Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/Kw_63FjNLpnknaOt4sVX1kEGFjs.roa
File: Kw_63FjNLpnknaOt4sVX1kEGFjs.roa (raw, json)
Hash identifier: y8afUBow6B4sEaG9ah+34Blx5jcZtG660FJQHsnJwrY=
Subject key identifier: 2B:0F:FA:DC:58:CD:2E:99:E4:9D:A3:AD:E2:C5:57:D6:41:06:16:3B
Certificate issuer: /CN=1f53c06ca7976d737b23bc72768a228c397faf2f
Certificate serial: 0194228E13A32EFADEAE06ADB6E203DA4D28
Authority key identifier: 1F:53:C0:6C:A7:97:6D:73:7B:23:BC:72:76:8A:22:8C:39:7F:AF:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1PAbKeXbXN7I7xydooijDl_ry8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/Kw_63FjNLpnknaOt4sVX1kEGFjs.roa
Signing time: Wed 01 Jan 2025 15:48:43 +0000
ROA not before: Wed 01 Jan 2025 15:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29657
IP address blocks: 45.132.100.0/24 maxlen: 24
45.132.101.0/24 maxlen: 24
2a14:4d80::/32 maxlen: 32
2a14:4d87::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:13:a3:2e:fa:de:ae:06:ad:b6:e2:03:da:4d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f53c06ca7976d737b23bc72768a228c397faf2f
Validity
Not Before: Jan 1 15:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b0ffadc58cd2e99e49da3ade2c557d64106163b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:38:3e:89:c0:3f:97:4f:b2:a3:8a:6a:dc:67:
90:3f:83:48:b6:b6:f0:f1:19:de:07:43:b4:ec:04:
37:f7:95:11:fe:5b:a7:00:46:bb:98:87:35:54:ff:
b7:66:9c:f9:73:7b:50:c0:cd:98:6e:a5:4e:3b:b4:
43:76:af:83:d3:5d:a3:c2:97:a2:ac:b9:50:1a:99:
f4:34:35:0d:9a:76:f1:50:8a:68:2b:b9:54:dd:15:
6c:3e:97:55:02:06:ae:b4:be:0a:31:5c:d9:51:9b:
70:b6:4e:f7:4a:b3:16:38:65:bc:76:77:eb:c4:dc:
9d:e0:9c:7b:95:68:06:da:1c:38:f0:90:b9:e7:c2:
9c:54:e3:73:41:1e:2b:a6:1e:4c:85:3c:d0:4c:e2:
dd:2d:af:e4:65:0e:66:66:66:b3:e6:af:57:14:4c:
e3:d1:40:95:44:d1:22:59:7a:e0:6e:4d:0c:cb:23:
5d:f5:b8:c6:57:5b:59:c8:f4:ca:7c:b1:c7:ed:42:
6e:c1:72:03:4f:1d:9c:1f:6a:42:37:6a:69:f4:b3:
af:76:89:34:fa:cf:1b:37:8c:a7:b8:31:e9:16:8a:
5a:f7:78:44:0f:50:16:cf:13:8c:0f:5c:13:25:1c:
91:36:13:e7:4f:e3:a7:fb:60:02:aa:04:bd:e7:b3:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0F:FA:DC:58:CD:2E:99:E4:9D:A3:AD:E2:C5:57:D6:41:06:16:3B
X509v3 Authority Key Identifier:
keyid:1F:53:C0:6C:A7:97:6D:73:7B:23:BC:72:76:8A:22:8C:39:7F:AF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1PAbKeXbXN7I7xydooijDl_ry8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/Kw_63FjNLpnknaOt4sVX1kEGFjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.100.0/23
IPv6:
2a14:4d80::/32
2a14:4d87::/32
Signature Algorithm: sha256WithRSAEncryption
07:31:5c:d9:85:2f:0f:c3:74:b1:4d:41:b3:3a:dc:e4:18:2c:
f2:01:e5:c6:df:49:ce:e5:02:67:75:57:9e:a5:9f:5c:af:bc:
ba:f4:71:df:3b:a8:52:24:99:9e:f5:af:17:ab:c6:ec:9e:1c:
bc:c5:2b:4c:14:68:c5:2f:1a:47:97:3b:d1:d8:47:54:ef:45:
4b:03:a9:66:3b:b9:42:59:47:4f:51:c5:07:e7:10:d2:c4:82:
30:56:14:56:eb:4f:5a:95:d8:da:c1:40:6d:29:72:d8:75:96:
3c:a3:f1:46:2a:71:4b:c2:47:ec:84:76:2d:bf:6f:38:d0:cd:
05:8c:d5:34:50:14:29:59:c7:4e:fe:4a:a5:41:b9:49:55:af:
07:75:c9:ae:7c:59:22:9e:1f:96:af:b1:ae:c0:9d:bb:c4:13:
03:da:b2:8d:f8:e3:a6:95:b5:46:71:a4:4b:25:aa:c0:cb:be:
cd:80:7b:54:c2:f1:d9:61:f6:c3:d3:b7:27:82:0a:b4:b4:0c:
89:35:84:6e:5e:ff:02:81:52:62:65:c2:67:c8:a7:17:92:ed:
f0:56:08:dc:20:e4:f6:83:56:7c:91:78:c3:9c:28:51:6c:6b:
5a:ce:e1:dd:da:7c:1d:3a:f3:9d:e8:20:32:6f:e0:fd:0a:5a:
63:ed:94:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:23:15 2025 by rpki-client