Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/XqGkNzWhGRzFFq_Ld0F1iKDun4o.roa
File: XqGkNzWhGRzFFq_Ld0F1iKDun4o.roa (raw, json)
Hash identifier: sSmVA8YWQ3N6iHQCrnx4d6eQ8ZnwuumMJH4aLXBAS+Y=
Subject key identifier: 5E:A1:A4:37:35:A1:19:1C:C5:16:AF:CB:77:41:75:88:A0:EE:9F:8A
Certificate issuer: /CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Certificate serial: 01954C877220EC1177A5E9C3A0450290AB08
Authority key identifier: 1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/XqGkNzWhGRzFFq_Ld0F1iKDun4o.roa
Signing time: Fri 28 Feb 2025 12:28:19 +0000
ROA not before: Fri 28 Feb 2025 12:28:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57137
IP address blocks: 45.129.148.0/24 maxlen: 24
45.129.151.0/24 maxlen: 24
2a0e:4c41::/32 maxlen: 32
2a0e:4c47:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:87:72:20:ec:11:77:a5:e9:c3:a0:45:02:90:ab:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Validity
Not Before: Feb 28 12:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ea1a43735a1191cc516afcb77417588a0ee9f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d1:ed:ab:1c:28:b3:04:ce:82:76:a9:e0:eb:
fa:fa:6b:bb:94:e3:f5:00:2b:6a:f7:d5:ed:20:1a:
a3:84:15:7a:d2:51:57:f1:21:55:b4:12:ff:b2:93:
9a:2e:aa:4d:dc:1a:44:c7:98:c9:8d:9f:96:9c:c3:
45:43:1a:b1:88:6e:6a:68:e9:b6:22:f8:22:3b:fe:
e5:63:af:46:c8:3a:ff:50:52:63:3c:ac:1a:6b:a3:
0a:f8:44:c5:fb:e1:88:10:70:65:b2:89:59:31:3a:
90:7a:c5:94:cb:4a:92:9d:ee:e1:40:9c:75:f6:7d:
dc:e2:7a:ad:8c:b4:4b:12:71:13:d7:a8:16:9a:66:
99:70:fd:76:9f:1d:d4:8f:98:c4:cd:9c:fd:70:aa:
0f:0b:e8:47:eb:f5:ff:3a:5d:54:3b:f5:4f:a5:f6:
d0:33:58:5f:67:7b:5d:99:2e:3c:17:47:d6:7a:ae:
65:ed:e6:a2:6e:d2:e9:6c:cc:81:3a:8a:97:7c:b0:
23:b6:0c:96:c6:d5:8a:52:64:db:e3:8a:2c:d0:fe:
ed:5d:bd:7c:cb:1c:a8:c3:3b:6b:d8:d2:11:8b:90:
6e:1b:40:58:0d:b1:36:3a:4f:c1:ea:1c:e2:c8:55:
dd:58:6d:b6:97:ed:d2:ad:c8:5a:54:0f:db:22:37:
69:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A1:A4:37:35:A1:19:1C:C5:16:AF:CB:77:41:75:88:A0:EE:9F:8A
X509v3 Authority Key Identifier:
keyid:1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/XqGkNzWhGRzFFq_Ld0F1iKDun4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.148.0/24
45.129.151.0/24
IPv6:
2a0e:4c41::/32
2a0e:4c47:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
18:4f:b9:52:59:6f:9d:9c:81:cd:34:cd:29:a4:73:ab:3e:68:
ef:a0:46:1e:17:30:02:93:08:b2:ab:64:fa:21:c9:00:da:7a:
c7:e3:d0:15:d1:50:0a:88:a2:5d:df:2f:48:85:f1:8b:16:28:
52:9d:45:d6:94:21:67:47:23:04:3b:d2:6d:db:5a:9f:98:9d:
f2:91:d5:70:cc:8a:19:7e:97:3f:f6:0d:da:2e:58:b2:0d:36:
ce:1f:04:ac:d8:ec:e4:2c:73:64:71:fe:f1:ca:c4:17:be:df:
cb:5d:64:e3:37:a6:5c:74:aa:27:a2:23:a0:f2:89:7b:29:68:
db:58:d3:9b:47:d4:fc:ec:c6:55:c1:e4:65:25:67:e1:fb:ec:
83:f8:e9:c8:fa:34:64:ac:4e:10:fd:12:b3:c0:88:2d:6e:b5:
c7:6e:0f:13:29:72:f9:9a:68:e9:c9:d8:9c:b0:92:67:d2:5c:
3d:07:a9:a8:57:47:a1:55:64:48:e5:8f:75:85:d8:fe:1b:1d:
8a:17:9b:ee:db:88:25:f8:53:4b:6b:fd:88:9d:2d:a9:b5:0d:
17:3b:23:b5:e2:ed:45:96:cb:82:99:a8:12:9f:c4:fb:2f:39:
35:de:0f:5b:7d:7d:74:d3:48:2b:79:34:e7:89:7b:63:1f:20:
01:ef:a1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:12:42 2025 by rpki-client