Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/5YWRaEaqIZmQlcHah2mzXHZRY6I.roa
File: 5YWRaEaqIZmQlcHah2mzXHZRY6I.roa (raw, json)
Hash identifier: PZvn7swJDPRhsDrQLp0DUJvLz5cct9mii7GDUumRyag=
Subject key identifier: E5:85:91:68:46:AA:21:99:90:95:C1:DA:87:69:B3:5C:76:51:63:A2
Certificate issuer: /CN=a1a01f76a42be8717befdce1676215988a4dfc73
Certificate serial: 018573BAC04CB8A7342962E3D22E0DC450B1
Authority key identifier: A1:A0:1F:76:A4:2B:E8:71:7B:EF:DC:E1:67:62:15:98:8A:4D:FC:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaAfdqQr6HF779zhZ2IVmIpN_HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/5YWRaEaqIZmQlcHah2mzXHZRY6I.roa
Signing time: Mon 02 Jan 2023 18:24:56 +0000
ROA not before: Mon 02 Jan 2023 18:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136526
IP address blocks: 45.142.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:ba:c0:4c:b8:a7:34:29:62:e3:d2:2e:0d:c4:50:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a01f76a42be8717befdce1676215988a4dfc73
Validity
Not Before: Jan 2 18:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e585916846aa21999095c1da8769b35c765163a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9f:14:73:1d:ed:56:11:ea:7f:db:0b:15:4e:
5f:f7:5e:a2:23:7a:75:20:3d:a8:57:fe:ac:3a:4b:
ad:06:4b:cf:87:d5:51:ac:30:1e:86:4e:47:85:bc:
a0:4d:5c:b6:45:11:24:d6:21:36:92:fe:89:a4:dd:
76:00:5f:a3:01:4f:5c:07:21:40:0f:f0:9b:07:90:
30:be:ee:1b:f6:6c:b1:a7:94:16:a7:5c:7b:06:43:
da:a2:95:ee:02:c7:69:5a:16:77:63:10:10:4f:27:
02:91:23:80:f4:6b:61:e4:22:e0:30:56:6f:ac:2b:
3b:ad:9a:f8:c2:c7:bc:f0:2c:de:04:2d:71:fe:4f:
96:0c:57:7f:46:13:7d:44:4e:0c:21:f2:e6:3f:9c:
ea:0f:f8:ac:68:f7:d4:01:02:e0:9b:6a:bf:e4:18:
a0:25:b3:6a:ba:9c:90:08:35:57:41:9a:8e:da:20:
08:aa:e6:4a:8a:5b:cd:63:16:6d:d2:4c:dc:65:9e:
fa:ff:cd:39:ed:3b:ea:6e:f1:ca:b0:23:c0:d2:a7:
f6:df:5e:32:a9:90:f0:83:56:05:de:04:79:7b:93:
04:2d:e7:0c:7e:d0:3a:95:63:98:c2:6c:6e:3a:e8:
fd:fe:b8:ce:a5:e8:94:0c:d9:fb:94:e1:18:1b:5d:
5b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:85:91:68:46:AA:21:99:90:95:C1:DA:87:69:B3:5C:76:51:63:A2
X509v3 Authority Key Identifier:
keyid:A1:A0:1F:76:A4:2B:E8:71:7B:EF:DC:E1:67:62:15:98:8A:4D:FC:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaAfdqQr6HF779zhZ2IVmIpN_HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/5YWRaEaqIZmQlcHah2mzXHZRY6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/oaAfdqQr6HF779zhZ2IVmIpN_HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.155.0/24
Signature Algorithm: sha256WithRSAEncryption
51:1e:bf:d3:16:97:02:5a:dd:c7:49:c2:9e:2b:47:2c:87:4d:
05:59:1b:6b:45:5e:77:cb:b7:bd:a9:38:80:eb:d1:01:4d:27:
ce:8a:12:7e:f2:b5:43:16:88:a2:ca:15:3b:8e:97:b3:1a:79:
07:80:13:5a:3c:a9:41:b7:cf:0c:0a:c0:26:4f:19:cd:cf:61:
25:5f:a8:5d:14:59:04:09:a2:e8:a9:58:d4:ab:53:9e:d3:e6:
80:e7:26:81:23:1f:83:f1:56:de:00:88:b1:e6:67:12:af:ba:
d8:f9:43:0c:75:a8:9e:5d:97:ad:a3:3f:1e:e2:c9:e2:5b:2f:
24:9a:3f:99:2e:75:ad:bc:8c:b4:eb:bc:6b:11:37:e9:4c:07:
c2:56:fa:d1:ff:6c:53:9f:df:5e:78:2a:17:0e:44:e1:3a:c1:
39:c9:dc:a3:3d:00:1a:c9:fb:c9:11:02:59:e4:10:35:3c:aa:
31:1f:ea:f7:d5:43:e5:e8:2a:a4:e1:96:53:fd:7c:c1:f7:60:
e8:27:97:bc:2a:90:8e:8c:b7:38:cb:fc:5e:c3:b3:fc:39:99:
6e:a9:87:c5:98:16:82:95:6f:3e:18:4b:46:b8:bd:1e:95:b1:
92:66:0f:02:25:cc:02:a2:e1:c0:70:70:4e:aa:64:12:f0:62:
3f:3a:3d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:13:52 2025 by rpki-client