Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/seEl6XJp9pRNsuesbnV0Wf4MSTA.roa
File: seEl6XJp9pRNsuesbnV0Wf4MSTA.roa (raw, json)
Hash identifier: NW4u7tixKiH/5QUKQ2Hl8N3lyjhoJwZLOZkIyWrpA8g=
Subject key identifier: B1:E1:25:E9:72:69:F6:94:4D:B2:E7:AC:6E:75:74:59:FE:0C:49:30
Certificate issuer: /CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Certificate serial: 0194258F369A94F1E5A7D32302E8E451B1ED
Authority key identifier: B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/seEl6XJp9pRNsuesbnV0Wf4MSTA.roa
Signing time: Thu 02 Jan 2025 05:48:50 +0000
ROA not before: Thu 02 Jan 2025 05:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49028
IP address blocks: 45.145.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:36:9a:94:f1:e5:a7:d3:23:02:e8:e4:51:b1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Validity
Not Before: Jan 2 05:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1e125e97269f6944db2e7ac6e757459fe0c4930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:2b:b9:4f:03:83:a3:d3:63:48:20:97:f2:
48:92:83:96:49:77:bb:7d:19:a2:b8:d8:2b:92:c0:
0e:2e:a9:69:d6:7d:1e:93:33:c1:37:03:f3:6c:dc:
1c:81:f8:79:cc:a0:7e:7a:9c:28:4d:5b:a8:07:6a:
3c:51:f1:92:26:ae:47:9c:20:04:f4:7e:5d:ac:24:
61:b5:09:06:be:d9:ca:3e:48:32:8d:e1:53:94:56:
fc:96:13:f6:d3:06:43:a7:f7:a5:65:9c:e0:2d:0d:
61:02:68:26:b7:60:5c:2b:72:58:f6:f3:71:51:47:
87:83:6e:87:ed:f3:da:cc:a4:1b:d2:6d:5a:36:5c:
01:b2:1a:54:bc:29:63:25:75:a1:75:19:ad:3a:26:
1c:25:25:fe:00:0f:f4:55:d2:93:d6:8a:f0:c4:82:
e9:37:12:09:70:d4:d8:11:a1:f2:35:28:c5:a1:85:
92:e3:f8:30:8d:46:2e:c2:c6:b9:be:02:08:83:74:
46:41:9f:23:89:b3:11:09:5c:eb:52:c1:b0:b7:70:
a0:a6:3a:30:47:16:e1:d5:83:4e:87:ab:57:05:5d:
a9:68:0a:20:4a:d2:19:9d:80:d7:27:53:aa:e3:4e:
84:4c:6c:2f:91:25:50:99:1c:cc:ef:5e:7b:f1:a8:
51:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E1:25:E9:72:69:F6:94:4D:B2:E7:AC:6E:75:74:59:FE:0C:49:30
X509v3 Authority Key Identifier:
keyid:B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/seEl6XJp9pRNsuesbnV0Wf4MSTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.165.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:97:9b:d5:00:bd:f5:fe:e6:99:ae:c3:c9:27:b0:aa:3b:58:
59:8e:a7:ef:0f:b2:62:f3:be:2a:c3:07:93:c6:98:d3:43:a8:
2c:63:ee:02:d9:09:a5:ad:39:b1:3d:a9:eb:5d:67:bb:2d:3c:
aa:b8:34:8a:b5:a1:45:1d:b3:06:77:17:31:0d:07:89:dc:60:
2b:ae:97:f2:d5:19:01:f9:85:b2:16:ed:00:0a:63:29:6e:da:
82:2f:c4:7c:45:97:32:75:79:c8:c9:fc:1c:8e:06:15:72:ec:
c5:3a:03:5f:6e:26:6d:7e:27:e3:b4:76:e9:ad:a0:e5:88:0a:
ea:3f:91:d8:37:e4:87:05:cf:14:e2:e4:2e:e9:22:14:7c:a8:
22:be:2f:ae:20:b1:b3:4e:ad:42:40:f3:c4:9d:29:fe:ab:49:
2a:0d:5e:52:be:86:d0:3c:fa:00:13:d0:f4:7f:d3:53:f9:7c:
90:02:be:5f:7f:00:93:7c:f6:e8:37:64:64:dd:f0:72:13:96:
a0:a4:b8:eb:b0:f0:88:dd:09:d6:dd:61:c7:37:28:53:33:8c:
4c:f5:58:34:eb:5d:97:59:95:5a:25:da:c9:a5:af:9c:6f:55:
55:63:52:22:f2:24:dd:df:bc:df:39:58:d4:7c:7d:08:09:a9:
18:a4:65:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:42:37 2025 by rpki-client