Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/d31e85-2786-4d91-a69a-3f5355092aec/1/XtuMZLIlEqvfEyCH8xbArlOSOHg.roa
File: XtuMZLIlEqvfEyCH8xbArlOSOHg.roa (raw, json)
Hash identifier: h3UONVf2R7a36c2XI9iuFi9pmBjw4UwkxudcFqU8Ovo=
Subject key identifier: 5E:DB:8C:64:B2:25:12:AB:DF:13:20:87:F3:16:C0:AE:53:92:38:78
Certificate issuer: /CN=33918ec7f02cacafe26546be1e1980f9c3a3e890
Certificate serial: 019C769C
Authority key identifier: 33:91:8E:C7:F0:2C:AC:AF:E2:65:46:BE:1E:19:80:F9:C3:A3:E8:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5GOx_AsrK_iZUa-HhmA-cOj6JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/d31e85-2786-4d91-a69a-3f5355092aec/1/XtuMZLIlEqvfEyCH8xbArlOSOHg.roa
Signing time: Sat 01 Jan 2022 02:55:06 +0000
ROA not before: Sat 01 Jan 2022 02:55:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 45.15.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27031196 (0x19c769c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33918ec7f02cacafe26546be1e1980f9c3a3e890
Validity
Not Before: Jan 1 02:55:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5edb8c64b22512abdf132087f316c0ae53923878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a9:89:36:98:6f:8a:27:34:bf:d2:5f:4c:a0:
db:aa:27:11:48:5d:d9:e6:25:a7:ea:19:11:8c:3d:
a7:79:fa:cd:c3:8a:26:87:e9:28:0a:5e:53:e8:e0:
01:a7:6d:60:88:ec:ba:90:7e:39:4d:3b:0b:5d:d0:
27:7e:0f:10:42:44:0a:66:64:ad:ca:71:49:95:61:
a8:05:94:87:7d:ac:03:8e:bb:72:a3:10:81:c8:17:
6a:85:a0:ba:8b:47:df:98:bf:6e:d2:bc:b4:f1:3c:
a9:9f:d5:26:06:18:e6:d0:4d:e1:c1:36:21:3d:89:
8f:d7:01:aa:0d:99:f7:63:43:07:dc:9b:19:b5:ce:
1e:af:0b:b5:7d:fe:f4:e8:0d:6f:c4:de:05:1e:5d:
02:d6:22:46:3a:86:a0:03:3f:ac:93:da:ac:0e:ba:
78:b9:c3:03:f3:78:c3:7c:88:76:b3:f0:81:6d:1f:
a9:23:ba:23:54:65:f0:a3:73:b7:a5:55:37:9c:d0:
b8:c5:89:45:10:eb:c9:68:34:02:7d:84:3c:13:34:
f0:bb:74:31:18:5a:bb:4a:75:84:ad:32:7b:23:e3:
c6:5b:4f:85:be:72:bc:df:af:ee:49:f6:69:1d:17:
55:89:11:0b:78:b3:2a:42:00:44:0d:1e:b0:b3:89:
ab:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DB:8C:64:B2:25:12:AB:DF:13:20:87:F3:16:C0:AE:53:92:38:78
X509v3 Authority Key Identifier:
keyid:33:91:8E:C7:F0:2C:AC:AF:E2:65:46:BE:1E:19:80:F9:C3:A3:E8:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5GOx_AsrK_iZUa-HhmA-cOj6JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/d31e85-2786-4d91-a69a-3f5355092aec/1/XtuMZLIlEqvfEyCH8xbArlOSOHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/d31e85-2786-4d91-a69a-3f5355092aec/1/M5GOx_AsrK_iZUa-HhmA-cOj6JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.42.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c1:b0:ba:d8:bc:fc:b8:28:0c:26:eb:44:6d:dd:63:30:9d:
69:c4:37:bf:ec:ea:79:12:28:d6:f2:8b:67:65:5b:f7:58:fa:
f0:38:9c:f5:9b:86:05:c2:e8:8b:49:77:f0:0c:1d:7a:ba:1d:
28:d9:c1:bf:59:e0:34:41:00:17:85:df:99:9c:d4:1f:73:a8:
b2:13:14:ac:6a:fc:fa:e0:48:ad:03:33:73:f1:26:1e:d1:c2:
b5:a9:c8:9e:03:ce:6c:79:cf:f4:f7:60:df:ca:5f:7c:70:ec:
45:b0:f4:03:cf:1c:1f:fc:80:be:1e:de:a8:d3:50:c2:af:cc:
8b:94:3b:a8:11:39:6c:9b:83:35:08:27:95:83:2d:1c:fc:25:
41:be:28:98:d9:42:0e:d6:f2:7f:c8:26:d3:86:66:da:84:73:
19:03:d7:0a:8e:7e:b1:e8:4e:73:69:cc:ce:7a:1b:0c:5d:69:
47:61:ef:0a:65:90:95:59:03:aa:93:f7:7c:51:48:b1:e5:e9:
0a:cb:9d:bc:f0:a9:a3:54:3e:b3:7e:15:83:e0:aa:25:04:d3:
94:c0:f6:d6:97:64:c9:95:53:16:c4:99:76:20:f5:fc:13:57:
3e:b9:c9:82:a1:b8:a8:17:18:14:a2:13:97:9f:cc:16:c2:27:
97:8c:aa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:05 2025 by rpki-client