Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/xjB9L3n6ciajEXNtLdgWwzhRmuA.roa
File: xjB9L3n6ciajEXNtLdgWwzhRmuA.roa (raw, json)
Hash identifier: tTqpbZ8+o3Pvw8mVlaHD0xRG7XMwhhkV2BeICHSG6CU=
Subject key identifier: C6:30:7D:2F:79:FA:72:26:A3:11:73:6D:2D:D8:16:C3:38:51:9A:E0
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 01942067C30DE6DF66633859642A5F79E01B
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/xjB9L3n6ciajEXNtLdgWwzhRmuA.roa
Signing time: Wed 01 Jan 2025 05:47:38 +0000
ROA not before: Wed 01 Jan 2025 05:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200017
IP address blocks: 45.152.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c3:0d:e6:df:66:63:38:59:64:2a:5f:79:e0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Jan 1 05:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6307d2f79fa7226a311736d2dd816c338519ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:7f:34:b5:a5:04:16:c4:42:fc:8d:fb:e4:
27:67:8f:62:a0:4d:b2:d0:f2:eb:ba:2e:46:a8:64:
9f:9e:ce:6d:cc:bf:53:11:e7:4e:d4:8c:ba:66:30:
e3:d6:cb:5c:8c:f6:81:aa:f0:c4:e8:62:ba:e3:af:
ad:79:45:1f:2b:20:84:67:42:f0:c4:ec:3d:87:62:
0d:02:8a:9e:63:98:88:d8:4d:c9:03:1b:51:f8:1a:
de:55:7a:59:ce:d9:26:b3:78:de:3d:52:4c:53:15:
a3:0d:3c:1a:e3:f8:8d:84:43:fa:cd:f6:cc:77:9b:
2c:24:60:a1:7f:d8:f3:7c:de:62:af:7d:1a:f3:55:
de:e9:f7:49:97:fe:55:1a:87:03:22:dc:4b:8f:24:
f2:d0:50:4f:29:21:03:a8:29:02:e3:18:e4:e3:c2:
50:aa:2d:dd:3a:b7:70:60:b4:7d:d6:53:0c:5d:a1:
e4:e3:72:ab:40:16:5e:a3:99:22:4f:e5:c5:b6:1a:
c9:f2:b7:b2:c1:41:88:f4:7e:f4:de:5e:39:c3:f2:
d4:ab:75:f9:80:0b:90:c4:b0:96:9b:19:2b:b6:b3:
3a:38:d7:3a:0c:62:2d:67:31:86:14:28:8c:5d:91:
9a:e7:60:e0:ab:ba:5c:3a:5f:64:e5:97:21:77:cc:
f0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:30:7D:2F:79:FA:72:26:A3:11:73:6D:2D:D8:16:C3:38:51:9A:E0
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/xjB9L3n6ciajEXNtLdgWwzhRmuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.176.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ad:72:b2:9b:b9:7e:6e:e5:20:ad:3a:88:50:8e:82:ce:40:
a9:41:a5:71:99:db:7e:9e:88:fc:6f:13:f7:bf:0d:1b:33:fe:
06:17:28:b7:01:a9:a6:27:59:88:6d:00:ad:22:2e:df:42:4d:
90:d1:d4:d1:dc:0e:66:dd:4c:42:7b:65:31:f5:36:a1:6b:8c:
3f:35:6f:a1:c6:8f:7c:d0:41:21:3f:0b:ac:e6:f3:e0:2f:2e:
cb:fa:7c:f4:f4:a6:61:dc:8b:3d:e2:aa:d7:0d:41:fd:2c:eb:
6a:7a:6d:9e:3d:97:9a:22:64:ec:fd:65:79:1d:67:c4:22:9e:
0a:c1:75:58:86:96:3e:3e:e9:2b:14:5d:f7:d9:d1:24:b5:2a:
ac:36:53:da:75:94:3d:70:d2:3d:ec:1b:77:44:e1:cf:00:25:
3d:c0:62:ba:61:f1:fc:11:60:c2:72:6f:57:28:45:c8:10:a9:
dd:87:e1:53:a7:83:17:3f:5d:6f:03:7b:67:5f:c9:50:48:71:
45:fb:43:5b:2f:66:9a:d5:0a:a9:0a:6c:42:79:18:5d:3d:03:
e4:44:5a:03:d7:4f:44:db:5d:66:7f:de:74:b4:b7:7b:b7:80:
51:b5:64:fa:c9:20:56:3f:09:4e:78:51:33:a0:03:2e:aa:a6:
d2:78:83:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:20 2025 by rpki-client