Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/45perw_w1j6f13fS2dhRsqX1J5M.roa
File: 45perw_w1j6f13fS2dhRsqX1J5M.roa (raw, json)
Hash identifier: DYBg8sY6Y3Ov/VU9uOEBk40lHTsP43PpQZFd0Uj3ouA=
Subject key identifier: E3:9A:5E:AF:0F:F0:D6:3E:9F:D7:77:D2:D9:D8:51:B2:A5:F5:27:93
Certificate issuer: /CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Certificate serial: 0194266BB3D2BEBF9F85993D0CCFA532FB8A
Authority key identifier: 54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/45perw_w1j6f13fS2dhRsqX1J5M.roa
Signing time: Thu 02 Jan 2025 09:49:40 +0000
ROA not before: Thu 02 Jan 2025 09:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212772
IP address blocks: 45.156.136.0/22 maxlen: 24
46.243.228.0/22 maxlen: 24
92.255.56.0/24 maxlen: 24
92.255.68.0/22 maxlen: 24
92.255.84.0/24 maxlen: 24
94.140.14.0/23 maxlen: 24
185.113.28.0/22 maxlen: 24
217.72.12.0/22 maxlen: 24
2a10:50c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b3:d2:be:bf:9f:85:99:3d:0c:cf:a5:32:fb:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Validity
Not Before: Jan 2 09:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e39a5eaf0ff0d63e9fd777d2d9d851b2a5f52793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0c:fc:5f:52:a6:4f:25:44:10:fb:26:eb:2e:
ee:36:74:92:24:9a:ef:74:2d:bc:3e:b3:43:e1:43:
69:0f:fe:79:10:22:d8:45:a6:68:18:c0:30:24:61:
d7:c3:cc:a6:40:11:49:98:57:85:93:f0:21:85:aa:
33:90:8e:85:e3:6c:29:57:0e:99:d2:02:09:47:9e:
b9:08:4c:4f:bb:06:5d:53:83:6f:de:bd:f5:3b:05:
7d:9a:fc:9a:ed:da:95:cc:64:78:8c:ca:c1:69:07:
31:22:50:6f:ed:0d:81:b4:73:6a:58:12:49:e1:07:
ec:f5:c9:45:8b:7d:05:5e:63:e7:ad:49:a4:93:95:
f8:22:df:71:2e:53:fe:8e:1d:17:38:f8:de:88:42:
a8:5e:fe:08:06:e0:fc:05:91:3a:a6:92:4a:ea:4a:
64:8c:58:42:94:90:25:7f:65:83:dc:1d:46:10:3a:
58:19:45:0f:22:1d:c6:79:1f:8b:1d:4f:c6:0d:1b:
62:99:9f:d2:e0:21:b7:cc:56:fb:8e:be:22:8c:6b:
e0:c5:52:f6:2c:55:07:dd:0f:b1:17:d9:d7:17:79:
f1:bc:e4:8c:0d:44:40:32:fb:11:45:f3:c3:62:a1:
4d:07:e0:57:ea:0f:d9:0b:74:70:49:c4:e9:f6:c8:
c8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9A:5E:AF:0F:F0:D6:3E:9F:D7:77:D2:D9:D8:51:B2:A5:F5:27:93
X509v3 Authority Key Identifier:
keyid:54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/45perw_w1j6f13fS2dhRsqX1J5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.136.0/22
46.243.228.0/22
92.255.56.0/24
92.255.68.0/22
92.255.84.0/24
94.140.14.0/23
185.113.28.0/22
217.72.12.0/22
IPv6:
2a10:50c0::/32
Signature Algorithm: sha256WithRSAEncryption
8c:7d:ce:5c:ac:dd:98:16:28:53:b2:eb:05:c9:e8:e9:3b:a8:
79:87:3b:8c:e5:1b:91:c8:8b:91:e6:af:e3:4d:90:f1:4e:c0:
97:76:50:9a:53:64:e3:60:fc:bb:a2:98:c7:44:e2:f2:7e:a1:
0c:07:56:07:cf:7c:33:71:5f:0c:2c:9d:ff:ef:b6:55:06:71:
5e:bc:51:4e:5e:f4:26:16:83:69:34:46:a8:f1:93:a6:4b:0f:
d3:85:90:be:2e:95:fb:e4:15:83:23:6f:ab:0c:fd:f0:f5:8c:
8a:5e:7f:e4:91:af:f5:1f:59:88:9a:a2:e1:e5:a0:88:47:03:
ae:c4:f1:42:77:cd:e3:8c:52:9e:13:28:eb:2b:b8:56:cb:70:
c5:a0:fc:fc:08:07:c9:97:fe:94:90:9e:64:94:aa:06:95:a1:
73:da:61:cc:a4:c4:b2:17:c9:7e:3c:ff:b9:0a:41:0d:9b:6e:
4f:0a:e1:03:bd:db:a4:82:1f:20:02:e8:03:36:22:9e:a1:ac:
65:7e:2d:2a:86:a3:4d:33:d3:0e:d1:ea:57:29:0f:85:18:03:
e4:f6:cf:17:fd:5d:dc:ff:c0:c5:9a:ac:16:5b:f0:9b:98:d6:
07:b1:40:78:f1:bd:88:a3:91:30:a7:44:65:cd:e3:07:d0:36:
f1:1f:19:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:28:57 2025 by rpki-client