Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/Wt480qXVmMwEOAd2PwO3BIY-yQ8.roa
File: Wt480qXVmMwEOAd2PwO3BIY-yQ8.roa (raw, json)
Hash identifier: ZoHaxK2Mo9GKYjgUd0e4MjoyY0dURGfiyktgIwjh6+8=
Subject key identifier: 5A:DE:3C:D2:A5:D5:98:CC:04:38:07:76:3F:03:B7:04:86:3E:C9:0F
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 0194266B92C15058A4B54F40989AE201F7BD
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/Wt480qXVmMwEOAd2PwO3BIY-yQ8.roa
Signing time: Thu 02 Jan 2025 09:49:31 +0000
ROA not before: Thu 02 Jan 2025 09:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43444
IP address blocks: 45.155.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:92:c1:50:58:a4:b5:4f:40:98:9a:e2:01:f7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Jan 2 09:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ade3cd2a5d598cc043807763f03b704863ec90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c6:b5:6a:f8:3b:bf:69:a2:2b:aa:bd:71:52:
b2:e6:54:ce:b9:be:d8:a7:82:98:e2:d5:6d:39:cf:
35:87:01:15:18:3d:51:31:72:6c:50:82:74:b2:97:
9e:ec:7f:53:9f:42:3f:27:39:b9:1a:26:dd:64:3b:
c0:58:36:a7:c8:0c:79:18:e7:f7:c4:82:78:df:10:
3e:e9:fb:b2:7b:55:d8:c4:09:df:b2:71:b8:f3:6c:
17:ca:8b:a7:21:dc:a0:59:2f:a5:4d:fb:66:3d:ab:
64:26:94:1b:22:2f:9b:93:67:4f:6f:99:03:5e:04:
54:a6:22:8d:be:01:58:be:33:01:89:32:0a:52:eb:
c8:c7:6a:0f:30:c2:fb:f3:d9:55:4f:8c:e3:12:28:
06:8d:68:71:7d:3a:c1:98:ce:18:82:0d:bf:59:f5:
d9:39:20:3b:0f:73:cd:32:35:c9:85:d5:e5:e7:6e:
b4:76:0c:b7:51:f8:60:11:6b:36:fa:88:c5:6f:99:
06:3e:a0:59:0f:02:a0:fd:11:a8:9c:85:36:90:ab:
03:92:2f:e5:cc:3d:b6:7e:99:c9:b1:1e:b8:8f:88:
f2:55:70:9d:6d:e5:88:03:63:91:25:99:d4:6a:6a:
59:51:a8:87:95:ca:15:b8:97:6d:96:82:33:15:6e:
ac:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DE:3C:D2:A5:D5:98:CC:04:38:07:76:3F:03:B7:04:86:3E:C9:0F
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/Wt480qXVmMwEOAd2PwO3BIY-yQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.166.0/23
Signature Algorithm: sha256WithRSAEncryption
77:62:09:09:77:39:2f:95:91:3a:00:e4:1e:28:1b:6c:84:fa:
92:69:c8:01:77:b7:35:e8:dd:10:f0:80:6e:cc:14:a2:04:af:
7a:ed:2a:32:ca:13:6e:62:c4:0a:95:be:2b:0b:63:7a:42:62:
d1:70:73:46:15:e8:74:4f:0c:39:19:fd:8c:19:a6:9f:4a:2c:
73:b8:90:c3:89:0d:07:76:dd:cd:8b:30:7e:68:80:49:81:26:
3c:7f:75:4d:d3:c0:20:b3:59:ee:f5:dc:d7:b0:cb:54:50:6a:
ea:e7:fe:45:14:a7:20:86:ec:ee:f3:85:1b:e2:cf:6e:fb:a4:
c1:77:4f:b9:22:3d:c5:40:04:5f:b4:b8:4f:97:a8:23:e5:e9:
0e:e3:43:86:34:ae:cd:93:11:6d:c2:f0:4f:d3:8e:60:20:f0:
66:44:e5:b9:c1:cf:08:3e:90:86:3c:f3:24:3a:5e:e7:17:9c:
a9:53:76:2d:f7:81:40:27:1f:b3:3f:2c:b6:10:d5:4b:c7:64:
25:26:ce:50:cf:49:c8:1b:bd:d3:aa:1e:9f:4d:95:d7:a3:9a:
0c:83:bf:29:86:8f:4d:03:fc:fa:58:a2:5e:b6:85:d4:3e:b9:
54:a6:86:bf:63:c8:fc:79:6c:8f:1d:2d:49:e7:39:62:e1:11:
fd:33:21:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:44:33 2025 by rpki-client