Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c7YHN41Zt5bylyW8_wVFMAoUn6E.roa
File: c7YHN41Zt5bylyW8_wVFMAoUn6E.roa (raw, json)
Hash identifier: dLOiu+ZrWef13K5HclHqTES2Z06ysytEmuxbCIbA1u4=
Subject key identifier: 73:B6:07:37:8D:59:B7:96:F2:97:25:BC:FF:05:45:30:0A:14:9F:A1
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01946FCA28EBD4887DF4CE1A8A52F2D0676F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c7YHN41Zt5bylyW8_wVFMAoUn6E.roa
Signing time: Thu 16 Jan 2025 15:45:07 +0000
ROA not before: Thu 16 Jan 2025 15:45:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216139
IP address blocks: 45.12.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6f:ca:28:eb:d4:88:7d:f4:ce:1a:8a:52:f2:d0:67:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 16 15:45:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73b607378d59b796f29725bcff0545300a149fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d2:f3:fb:22:fd:be:17:58:36:38:91:b4:f7:
24:5a:e4:e1:95:f8:5c:24:ab:48:2d:17:59:39:ae:
56:9a:41:7c:10:d3:e5:a6:5e:0a:45:23:b4:a2:98:
cf:69:b6:73:01:66:8e:fd:59:ea:f5:c8:7b:b6:21:
d3:27:4e:64:ee:b3:bd:49:b7:4d:b2:6c:ad:2b:e7:
a9:2d:f2:3d:e6:33:97:21:a5:2f:ef:84:ac:e0:8c:
20:c1:20:15:5c:a7:a5:57:96:61:20:b6:f8:9e:7e:
f2:3f:50:64:d9:7b:f2:6e:c9:a0:d0:37:e6:8d:04:
c1:13:84:28:68:15:dc:31:13:66:8c:47:b2:b7:b2:
32:d9:d8:04:26:25:e2:bc:31:9e:bb:c8:f9:f7:5e:
dd:33:68:d7:79:6e:93:d7:d3:09:04:fa:79:e8:9b:
f9:77:87:17:f1:7c:d1:b7:09:96:23:8b:e0:94:9e:
a5:5b:d2:1b:07:4d:c3:1b:23:ab:19:b3:d6:ca:fa:
26:02:cb:d9:ab:59:14:18:c8:78:57:53:7a:51:3b:
92:39:a6:77:4f:dc:15:fc:de:47:a1:33:a5:55:a4:
51:78:f9:bf:f6:cf:1e:fc:f8:e5:1b:63:12:67:53:
bb:f6:39:66:ed:bb:91:4a:1f:e0:90:bf:63:09:27:
81:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B6:07:37:8D:59:B7:96:F2:97:25:BC:FF:05:45:30:0A:14:9F:A1
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c7YHN41Zt5bylyW8_wVFMAoUn6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.69.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:33:3e:d0:44:1c:f9:21:ed:e0:a6:b4:a3:27:f9:47:49:63:
2f:a3:46:9a:a2:57:4e:7b:af:84:76:8f:c3:26:a8:5a:50:e3:
e9:60:29:f2:c7:f1:18:2a:95:45:23:85:dd:d8:7e:26:9a:79:
5e:10:a8:26:22:a4:4b:e3:48:70:d8:9a:4f:d4:21:64:7a:a5:
23:ba:0d:41:f0:48:40:57:23:64:1e:bb:65:96:ed:9c:ff:4d:
56:eb:fb:86:57:b4:8e:6f:c0:df:3d:0c:a1:da:80:35:d3:a1:
05:c3:2a:90:f1:b8:98:4d:7e:80:79:70:08:79:97:07:95:97:
63:31:86:04:15:da:b4:af:51:e3:60:2f:55:9c:fc:b0:24:04:
e8:6e:dd:7f:2a:42:99:9c:b9:a8:45:03:e4:a0:b3:ca:3b:5b:
57:9f:ea:5d:fc:eb:e3:fa:15:54:2e:f2:6c:8b:5c:9f:b1:8b:
14:df:f7:9c:57:25:19:2d:c7:5d:51:54:d0:ab:54:e0:35:b1:
fe:f4:9a:8f:5e:f2:f3:86:71:7b:6f:76:06:2d:ff:98:07:89:
b9:a8:45:0f:c5:82:4a:9a:be:ef:28:a7:26:95:6a:88:4a:b3:
8f:ca:32:6a:03:71:a8:8d:a0:cd:38:a9:d2:b1:7a:03:08:4d:
7f:64:99:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:26:06 2025 by rpki-client