Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1da-nRUpH3Q-pVNM1A6DWGL_mNU.roa
File: 1da-nRUpH3Q-pVNM1A6DWGL_mNU.roa (raw, json)
Hash identifier: 2729J8QVRQ7EloC1ud+dkEVB7yadtZKjM1kooyqR724=
Subject key identifier: D5:D6:BE:9D:15:29:1F:74:3E:A5:53:4C:D4:0E:83:58:62:FF:98:D5
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B39B735C8FCAA7C3ED157BC7952D86
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1da-nRUpH3Q-pVNM1A6DWGL_mNU.roa
Signing time: Thu 02 Jan 2025 01:48:58 +0000
ROA not before: Thu 02 Jan 2025 01:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47154
IP address blocks: 45.155.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:9b:73:5c:8f:ca:a7:c3:ed:15:7b:c7:95:2d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5d6be9d15291f743ea5534cd40e835862ff98d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:71:dd:61:0f:46:42:a4:b4:2a:99:c9:9d:17:
b3:61:12:8c:b5:28:72:dc:ee:c2:fb:74:99:8e:50:
cc:93:17:96:3e:97:61:76:89:ba:61:ab:18:f0:6f:
5d:bd:ff:8a:75:08:78:31:16:6c:55:78:91:0e:9e:
f6:f2:62:a9:1e:45:e8:a0:6e:64:fc:de:b6:7b:d4:
8a:26:e7:38:55:0b:d9:9c:0c:70:f1:35:ff:b4:e4:
e1:3c:7b:fb:c5:45:d5:6f:91:13:52:72:71:17:a6:
8c:64:eb:e2:76:24:fe:b2:c3:64:7b:a7:f6:e5:23:
47:e8:93:99:8f:73:aa:a5:ed:93:f2:ea:00:3c:bf:
b1:a9:cd:f3:85:95:d3:c6:49:ed:92:d7:a0:a5:03:
56:6e:0a:72:c4:db:e6:68:b1:e6:06:ba:1e:de:2a:
00:cb:7a:49:b4:b1:bd:b8:60:32:5c:66:5b:19:dc:
ba:f8:ac:84:73:fa:b4:d3:5e:b3:6d:ed:3d:0a:e2:
35:d1:3c:8c:ec:c9:c3:70:aa:32:be:7c:78:aa:20:
30:26:21:ac:a8:aa:68:04:8d:67:08:33:a7:38:82:
61:00:7d:e1:62:e6:a6:7f:20:6c:23:a6:de:db:17:
d0:fd:a4:31:db:bc:f4:2d:3d:13:ad:37:30:22:4c:
c4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D6:BE:9D:15:29:1F:74:3E:A5:53:4C:D4:0E:83:58:62:FF:98:D5
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1da-nRUpH3Q-pVNM1A6DWGL_mNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.91.0/24
Signature Algorithm: sha256WithRSAEncryption
26:d1:20:02:8f:2f:a0:38:0f:94:b3:45:bf:7b:0f:14:19:b6:
e7:b0:6e:e7:e1:5f:59:c4:78:cd:79:7c:4a:ad:92:33:06:57:
82:d8:9a:0b:56:97:4e:a8:1f:16:c2:85:87:15:8b:7a:f1:c8:
cd:cd:a1:61:88:eb:51:d9:a0:21:7d:f8:82:d4:eb:03:32:4d:
74:89:b4:12:72:4b:ac:12:f1:90:a6:55:31:d0:58:a2:48:9f:
2a:b0:d9:e0:e7:52:e6:47:6d:0b:69:d4:0b:06:78:2e:8c:ee:
3b:4c:27:c6:c8:9c:76:3c:67:0e:14:14:9d:bb:4c:2e:19:2b:
9b:1c:d5:99:a9:7d:37:33:49:9a:65:f4:77:70:6f:d8:95:77:
8d:21:ee:b2:68:fc:03:84:75:97:3e:b5:23:5f:97:c8:35:e2:
70:68:65:1e:17:43:43:d0:78:b8:11:a6:5e:bf:e1:9e:6d:0e:
e1:85:94:de:ed:98:a1:42:85:17:7d:34:7c:8f:1f:59:a0:6f:
f9:b3:0f:d4:7a:f2:c9:df:8b:4f:07:a5:48:31:c9:80:73:78:
18:8d:da:e1:90:27:77:d2:b7:76:ec:60:ef:89:51:37:ff:1f:
5d:ea:9f:53:20:2f:96:c1:45:63:d9:24:05:23:9d:40:72:9a:
37:ed:74:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:49:56 2025 by rpki-client