Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/xjFuTX7p8duFXbmjnW2eNX8jP2U.roa
File: xjFuTX7p8duFXbmjnW2eNX8jP2U.roa (raw, json)
Hash identifier: ZSDDnyDycJPJqkFrjcEZxISIgkwjV0ZH6RgKXgNg8MU=
Subject key identifier: C6:31:6E:4D:7E:E9:F1:DB:85:5D:B9:A3:9D:6D:9E:35:7F:23:3F:65
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD30887A7E5279970F23D6314C85E6
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/xjFuTX7p8duFXbmjnW2eNX8jP2U.roa
Signing time: Thu 02 Jan 2025 07:48:57 +0000
ROA not before: Thu 02 Jan 2025 07:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216314
IP address blocks: 45.43.144.0/24 maxlen: 24
45.43.157.0/24 maxlen: 24
216.173.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:30:88:7a:7e:52:79:97:0f:23:d6:31:4c:85:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6316e4d7ee9f1db855db9a39d6d9e357f233f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:06:e9:19:43:7d:6e:58:35:46:b6:42:37:d7:
df:3d:11:f0:02:29:a2:72:3a:ea:7a:61:44:7c:e8:
b2:0b:8f:0b:df:78:53:58:7d:6a:70:fe:41:02:8b:
c7:0e:8f:3a:2d:4b:b3:2a:2e:ab:fd:8b:d6:fc:32:
5e:3e:c0:96:2d:c9:e0:d9:9d:58:a2:94:3d:78:0b:
42:ee:d7:c9:5a:c7:4d:21:b3:88:37:b2:b0:af:26:
7d:a2:56:5a:98:c2:11:3a:b1:18:35:f9:c4:dd:93:
3d:06:02:aa:6b:a9:9f:22:c9:81:bf:38:0e:f2:35:
08:d1:17:7a:28:5d:fb:c6:5f:6a:e0:bc:04:fd:cb:
f2:f7:70:f5:97:df:3e:95:30:34:51:6d:49:9e:64:
e9:cc:d3:c5:b6:67:6f:36:a5:ec:ff:1e:bb:a7:1e:
58:f4:3c:17:3a:ec:31:49:69:96:cf:21:10:d2:23:
4a:00:c0:42:59:bb:1b:32:5c:e7:2b:6f:3c:aa:8a:
c4:7a:a9:65:0e:a0:24:ad:2f:3a:6e:5a:fa:51:fe:
be:d5:84:ff:d6:ba:e0:0b:29:b4:39:3e:4f:3d:0e:
2a:4c:67:cc:be:52:73:40:fb:2d:9e:8e:ee:75:a2:
26:90:e9:34:b9:1f:02:11:39:02:0d:bb:17:04:55:
50:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:31:6E:4D:7E:E9:F1:DB:85:5D:B9:A3:9D:6D:9E:35:7F:23:3F:65
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/xjFuTX7p8duFXbmjnW2eNX8jP2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.144.0/24
45.43.157.0/24
216.173.100.0/24
Signature Algorithm: sha256WithRSAEncryption
12:ea:43:ad:77:70:5f:82:e6:65:64:2d:65:ef:a4:31:0d:4c:
2c:16:e1:9a:65:fc:ea:8c:cb:06:4d:80:f5:ca:e4:5b:f5:b2:
ea:1a:0e:b3:5c:b0:ce:6d:7c:c7:4f:07:cb:1e:cd:40:92:9d:
ac:27:8f:4b:0a:fc:14:8f:d6:32:f7:b4:b1:87:d4:fb:16:5b:
e9:34:60:bb:c5:f5:0d:08:e0:f0:cf:da:a5:1a:35:18:35:9b:
2f:b9:bb:2f:e2:d9:0f:2b:b0:21:85:52:72:89:1f:8f:d3:35:
88:90:4f:58:06:5d:eb:ed:b2:50:01:57:ea:d5:a0:01:07:3c:
34:5a:26:02:5a:ba:77:cb:b7:d8:91:9a:af:9c:db:2d:a8:3e:
a8:34:85:c2:6c:ad:c0:99:0a:3a:8a:b4:d7:c1:3e:e8:1c:15:
be:a1:eb:20:7b:48:8b:37:f7:a1:d0:74:22:8e:6f:1a:83:4e:
f2:90:38:fc:9b:6a:7b:d6:92:8e:19:c2:48:0f:2b:6a:d3:7d:
c4:f9:44:34:16:fe:ce:21:58:1d:91:10:4c:0d:ea:83:b0:89:
1d:eb:40:40:3e:e4:d6:db:d7:9f:2e:84:b2:eb:f1:84:74:75:
10:c2:e2:1e:e7:47:53:24:cb:9d:03:ad:ad:3c:d1:df:8a:81:
a3:cc:6c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:03:29 2025 by rpki-client