Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/mYHZwdczViyYoXBOpOzeD_D0ItI.roa
File: mYHZwdczViyYoXBOpOzeD_D0ItI.roa (raw, json)
Hash identifier: XzRlhEXAU8XyuAh5UY5SOWlFLWNphDHJg45+8nGpaYw=
Subject key identifier: 99:81:D9:C1:D7:33:56:2C:98:A1:70:4E:A4:EC:DE:0F:F0:F4:22:D2
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 0194228E2B1EB0641994EC19205788A427DE
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/mYHZwdczViyYoXBOpOzeD_D0ItI.roa
Signing time: Wed 01 Jan 2025 15:48:50 +0000
ROA not before: Wed 01 Jan 2025 15:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214766
IP address blocks: 45.132.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2b:1e:b0:64:19:94:ec:19:20:57:88:a4:27:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jan 1 15:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9981d9c1d733562c98a1704ea4ecde0ff0f422d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:24:cd:02:c2:95:90:80:65:85:7e:1c:83:38:
e4:9d:44:49:e6:bd:6c:07:b3:c6:84:73:83:d2:92:
c4:90:18:19:8b:cc:86:36:05:12:9e:98:76:93:52:
b4:82:c1:76:af:b0:c3:3f:ef:11:52:73:25:eb:35:
58:c7:99:a3:a4:b8:10:c0:62:ed:f8:cd:fb:3f:bb:
51:cf:0d:22:20:f2:51:1a:34:74:26:ce:f1:86:0c:
c0:89:67:6c:6e:59:a0:72:51:f4:97:05:b4:57:63:
56:94:65:53:e5:28:da:97:e6:69:b2:b0:35:e4:d9:
e8:d7:99:4d:52:26:e6:2a:44:0c:d8:f4:f8:38:d0:
3b:0e:c8:97:8d:12:2e:24:33:db:27:b3:5c:87:02:
e5:1e:30:bd:45:8b:c3:1a:23:dc:1b:10:4b:ef:29:
30:a4:64:2c:f1:92:f4:58:35:f6:80:88:9e:ef:d6:
c9:cb:c7:2f:0d:e3:ec:98:32:53:87:4d:bc:5c:e9:
8a:86:29:0e:d5:cc:40:01:80:23:29:d7:a3:29:64:
ab:56:2f:e1:88:eb:12:30:f2:59:db:e4:9f:5c:a9:
f6:88:f9:9c:84:64:6a:17:25:ba:57:66:2c:14:da:
cd:92:33:6a:7f:3f:39:cb:ff:ad:f2:55:d2:12:23:
07:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:81:D9:C1:D7:33:56:2C:98:A1:70:4E:A4:EC:DE:0F:F0:F4:22:D2
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/mYHZwdczViyYoXBOpOzeD_D0ItI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.27.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:24:ad:03:af:3b:1e:e1:8f:46:c7:55:2a:e1:26:76:56:a6:
8e:63:0a:81:30:ef:19:95:b7:7a:3e:fa:d4:c9:6d:ff:25:c1:
8a:7f:9a:30:4e:ad:1a:85:3d:48:60:a7:5e:68:38:b4:9e:32:
2c:24:e8:6e:d1:e4:04:40:e3:e6:49:6f:f7:42:f7:23:25:48:
52:e0:0d:ae:9f:3c:df:e1:02:85:d0:69:98:a8:17:bf:1c:53:
dc:f6:64:35:5d:88:a3:f5:e1:c3:bc:1d:56:40:85:74:79:56:
20:4f:67:14:3b:be:b1:8d:97:42:75:41:bb:27:e9:b6:f1:ae:
4f:79:de:c9:13:53:ef:40:58:81:90:4c:96:5c:1d:b9:18:e7:
14:04:c7:10:bc:a6:54:c9:c1:8f:d0:f6:94:71:b4:64:5c:71:
9a:f5:f9:3d:9c:c8:45:07:66:5a:86:dd:a6:a0:c4:42:ca:2c:
b0:70:c6:9a:1a:11:5b:ee:2b:e6:6f:c2:fe:ca:ec:d9:71:4e:
18:71:8b:32:b4:9f:43:13:f9:aa:d7:68:c5:47:fe:dd:62:53:
88:93:e5:58:fc:4e:a1:7a:a3:16:be:ca:bd:09:db:65:df:83:
4b:f8:1b:0b:5e:25:6f:ea:a6:2c:4b:b9:3f:92:34:96:e8:79:
c8:1b:01:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:51:01 2025 by rpki-client