Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/xX5MPWR8EEuf-cqoiFhxeXsfbOM.roa
File: xX5MPWR8EEuf-cqoiFhxeXsfbOM.roa (raw, json)
Hash identifier: VeXj0BqAMvMxnKoElaYuwaX3nqIRAB1sKpb/91VPNhw=
Subject key identifier: C5:7E:4C:3D:64:7C:10:4B:9F:F9:CA:A8:88:58:71:79:7B:1F:6C:E3
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 0188E77C31FAC369F7A4C68BE7B79B5EEAF5
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/xX5MPWR8EEuf-cqoiFhxeXsfbOM.roa
Signing time: Fri 23 Jun 2023 09:00:56 +0000
ROA not before: Fri 23 Jun 2023 09:00:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202265
IP address blocks: 45.87.162.0/23 maxlen: 23
45.87.161.0/24 maxlen: 24
2a04:5b81:1fff::/48 maxlen: 48
2a04:5b80:53::/48 maxlen: 48
2a04:5b86:1::/48 maxlen: 48
2a04:5b81:1000::/40 maxlen: 40
2a04:5b87:1::/48 maxlen: 48
2a04:5b84:1::/48 maxlen: 48
2a04:5b81:2010::/44 maxlen: 44
2a04:5b81:2060::/44 maxlen: 44
2a04:5b82::/44 maxlen: 44
2a04:5b82:8::/48 maxlen: 48
2a04:5b80:200::/48 maxlen: 48
2a04:5b80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e7:7c:31:fa:c3:69:f7:a4:c6:8b:e7:b7:9b:5e:ea:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Jun 23 09:00:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c57e4c3d647c104b9ff9caa8885871797b1f6ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:b5:cb:74:93:30:61:d8:15:f6:c8:c1:49:
ca:9d:fb:e5:96:29:84:89:61:ec:e6:07:c0:26:95:
3f:6a:e9:18:f1:13:f5:61:88:98:4c:28:ed:48:aa:
86:b1:c7:f7:4c:91:7c:74:ed:26:bf:f1:d7:87:41:
fb:ff:91:04:46:da:43:37:5d:44:f1:07:1c:67:04:
70:bf:00:f2:9a:7f:c1:c6:7b:44:77:e4:bf:be:29:
be:4b:74:69:33:4e:df:30:bb:a9:0c:8f:52:ed:49:
70:cb:3c:da:e0:f6:d8:88:61:01:7a:30:f9:0d:b3:
fa:2e:61:0d:72:73:68:00:04:32:2c:63:0d:69:f7:
ac:50:3a:39:6b:23:35:c6:3c:e4:3e:2e:61:cc:c0:
b3:30:81:10:7e:b8:86:53:85:08:3e:61:c0:dd:ce:
9f:c9:05:d0:37:3c:68:89:1f:1d:23:36:52:f5:cf:
ae:57:05:6b:f3:57:ea:9b:c3:28:e6:a8:8f:d9:90:
56:04:56:49:cf:d9:e6:58:d7:47:83:28:9e:b9:d2:
52:a9:4d:7c:d6:25:5a:42:93:2a:35:d8:c3:ff:5d:
ea:62:c5:f5:00:aa:ca:92:e2:33:02:2a:38:e7:54:
06:28:f5:c0:73:01:13:a3:f9:f3:99:82:bc:db:be:
00:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7E:4C:3D:64:7C:10:4B:9F:F9:CA:A8:88:58:71:79:7B:1F:6C:E3
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/xX5MPWR8EEuf-cqoiFhxeXsfbOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.161.0-45.87.163.255
IPv6:
2a04:5b80::/48
2a04:5b80:53::/48
2a04:5b80:200::/48
2a04:5b81:1000::/40
2a04:5b81:1fff::/48
2a04:5b81:2010::/44
2a04:5b81:2060::/44
2a04:5b82::/44
2a04:5b84:1::/48
2a04:5b86:1::/48
2a04:5b87:1::/48
Signature Algorithm: sha256WithRSAEncryption
5f:27:60:4b:19:9c:0b:a7:3b:4d:09:96:6f:2b:ff:f9:4a:45:
f6:2a:66:91:df:76:eb:f2:fb:44:1a:69:a8:da:ba:fb:af:fa:
82:8c:0b:2f:77:8a:6b:ce:f0:b7:b2:27:9d:09:e3:9f:7b:fb:
c7:9a:a5:6b:61:a1:92:28:cd:3b:48:1f:90:5b:d8:b1:bb:97:
a8:85:0b:38:99:e2:89:e2:2e:75:e2:5d:b6:05:3a:bd:98:e8:
80:e6:10:b4:cd:04:e1:aa:27:6a:bd:30:6f:f6:2d:60:a6:42:
10:66:80:f6:e2:97:98:fb:da:bd:a0:84:7f:24:d5:d6:43:4f:
25:5a:2f:6b:74:30:61:d5:89:cd:5e:bb:16:f1:75:db:e6:98:
18:03:85:0f:2a:8a:e8:70:02:b3:3a:b0:f4:5a:b8:c0:d1:31:
9e:2b:46:aa:f1:d7:e2:ec:e1:b3:ed:f3:b2:1c:11:fa:81:50:
a7:b2:30:0f:2a:0c:8f:c7:a5:e7:23:2d:83:dc:61:0b:c6:0b:
56:ab:75:f1:3f:2d:8e:9b:45:5a:e4:38:56:d0:63:af:cb:b9:
d5:bf:92:cd:4b:9b:a7:18:4a:2f:94:55:12:0f:29:45:f7:97:
c4:3d:d4:72:3d:34:7a:21:56:05:47:3d:fe:58:c3:2d:75:4d:
94:dc:6a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:28 2025 by rpki-client