Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/xaFhIwpFf6S9yusiRrNzXVswQTo.roa
File: xaFhIwpFf6S9yusiRrNzXVswQTo.roa (raw, json)
Hash identifier: ChBwLMmBAUd+jVv2m9c0HIcklPdKZGvfB8lky6WL2ss=
Subject key identifier: C5:A1:61:23:0A:45:7F:A4:BD:CA:EB:22:46:B3:73:5D:5B:30:41:3A
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019424449D628C052C98931B40F5BDF48412
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/xaFhIwpFf6S9yusiRrNzXVswQTo.roa
Signing time: Wed 01 Jan 2025 23:47:43 +0000
ROA not before: Wed 01 Jan 2025 23:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210937
IP address blocks: 45.153.244.0/22 maxlen: 24
2a09:1::/48 maxlen: 48
2a09:2::/48 maxlen: 48
2a09:3::/48 maxlen: 48
2a09:4::/48 maxlen: 48
2a09:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9d:62:8c:05:2c:98:93:1b:40:f5:bd:f4:84:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5a161230a457fa4bdcaeb2246b3735d5b30413a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:bc:6b:7e:a4:0d:bb:c5:85:8f:1b:e1:5b:
63:0f:43:51:c2:23:fd:46:d5:a4:fb:8d:74:4a:d8:
46:18:42:f2:ce:56:be:80:56:a6:4f:7c:e4:f6:f2:
de:0e:76:a1:0a:29:9d:61:e3:a4:91:e8:b0:53:0d:
98:65:5e:9d:9d:52:f4:66:ed:be:c2:6c:43:50:97:
16:5a:ca:a6:4f:90:dd:b4:da:58:68:7b:1c:75:df:
45:ec:19:ce:c1:37:52:8b:02:61:ed:68:d2:b7:33:
a3:23:33:3f:d2:2c:22:a9:96:bb:cc:12:16:6a:86:
01:c0:2d:ee:ca:97:25:c2:05:2b:5f:79:dd:9d:0c:
15:b9:87:b2:be:b0:ba:0c:8c:83:2a:32:c2:73:40:
62:fc:96:42:a3:49:f3:be:83:fc:52:8c:00:ef:3a:
c9:2c:06:ef:93:72:04:53:a6:82:92:fd:21:f0:90:
f6:c4:15:76:4b:e8:f0:3d:50:97:ad:f3:28:42:c7:
ab:11:0c:cb:89:67:0e:4f:0f:f8:6b:b4:3e:98:12:
9a:89:a3:93:3f:2f:03:28:45:e2:46:a5:6b:1a:58:
bc:23:89:87:c8:49:d9:58:57:ba:38:e1:a3:cc:a5:
02:8e:bf:0f:47:40:9d:97:95:e1:60:cc:2c:1b:f6:
b7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A1:61:23:0A:45:7F:A4:BD:CA:EB:22:46:B3:73:5D:5B:30:41:3A
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/xaFhIwpFf6S9yusiRrNzXVswQTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.244.0/22
IPv6:
2a09:1::/48
2a09:2::/48
2a09:3::/48
2a09:4::/48
2a09:5::/48
Signature Algorithm: sha256WithRSAEncryption
1d:6d:63:15:e6:7b:50:1b:e8:84:5e:68:41:51:ef:ec:b5:af:
7a:b6:c3:b2:c0:a5:ea:3d:a8:fa:73:64:c2:7a:a6:dd:0c:45:
09:be:45:1e:1c:28:6a:37:d1:2e:05:78:b0:94:55:c0:72:81:
f3:4f:db:ed:a5:b5:52:e3:71:30:dd:66:d2:dd:f4:2d:86:3f:
c8:8d:09:4b:a2:f7:ae:d9:ab:bc:81:62:1e:08:c7:2b:4c:ff:
ae:e7:aa:a0:65:b6:94:7a:76:bf:e6:e6:dc:75:6a:71:72:41:
c7:9b:fc:3f:e5:fd:21:ed:4f:cf:a6:fe:97:c0:a9:d6:78:56:
0f:c9:e5:ec:4c:c7:ae:6f:75:63:23:ab:a7:e2:fc:e9:38:10:
a9:9c:dc:e8:39:e0:71:d6:ff:de:9a:72:60:13:df:0b:7d:76:
4d:57:4f:09:7e:8c:d8:59:e5:ba:53:65:59:81:f1:3e:59:23:
13:c5:09:d3:d2:96:d5:4c:ca:8d:a7:54:44:34:93:8f:03:d4:
b6:ba:0e:01:f0:5e:95:2a:a8:5e:42:f6:6d:c2:fc:be:1e:ac:
f2:c0:aa:8d:7e:0b:ec:44:91:95:6c:26:2a:f9:f1:b1:fe:48:
2a:91:d6:92:dd:bc:1a:59:5d:bd:98:07:78:c0:79:69:f8:0a:
64:44:1a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:28:30 2025 by rpki-client