Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L4ISivVN48-IMnh0ziU5o1kyhg4.roa
File: L4ISivVN48-IMnh0ziU5o1kyhg4.roa (raw, json)
Hash identifier: LoJhLfI61OfnyU7A1caI7Rf7/p1I7z05Vj4Gm3woQH4=
Subject key identifier: 2F:82:12:8A:F5:4D:E3:CF:88:32:78:74:CE:25:39:A3:59:32:86:0E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0195B0D20CF43A2FF07245E1666391D76E3E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L4ISivVN48-IMnh0ziU5o1kyhg4.roa
Signing time: Wed 19 Mar 2025 23:51:50 +0000
ROA not before: Wed 19 Mar 2025 23:51:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 45.131.186.0/24 maxlen: 24
2a06:de01:140::/44 maxlen: 48
2a06:de01:141::/48 maxlen: 48
2a06:de01:142::/48 maxlen: 48
2a06:de01:143::/48 maxlen: 48
2a06:de01:144::/48 maxlen: 48
2a06:de01:145::/48 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a0e:b107:1870::/48 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b0:d2:0c:f4:3a:2f:f0:72:45:e1:66:63:91:d7:6e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 19 23:51:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f82128af54de3cf88327874ce2539a35932860e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:8f:9d:14:93:4e:3c:11:0d:b0:5e:93:7b:
cb:bc:c3:9c:bc:9e:e1:e0:bc:b0:c7:c3:4f:c2:53:
6b:d6:7c:43:47:97:f8:b2:2e:6c:9e:a4:4a:ab:00:
2e:b0:1d:71:87:80:4d:bd:fb:38:a3:46:e4:12:24:
18:ac:fe:f1:9e:9b:2c:ad:9a:9f:f7:7b:83:25:a5:
a9:39:1e:f6:79:75:a3:42:16:88:50:06:b7:c6:4e:
33:35:6a:00:b6:16:d8:58:b0:60:73:b3:43:cf:79:
6e:bc:2e:c6:b1:bf:25:3d:09:45:94:c9:00:b3:9a:
5f:a5:99:a3:48:16:64:be:2b:2b:04:ce:09:64:0f:
13:f2:51:11:83:a6:01:a3:bb:7f:12:54:e9:23:7b:
2b:d6:b1:74:7a:d9:07:95:db:44:eb:b8:bf:fa:d8:
9e:c7:0e:f0:36:68:77:7c:4a:37:8a:bb:30:1b:f5:
80:de:8f:46:d8:b2:93:06:cf:e6:7a:a1:4a:fa:2d:
ee:f7:e9:2d:52:c6:1f:0e:e7:3a:c4:6a:85:db:36:
4a:30:49:a0:1b:08:06:a0:df:18:45:00:8a:37:0e:
bc:85:da:05:71:18:a9:f9:ac:6b:f0:36:c1:31:d3:
85:dc:46:54:37:6a:75:12:0b:63:39:67:75:8a:37:
2d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:82:12:8A:F5:4D:E3:CF:88:32:78:74:CE:25:39:A3:59:32:86:0E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L4ISivVN48-IMnh0ziU5o1kyhg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.186.0/24
IPv6:
2a06:de01:140::/44
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::/48
Signature Algorithm: sha256WithRSAEncryption
0b:f5:a7:22:a8:dc:90:96:e8:d8:27:7c:0e:fe:2f:55:21:fa:
8b:38:7b:dc:d1:83:c9:2a:aa:b9:71:58:1f:a9:6b:13:fe:88:
0d:6f:b0:75:bb:78:10:58:66:92:64:d1:5b:3c:3f:8b:af:07:
15:4d:de:2b:96:83:60:09:00:8a:a7:2e:79:e5:f7:21:5c:60:
2a:a6:6d:b3:b0:78:0d:fb:70:93:9d:2f:38:d9:89:fe:72:9c:
a6:1c:fc:4b:e2:7b:ff:ef:7a:f2:85:b4:ef:01:8b:2b:77:a4:
56:6d:1f:40:3e:21:b9:99:75:ab:55:c3:99:84:49:02:70:60:
8c:7c:40:c2:6f:ae:53:6b:04:d0:a6:a1:2e:6c:a7:82:c5:26:
7d:d7:18:fc:86:7b:6e:6f:60:d7:28:e4:d6:54:f4:5b:09:a8:
2a:83:7c:22:5c:a2:b0:de:de:8e:d9:16:fa:2a:25:5b:96:7e:
58:36:af:8c:3c:9f:b7:ed:27:a1:da:c3:47:47:64:4a:4c:f9:
70:e9:2e:2f:45:88:cd:26:81:03:0f:73:bd:7b:2b:2f:99:85:
d0:74:e1:51:3d:a0:01:dd:da:d3:fb:0d:83:7a:5f:26:5f:b1:
2c:89:a5:1d:2c:db:a3:05:21:ef:7a:ad:84:60:fa:ef:0c:b8:
b0:e3:0a:7f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:52 2025 by rpki-client