Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/XL_9p9brFPkAr6At7B2-7MAj1ko.roa
File: XL_9p9brFPkAr6At7B2-7MAj1ko.roa (raw, json)
Hash identifier: 3eFDLXCUac403pbdfIJtWmimAYTp4N/9AWARNGvJliE=
Subject key identifier: 5C:BF:FD:A7:D6:EB:14:F9:00:AF:A0:2D:EC:1D:BE:EC:C0:23:D6:4A
Certificate issuer: /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial: 0185DE9A1375B1BC575A483AD306708E69B5
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/XL_9p9brFPkAr6At7B2-7MAj1ko.roa
Signing time: Mon 23 Jan 2023 12:28:37 +0000
ROA not before: Mon 23 Jan 2023 12:28:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 45.143.132.0/24 maxlen: 24
45.143.134.0/24 maxlen: 24
45.143.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:9a:13:75:b1:bc:57:5a:48:3a:d3:06:70:8e:69:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Validity
Not Before: Jan 23 12:28:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cbffda7d6eb14f900afa02dec1dbeecc023d64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b1:46:ea:bc:48:22:f7:b3:bc:91:4f:5f:26:
4b:f8:88:b9:f0:bd:50:79:5c:fc:73:4b:24:b0:5e:
80:15:24:e7:0e:fc:2c:31:93:37:4a:98:6f:4c:44:
8f:d2:53:dc:d2:6e:85:ad:11:17:45:cc:0c:d6:6a:
d6:f5:94:3d:ed:b1:1f:b8:4e:73:7e:d3:1b:47:d8:
06:4e:2b:b7:c6:b7:55:2d:8d:a8:05:29:ec:ab:23:
fa:2d:21:32:fc:b9:cf:11:28:fb:24:0d:a2:ba:f3:
23:d8:5f:d0:18:41:8c:63:2f:c8:23:e3:fd:8c:e0:
6b:58:ab:2f:f2:0b:f8:72:4b:ad:22:a2:4d:6c:97:
5e:63:a4:51:1c:32:b8:46:fb:5d:04:6e:99:f2:37:
50:fb:5f:b0:19:73:03:b4:0e:a0:a7:a8:63:ca:2a:
cd:05:5c:80:78:ce:37:cd:7b:41:13:d2:aa:1d:78:
4b:4b:5c:ff:67:0c:80:cf:47:bd:8a:af:1c:d0:9f:
cb:b3:6f:87:4c:bd:a8:b2:ef:51:74:72:08:7d:f0:
69:7d:41:cd:e2:d5:7e:28:d5:6f:c6:8d:f2:6b:e8:
6e:f0:8e:6a:a5:4c:3a:2c:0c:bb:55:29:e6:1e:00:
34:cb:b7:3d:c2:75:74:42:3a:4d:0b:f1:2d:b1:a6:
34:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BF:FD:A7:D6:EB:14:F9:00:AF:A0:2D:EC:1D:BE:EC:C0:23:D6:4A
X509v3 Authority Key Identifier:
keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/XL_9p9brFPkAr6At7B2-7MAj1ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.132.0/24
45.143.134.0/23
Signature Algorithm: sha256WithRSAEncryption
28:49:77:da:14:6e:d9:b3:28:62:2c:13:28:1b:db:ca:35:c7:
06:60:49:bc:b9:ab:78:ce:23:3f:d8:1b:09:66:a8:93:00:9b:
8a:b8:20:b8:65:72:1a:36:35:74:20:b2:6a:14:4c:a6:88:eb:
48:f7:4a:e9:9d:87:70:fb:b6:e0:87:cd:1f:3b:a0:3d:42:26:
38:fd:32:c5:b5:d6:bc:83:d3:29:5e:e5:60:60:b8:a4:c8:fd:
f8:c5:9b:06:61:00:8e:00:83:19:62:a9:06:0e:cf:35:e4:e6:
7d:20:67:e0:cb:87:96:cc:45:c6:b8:ab:e9:58:2c:55:58:58:
df:46:3c:98:bc:30:39:d5:bc:35:2c:a1:20:ea:2f:ec:d2:d2:
5d:8a:fd:d5:8a:7d:d1:6a:6b:f5:fe:e5:39:34:d7:4d:a1:b6:
e6:3a:35:b4:7e:d4:fe:bd:bb:9f:99:6f:e0:f4:86:d0:83:98:
1f:48:f1:e6:c2:35:4f:04:e9:66:4b:f7:dd:46:75:d5:cd:58:
db:b6:9e:6e:88:c9:dc:ac:7d:cc:c0:50:85:26:67:2a:41:27:
fe:e3:0d:d0:9e:64:57:ce:53:9a:11:1b:39:8e:f9:45:89:ac:
5a:4c:96:6f:de:d2:fc:5b:53:96:fc:37:dc:db:7a:e1:14:e6:
93:03:89:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:21 2025 by rpki-client