Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/ATlg5-YgIYGgznzDLx83req8oFw.roa
File: ATlg5-YgIYGgznzDLx83req8oFw.roa (raw, json)
Hash identifier: wNUAkFUn7EqfwNF5vKM3TmGVV30DIR4WooR4saySv4k=
Subject key identifier: 01:39:60:E7:E6:20:21:81:A0:CE:7C:C3:2F:1F:37:AD:EA:BC:A0:5C
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5CA3E3BB080AE85C53452553D4E55
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/ATlg5-YgIYGgznzDLx83req8oFw.roa
Signing time: Wed 01 Jan 2025 07:47:49 +0000
ROA not before: Wed 01 Jan 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43297
IP address blocks: 45.145.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ca:3e:3b:b0:80:ae:85:c5:34:52:55:3d:4e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=013960e7e6202181a0ce7cc32f1f37adeabca05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:77:95:e4:64:40:35:45:b0:d2:9a:c4:0e:
80:be:21:59:42:7f:8b:9d:7d:ed:7f:15:d8:6f:61:
b1:95:3f:ec:23:7a:28:32:3e:49:82:d0:7c:84:af:
4b:ab:41:38:6c:39:ef:73:f4:a4:2f:1d:26:a3:f5:
71:93:3e:57:96:a0:e0:05:df:16:76:61:ae:a3:db:
2d:15:83:30:ed:23:75:5f:c8:4b:70:72:0d:70:b2:
3c:a7:a6:d5:67:6d:49:c0:36:e1:61:bb:6e:aa:a8:
ff:8d:c8:3f:15:ff:01:09:4f:b8:33:22:12:77:88:
98:9a:ea:62:1e:e0:76:8d:03:76:28:1b:c6:c8:37:
dd:24:69:db:38:b3:f6:cc:53:6b:32:74:05:da:0e:
66:c4:86:82:ec:38:37:cf:cf:55:99:27:71:22:06:
73:6b:cc:33:25:d0:be:8d:98:19:73:bc:98:c0:ab:
e2:3a:07:15:77:dd:dd:60:61:9b:40:35:79:f2:81:
8b:f4:8a:c9:c4:19:b6:2b:08:54:87:55:47:f6:17:
89:bd:43:61:0f:ee:41:6c:ed:1e:1e:02:8e:09:15:
3d:c3:41:b3:61:00:46:5b:88:a1:ed:9f:61:29:f2:
67:08:de:8d:8a:05:d1:6d:bb:ec:df:9e:96:65:5f:
90:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:39:60:E7:E6:20:21:81:A0:CE:7C:C3:2F:1F:37:AD:EA:BC:A0:5C
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/ATlg5-YgIYGgznzDLx83req8oFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.1.0/24
Signature Algorithm: sha256WithRSAEncryption
73:bc:b8:d1:7c:67:30:68:49:c2:99:1e:f4:7f:9f:41:56:69:
3a:a7:44:86:a4:fc:3a:1d:63:0e:8e:5b:2a:d1:53:71:6f:26:
98:ca:fa:0a:79:a9:a7:09:3c:48:06:a5:42:f4:97:73:d7:78:
ea:53:36:70:45:0a:ed:b9:b5:59:c5:39:f7:af:65:18:07:36:
bb:05:db:94:1a:70:0a:23:ee:d9:78:b4:56:e3:ec:c9:36:4f:
96:18:23:fb:61:b9:00:4e:be:e5:d4:e3:a7:7b:76:19:41:cc:
81:4a:93:1f:7a:59:0f:1d:bc:5d:7f:25:17:fc:32:31:97:8a:
25:87:db:38:b7:05:cc:26:f6:79:52:34:31:19:e6:a9:c8:e2:
17:3b:39:73:eb:7c:30:ef:76:a8:be:69:b6:cb:bb:9c:34:c2:
00:c5:10:da:76:4f:6a:25:da:94:b9:37:9d:12:a3:01:d9:cf:
c5:7b:23:a2:82:30:b3:58:58:89:f2:55:e8:97:7d:29:85:28:
e7:50:8d:a8:06:19:38:c3:2a:82:6a:e1:48:7c:b9:75:f9:6e:
d9:f2:7d:ee:86:64:fa:d4:31:6c:3e:8e:20:d9:4d:bc:f8:88:
f9:a6:7b:e3:b9:df:aa:bd:3b:9d:01:ce:b8:30:98:7c:89:2f:
1c:28:fb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:07:05 2025 by rpki-client