Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/tHrd0OxA2ZR5VkmeC2fHFBCcPX8.roa
File: tHrd0OxA2ZR5VkmeC2fHFBCcPX8.roa (raw, json)
Hash identifier: nEuYMoFMB84WV3sy7Z+LsysZv+BDXGR06tnV22mOYX8=
Subject key identifier: B4:7A:DD:D0:EC:40:D9:94:79:56:49:9E:0B:67:C7:14:10:9C:3D:7F
Certificate issuer: /CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Certificate serial: 02F701A1
Authority key identifier: 42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/tHrd0OxA2ZR5VkmeC2fHFBCcPX8.roa
Signing time: Sat 01 Jan 2022 04:57:52 +0000
ROA not before: Sat 01 Jan 2022 04:57:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39016
IP address blocks: 45.133.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49742241 (0x2f701a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Validity
Not Before: Jan 1 04:57:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b47addd0ec40d9947956499e0b67c714109c3d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:59:f8:88:5a:5b:37:51:d4:34:3d:1b:e9:
ec:8d:3d:bb:15:8f:93:70:69:59:3b:b7:00:fb:a7:
69:52:01:0d:85:c5:6c:7e:2b:8e:19:b7:ef:ef:a3:
cf:ee:00:b4:a8:53:79:af:8d:9e:d8:1a:0e:09:db:
ff:64:65:30:45:ab:eb:f2:4f:34:25:af:7b:18:39:
17:68:59:a7:86:0c:b4:fb:ee:a8:d1:03:60:8c:6a:
ec:98:c3:00:07:ed:63:99:2f:4c:36:c7:18:47:60:
b4:3a:92:68:ea:6b:eb:49:80:65:a9:a5:d6:cc:ba:
3b:cd:2d:2f:12:bd:d7:89:67:91:40:1f:5c:2b:98:
a8:4b:04:05:50:e4:dd:a9:0e:7f:ed:30:42:88:a0:
5e:a4:50:37:c7:7b:b8:ac:09:57:63:ce:a7:a9:5a:
6f:1f:b6:a7:65:68:6e:55:b4:bd:b5:c1:33:6e:ff:
0a:ab:0f:24:e4:25:b0:95:6e:62:29:7b:30:cd:e7:
3b:15:3e:26:0f:fe:5d:3e:25:77:26:00:d6:e4:98:
8c:1d:4a:b0:b0:85:5b:e8:17:56:96:ff:80:d3:2d:
35:7f:20:55:7b:3b:c5:d0:5b:e8:60:75:88:c6:00:
46:9f:cd:ec:4a:db:ee:44:92:07:45:9f:9f:d8:41:
1e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7A:DD:D0:EC:40:D9:94:79:56:49:9E:0B:67:C7:14:10:9C:3D:7F
X509v3 Authority Key Identifier:
keyid:42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/tHrd0OxA2ZR5VkmeC2fHFBCcPX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/QvSPf64BKRanddXjtvojEJg0PqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.137.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b8:c4:ed:b9:e1:8e:40:16:a2:8b:db:1b:3f:14:6e:20:d8:
4b:25:a3:d7:2c:90:5b:e6:85:37:9e:eb:dc:41:6a:af:30:9b:
ff:c2:de:94:4e:92:f5:ff:31:72:42:cd:27:30:9e:9f:51:12:
36:f0:60:fb:77:0c:c4:1d:c7:8c:58:9d:76:76:96:9d:fb:f5:
00:a3:00:5c:86:c2:e7:07:eb:7b:e6:fb:3a:76:54:42:46:61:
17:65:7a:ba:41:a4:2a:c1:e6:42:76:5c:e4:f1:f1:92:41:b9:
9f:fe:54:40:6d:4b:ed:39:4d:e1:5b:19:08:ab:9d:2b:73:c2:
da:e3:1a:a5:48:88:65:16:4a:9f:f3:cb:82:f5:24:4d:72:e3:
ae:f4:18:6d:93:88:86:83:db:d6:1b:c0:b5:4f:0f:a0:d7:8b:
20:05:8d:9e:2e:8e:f4:08:ae:b6:38:d4:bd:01:98:96:4b:63:
6f:3d:1a:c6:26:b4:f9:89:a0:66:cf:bd:2f:5e:d3:c1:1f:db:
aa:9f:73:e7:65:a9:85:0b:70:77:ec:fa:50:aa:02:84:09:21:
70:a7:7e:62:4e:49:dc:0b:de:34:98:a0:e4:23:74:ca:d9:91:
12:b0:51:13:84:b3:b4:61:3b:4f:4b:ef:16:43:63:b8:2e:72:
de:08:0d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:07:10 2025 by rpki-client