Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/2pdvmZCHvau2bejs7kiQ6VYT8aY.roa
File: 2pdvmZCHvau2bejs7kiQ6VYT8aY.roa (raw, json)
Hash identifier: sxVxk1VG9jbnXlYRRTgFy8naU2+NPtqmSzhI8JvCk0Q=
Subject key identifier: DA:97:6F:99:90:87:BD:AB:B6:6D:E8:EC:EE:48:90:E9:56:13:F1:A6
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01942521B7F103C9E9153A6A46994138C252
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/2pdvmZCHvau2bejs7kiQ6VYT8aY.roa
Signing time: Thu 02 Jan 2025 03:49:14 +0000
ROA not before: Thu 02 Jan 2025 03:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13213
IP address blocks: 45.150.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b7:f1:03:c9:e9:15:3a:6a:46:99:41:38:c2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 2 03:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da976f999087bdabb66de8ecee4890e95613f1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5a:6e:fd:1a:fb:22:5b:17:65:ce:3e:f2:8c:
f5:6f:60:0c:d8:20:ed:d3:65:f1:0d:b0:be:95:a4:
fc:8f:07:31:c4:96:bd:49:2e:49:de:cc:57:10:99:
59:a6:20:5f:e9:d3:5d:37:ab:f3:14:51:46:07:22:
54:01:0d:c5:16:c4:31:ec:c0:d1:78:88:62:bb:c6:
c0:65:81:02:e6:a3:62:bb:ba:53:a3:d6:74:a2:c5:
4f:a7:78:b4:f9:ac:4f:a7:ac:42:03:07:bc:c9:a4:
74:6b:7d:a7:6e:6c:78:15:67:00:af:1c:9e:72:9c:
62:fa:26:e3:ea:f9:29:d7:2f:31:1d:b1:82:71:86:
6b:d7:89:6d:e5:e1:14:47:4b:95:35:0e:39:df:57:
da:cb:b2:96:be:89:d7:24:d8:7f:22:b2:19:ce:55:
16:c1:3e:c7:52:35:c8:78:9b:c4:b0:41:50:16:59:
84:cc:37:79:1d:38:f4:e5:7c:b7:8f:a7:f0:9e:4f:
dc:e4:a1:bd:8a:f4:38:79:5f:ad:2a:e6:ff:76:18:
68:de:25:22:69:13:6b:78:c2:ef:32:b8:23:d8:12:
e8:64:d9:13:2c:f8:2f:a0:90:ff:c9:54:12:1c:a7:
d0:4e:a6:df:09:d7:f0:f6:1d:0a:5e:19:91:c2:89:
ed:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:97:6F:99:90:87:BD:AB:B6:6D:E8:EC:EE:48:90:E9:56:13:F1:A6
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/2pdvmZCHvau2bejs7kiQ6VYT8aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.196.0/24
Signature Algorithm: sha256WithRSAEncryption
11:4a:2e:f4:64:b5:62:70:df:aa:ec:f0:1a:dc:2a:72:ea:54:
91:80:12:95:ce:aa:d6:a6:6a:4d:cf:14:8d:9c:5b:fc:0d:ef:
c0:9f:c0:f9:2e:9a:f0:40:f3:ee:1b:dd:86:ae:05:23:c3:48:
7f:11:2b:82:68:b8:54:ec:50:83:4d:7d:9d:0a:a0:39:2c:c4:
2c:5e:90:ab:6d:75:8d:f2:d6:b4:af:e1:74:0e:d3:04:7c:2e:
f6:ee:1b:a2:d0:47:43:17:82:ab:98:d3:60:a2:d8:c5:8c:a1:
6f:80:37:8f:c7:74:c2:a4:f5:b4:66:94:52:c0:fb:e8:3f:90:
da:1f:47:27:97:5f:56:77:09:7c:62:a0:89:b8:d7:39:1f:5d:
f0:7b:ea:2b:38:6d:15:b4:0b:d2:fe:1a:c6:65:e6:4c:72:d7:
c4:fd:08:e4:2a:49:45:66:17:87:33:5c:52:f5:ae:12:94:ae:
a7:c1:d5:15:9b:d3:9c:2f:e5:4a:6f:4f:a9:02:2a:f1:22:6c:
80:82:b7:31:59:fd:e8:a3:2a:aa:74:aa:7d:98:9e:d0:63:33:
24:88:8f:ba:da:14:bc:67:97:51:85:ae:bb:fe:ab:cc:37:92:
e7:fd:42:b1:e3:b1:a5:7f:45:b4:90:44:9b:b5:5b:78:df:5a:
2d:43:dd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:15:33 2025 by rpki-client