Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/C_W5uFOffH81U1XB_VG_eFr8n_A.roa
File: C_W5uFOffH81U1XB_VG_eFr8n_A.roa (raw, json)
Hash identifier: kM5BT5a8AHJ+VqwyNcuISudnKqdFzEc+qETwFrySAkU=
Subject key identifier: 0B:F5:B9:B8:53:9F:7C:7F:35:53:55:C1:FD:51:BF:78:5A:FC:9F:F0
Certificate issuer: /CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Certificate serial: 0194266B262B643CB74FC0BFAAAD6B92FC1A
Authority key identifier: E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/C_W5uFOffH81U1XB_VG_eFr8n_A.roa
Signing time: Thu 02 Jan 2025 09:49:03 +0000
ROA not before: Thu 02 Jan 2025 09:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208170
IP address blocks: 45.156.100.0/22 maxlen: 22
45.156.100.0/24 maxlen: 24
45.156.101.0/24 maxlen: 24
45.156.102.0/24 maxlen: 24
45.156.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:26:2b:64:3c:b7:4f:c0:bf:aa:ad:6b:92:fc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Validity
Not Before: Jan 2 09:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bf5b9b8539f7c7f355355c1fd51bf785afc9ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:03:84:7c:50:77:bb:a4:75:de:d8:a4:7c:35:
3a:bd:c8:8e:8d:6c:eb:1d:ea:63:d3:15:29:c5:39:
9b:eb:b7:19:f0:dc:1d:7f:1f:29:ee:b3:82:22:76:
d6:26:24:d5:99:93:c8:a3:5b:7d:17:b0:06:89:0c:
6c:da:91:0c:06:ca:5a:24:08:64:a7:b5:61:56:5d:
dc:36:2b:ac:42:f4:67:d2:9e:47:34:c9:94:21:05:
b3:c8:52:19:f1:41:ba:d4:c3:c2:6b:eb:51:fe:0b:
b1:99:eb:56:6e:fa:e6:a6:55:b0:1d:23:3b:50:4f:
b5:55:c3:7c:a2:80:46:cc:88:8c:22:8e:04:17:83:
5b:9b:c0:53:d0:b1:7a:66:12:d2:63:61:1e:71:ef:
6d:75:7b:6f:6a:de:61:47:81:2c:9c:1b:a1:a5:48:
a0:a5:2f:80:cd:ba:17:4f:b8:77:4d:1f:55:7c:b6:
5e:95:b6:da:7c:45:55:52:f9:24:77:bf:1a:8a:f4:
22:51:a2:2f:44:31:c6:15:ca:3b:80:42:aa:27:3c:
d6:ea:61:ea:75:16:af:7b:de:d7:a8:af:39:0f:b9:
7f:7e:60:73:61:93:a4:e6:de:78:3e:c9:b5:b6:b6:
d1:d3:91:a5:66:5a:24:e1:84:62:15:1e:da:ba:ec:
95:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F5:B9:B8:53:9F:7C:7F:35:53:55:C1:FD:51:BF:78:5A:FC:9F:F0
X509v3 Authority Key Identifier:
keyid:E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/C_W5uFOffH81U1XB_VG_eFr8n_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.100.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:30:5d:b5:06:6d:8d:60:df:ae:2b:f4:1f:87:81:c4:0e:a1:
6b:55:8f:e0:68:74:53:d4:38:14:75:0d:de:6c:d8:64:bd:a3:
63:a0:fc:ea:dd:97:ad:19:76:2e:9b:57:8b:13:68:59:88:3a:
f0:02:4f:82:d3:92:f8:4a:89:80:cb:7a:a6:17:ec:a8:4b:4c:
c8:fa:53:99:bd:b2:a6:bc:6f:30:76:94:e1:80:64:74:b5:88:
d8:4c:b0:0d:28:51:b0:5b:dc:cd:cc:7e:e4:05:68:d6:dd:25:
02:34:4d:cd:32:04:9b:7a:55:03:30:17:0b:2c:90:93:d6:48:
e6:c8:46:72:be:2c:11:8c:2b:f6:04:90:f3:9e:16:2d:76:4d:
ea:3a:10:12:e2:2a:0a:5a:71:a9:59:25:b5:e4:56:36:67:c8:
82:39:f5:c0:bc:7b:4f:70:23:de:80:96:2c:88:76:cd:50:cf:
41:0f:5a:8b:4b:23:dc:12:1e:e3:99:6d:1f:a8:3d:a2:e9:14:
39:84:87:ef:cf:46:70:82:b0:53:7b:e4:bf:44:bc:e8:5c:4b:
4c:47:9a:3c:65:51:65:3c:53:42:df:a9:c2:9b:20:8e:7e:a4:
e5:34:d2:0b:42:24:d6:77:d4:f9:67:ba:8b:26:a4:2a:11:26:
4e:2e:ab:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:12 2025 by rpki-client