Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/HZsOs46lQt79QMIWzMc412mZ2QA.roa
File: HZsOs46lQt79QMIWzMc412mZ2QA.roa (raw, json)
Hash identifier: qKC2lgA2r1pXL8vs1Ba3owjwKT/U82VXq/UyPAf92c4=
Subject key identifier: 1D:9B:0E:B3:8E:A5:42:DE:FD:40:C2:16:CC:C7:38:D7:69:99:D9:00
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA75B4D81D22A1B08F65465936C7B7
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/HZsOs46lQt79QMIWzMc412mZ2QA.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30781
IP address blocks: 45.13.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:75:b4:d8:1d:22:a1:b0:8f:65:46:59:36:c7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d9b0eb38ea542defd40c216ccc738d76999d900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5a:72:5a:da:ab:e9:97:cd:16:d8:69:fe:55:
c4:e6:19:12:9d:69:bf:69:ce:59:d3:0b:51:3c:53:
e6:23:32:39:b6:14:cd:9a:2b:8e:91:f6:61:0d:15:
df:b3:dd:1a:ed:be:59:aa:f1:21:a5:16:a3:e5:2c:
a9:16:26:77:44:88:e5:07:83:2b:2a:26:e3:6c:c5:
25:9a:b8:d5:2d:bb:ad:51:38:d0:fc:21:d1:ec:69:
5f:5c:20:cd:ea:76:3b:29:24:63:bd:91:44:31:a9:
8b:66:85:fe:e5:22:9f:c4:34:91:75:df:af:1c:c8:
dc:ba:8d:9a:fb:dd:9c:6f:44:67:2e:39:88:6b:d1:
c2:5a:8d:c2:5c:3d:d3:8c:10:1c:97:d8:b4:9d:58:
33:d2:f8:07:a5:93:66:c4:34:1b:75:5a:f8:f8:b6:
6f:0d:47:49:fa:91:45:41:8e:db:2f:a5:a8:65:c3:
17:55:4d:30:e9:42:ac:d2:f2:0d:2f:16:59:37:b4:
27:a7:76:8c:73:24:fd:11:d0:28:f8:42:e5:29:ba:
80:f7:36:cf:24:b7:16:d8:97:23:7a:9e:0e:0d:da:
fe:36:99:e6:42:b8:14:1f:fe:6d:56:1e:8b:95:91:
d5:0e:1e:e6:01:dc:0b:4c:4e:0a:a5:06:01:85:be:
80:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9B:0E:B3:8E:A5:42:DE:FD:40:C2:16:CC:C7:38:D7:69:99:D9:00
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/HZsOs46lQt79QMIWzMc412mZ2QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.117.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:63:ec:67:91:ed:f8:e6:e6:62:12:84:8e:b4:d3:e2:d5:46:
08:3c:a2:50:c6:85:27:d3:49:2f:9b:10:af:b8:21:4d:af:c6:
cc:35:ee:1e:98:62:aa:43:48:44:9f:83:fc:fa:fc:1f:c7:74:
b4:eb:38:45:87:6c:9e:00:01:4d:ed:25:85:48:24:e3:4a:59:
71:34:7b:df:f4:9a:cf:36:6d:62:0e:37:4a:91:a6:41:0e:0c:
ca:92:4e:b1:12:8c:7d:57:b4:cf:34:10:d8:b0:c7:2b:a8:ee:
02:e9:46:eb:77:f4:e4:96:c2:4e:df:e0:7e:47:42:03:6b:5e:
8f:aa:d0:83:b1:4a:21:1d:bc:d8:9b:75:75:3c:2e:a8:34:4d:
f0:50:30:50:01:f7:98:4f:c3:41:31:fd:00:c7:9b:ac:36:6b:
19:52:c5:1c:6d:51:b4:59:cf:d6:e3:19:e8:ef:b7:d6:9d:65:
89:6e:59:45:df:9b:08:df:0b:95:6f:6d:0b:03:8d:59:f4:18:
f5:ae:4c:2a:63:65:d5:e9:29:0e:eb:bc:9e:a3:42:81:c4:f0:
71:c7:70:bb:74:f6:51:53:2d:a0:06:f3:50:65:df:9e:62:39:
79:66:ee:02:1e:98:e4:5a:49:5d:f3:d9:ca:09:4d:e3:21:20:
14:88:93:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:55:10 2025 by rpki-client