Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/6-rA5MgZK44IjZPlgXpkxE7B8Yw.roa
File: 6-rA5MgZK44IjZPlgXpkxE7B8Yw.roa (raw, json)
Hash identifier: wuMAUh2Zz1xwb4YouTzXWPOq/mZIhjwk19/myb4Z5q8=
Subject key identifier: EB:EA:C0:E4:C8:19:2B:8E:08:8D:93:E5:81:7A:64:C4:4E:C1:F1:8C
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 019426D8A18D57717B59D83548D45F4A7466
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/6-rA5MgZK44IjZPlgXpkxE7B8Yw.roa
Signing time: Thu 02 Jan 2025 11:48:38 +0000
ROA not before: Thu 02 Jan 2025 11:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202834
IP address blocks: 45.94.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:a1:8d:57:71:7b:59:d8:35:48:d4:5f:4a:74:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Jan 2 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebeac0e4c8192b8e088d93e5817a64c44ec1f18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:91:f6:52:45:8e:05:24:76:6f:80:96:a1:
7a:e7:73:36:65:59:d9:8b:55:b8:d1:25:d3:22:08:
18:da:17:ba:c8:8d:3b:35:28:f2:80:61:82:5b:89:
4c:e5:b8:b8:21:3c:a1:ef:cc:fa:f5:d9:f6:15:5c:
c9:9f:13:9e:41:0e:58:af:23:76:e6:1f:04:ed:75:
23:cd:0c:36:02:be:4e:a1:b1:4f:4d:3b:ef:ea:63:
da:70:aa:46:d0:70:3a:a8:3f:f3:f9:f7:a1:6d:91:
43:c1:20:a9:e5:a9:09:32:8c:1d:f2:99:8b:94:13:
21:53:5b:ee:06:9a:5e:6b:5a:fc:2d:a5:11:3c:28:
df:43:c8:cd:5f:bb:1f:7f:0e:ce:05:06:4f:b4:29:
2f:fb:e9:f3:d7:80:f2:5d:8a:2f:66:75:98:f2:12:
7c:40:f5:ee:8a:34:54:22:37:7c:84:35:70:54:3d:
51:0c:b2:6a:0e:81:0c:f6:f4:d0:46:22:5d:da:2b:
63:bb:96:52:8e:c5:9a:ea:a7:ac:e8:32:1b:45:30:
34:3e:49:c3:62:90:0d:96:67:31:2b:5c:20:76:99:
8f:41:d6:fb:fb:dd:8c:33:0a:67:0d:29:6c:04:d5:
1b:49:f7:88:22:cf:d7:e8:4e:46:25:e4:3e:36:f8:
ed:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EA:C0:E4:C8:19:2B:8E:08:8D:93:E5:81:7A:64:C4:4E:C1:F1:8C
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/6-rA5MgZK44IjZPlgXpkxE7B8Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.16.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:eb:0e:96:3c:5e:01:ae:9c:1c:59:0d:a8:48:5b:92:f4:a9:
f0:dc:13:ed:67:92:87:0c:9a:24:18:f0:41:ae:45:ee:28:b3:
29:84:37:4d:66:0b:bf:5a:38:cd:df:04:2d:c9:dd:af:b8:88:
eb:68:44:28:91:00:7a:6c:97:95:39:c9:15:76:a9:37:5a:2e:
50:4b:ab:f7:77:26:e1:4f:0d:be:fd:10:2f:9e:f5:55:06:b5:
cb:e5:2a:96:9c:90:cf:2f:8a:b3:1e:11:b1:da:e9:d3:2f:a3:
59:ec:31:aa:be:05:ee:d4:1c:77:a5:79:b0:a0:86:d5:5f:2d:
7f:08:ee:28:56:ab:c5:ab:4b:65:b2:b3:c5:2d:41:72:c8:39:
62:4e:bd:d2:62:50:7d:cb:40:86:cd:b8:22:0d:c3:3f:18:4b:
dc:c6:8b:06:4a:c1:7a:af:71:1c:f1:ff:4a:91:25:07:c3:06:
9c:47:0e:c1:93:c3:cd:79:ce:f1:5d:5c:63:03:29:91:3d:73:
2f:96:54:3c:b2:04:37:5e:23:86:84:75:9b:e8:8c:b3:7e:b3:
32:60:13:8c:e7:11:4e:35:fb:07:f5:16:13:48:74:e4:2b:3f:
d2:5b:0a:dc:bf:62:a9:5b:2b:5c:4c:e9:54:a2:48:70:e6:36:
94:43:8e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:07 2025 by rpki-client