:fd:a8:4a:b3:78:92:87:
7a:17:13:34:ba:17:04:79:48:d1:6d:7d:a3:d9:5e:
5c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:76:E3:43:7A:D9:FC:7C:62:97:E0:65:DB:84:86:45:01:59:6B:BF
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/P3bjQ3rZ_Hxil-Bl24SGRQFZa78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.52.0/22
Signature Algorithm: sha256WithRSAEncryption
53:18:04:58:be:30:50:9e:df:30:42:a5:21:03:7c:97:aa:3a:
14:1c:3c:31:6d:7f:77:5d:05:a9:b5:81:ee:f0:b5:88:ce:0d:
61:8d:a7:04:50:5a:4b:69:97:4d:12:67:0d:3e:31:ac:af:28:
5e:85:78:f6:e7:02:d0:cc:6c:5e:4c:a2:48:07:17:a7:2d:69:
95:a6:01:34:9f:fb:12:24:ef:eb:c3:ca:67:3c:95:12:43:83:
b3:f5:10:ad:1c:e3:38:8a:1e:5d:47:29:4e:7c:92:fe:aa:9e:
0b:e3:6a:2f:57:ed:f8:19:10:c7:e5:5e:33:9f:b3:50:18:96:
08:9f:a3:8a:21:f2:da:c9:12:e3:b5:bd:cb:79:d4:89:30:c7:
ca:ab:d2:f5:cd:35:bf:d6:90:c1:f6:b2:0d:eb:22:78:f6:b3:
b7:ae:22:86:76:2f:b2:d4:1e:4a:ec:75:a4:f5:78:7b:7b:43:
d7:f1:40:08:e0:e3:51:d0:de:22:7f:88:50:01:54:2d:cc:2e:
99:41:18:e2:94:fe:2f:0d:d6:d6:ba:c8:7b:d5:e6:af:86:e7:
79:78:12:1c:22:dd:8f:16:38:69:f0:03:d9:a4:3d:f4:67:95:
5e:63:9d:17:20:5b:ec:b6:94:9d:1b:37:1d:c7:18:a6:ec:ec:
fa:95:f6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:05:42 2025 by rpki-client