Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/UhVjPeN5rpuwAHSinKlE_8JwegI.roa
File: UhVjPeN5rpuwAHSinKlE_8JwegI.roa (raw, json)
Hash identifier: VDbFVWwq0zh0SzqRtSX72R3GUx9GyGy9DQZPLPYdjM8=
Subject key identifier: 52:15:63:3D:E3:79:AE:9B:B0:00:74:A2:9C:A9:44:FF:C2:70:7A:02
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 019428273ED56747F2F9D15FDEFE7C1A836F
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/UhVjPeN5rpuwAHSinKlE_8JwegI.roa
Signing time: Thu 02 Jan 2025 17:54:08 +0000
ROA not before: Thu 02 Jan 2025 17:54:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46261
IP address blocks: 45.130.64.0/24 maxlen: 24
45.139.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:3e:d5:67:47:f2:f9:d1:5f:de:fe:7c:1a:83:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Jan 2 17:54:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5215633de379ae9bb00074a29ca944ffc2707a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:5f:db:45:3c:b9:5e:ba:64:c2:d5:fa:49:
18:ef:e3:d4:b7:a0:7e:9f:d5:eb:17:11:77:54:cc:
19:d6:c7:4d:28:b7:05:c5:ab:6d:b7:7a:e7:43:a1:
d4:46:10:3a:ef:db:b3:09:fd:af:15:22:2e:13:2a:
1a:b4:fe:81:24:68:44:40:ae:82:27:ac:b4:49:a8:
bf:60:b0:0c:25:11:d1:ba:92:56:60:0f:28:67:c1:
dd:7f:92:d1:28:04:41:54:bd:ea:7f:b5:5d:1a:20:
e1:9b:cf:74:71:37:70:b0:d5:4a:ca:08:97:98:e1:
53:5e:26:76:b4:ac:5b:a2:88:57:48:09:be:a2:d4:
e1:c5:f4:fd:e8:d3:ee:f5:7e:5a:90:53:6d:85:50:
3f:5a:38:84:04:80:b2:29:0c:2e:aa:2a:6b:fe:d0:
59:e1:9c:90:a9:a8:42:92:a1:19:7e:75:6f:b3:6f:
67:e3:00:a3:6f:4c:3c:64:ca:a8:38:d3:9d:ca:56:
19:95:9f:4d:d7:db:13:5e:b8:14:00:29:01:2d:67:
d9:cf:b7:2d:8b:8f:59:07:5d:6a:50:c0:c8:71:01:
7c:54:8b:81:e3:92:e2:73:66:d9:4e:be:b5:e2:1d:
df:05:77:f0:6f:d7:84:46:66:58:57:7d:c0:89:7d:
a1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:15:63:3D:E3:79:AE:9B:B0:00:74:A2:9C:A9:44:FF:C2:70:7A:02
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/UhVjPeN5rpuwAHSinKlE_8JwegI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.64.0/24
45.139.3.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:76:ce:03:ec:3a:42:a9:0d:e3:a6:1f:f2:a9:aa:11:b2:bf:
9d:0d:63:10:c1:e2:8e:dc:e4:58:71:27:ad:5c:40:02:54:36:
66:78:91:36:e1:52:95:df:b3:37:9a:05:b9:c4:9f:fc:7c:10:
61:83:65:89:63:25:7b:bb:56:7d:b6:8d:c1:6b:39:ac:ad:6c:
d7:15:bc:c4:67:21:71:05:10:d5:91:88:c1:2e:45:d7:f3:32:
bb:0a:6c:c3:d8:d3:d9:2d:e1:52:03:5f:ba:d9:28:a8:a5:6e:
2a:b8:04:a8:e5:c4:f4:70:7e:49:6d:6d:c4:84:99:b7:14:c4:
35:26:93:82:37:01:93:d7:8a:f1:2a:86:3e:85:db:41:f8:97:
fb:4c:9c:e7:ba:32:25:fb:3f:6f:8f:37:98:1b:25:fb:ec:53:
23:2e:f1:29:58:1f:02:f6:6c:46:0e:09:66:00:0c:17:e3:e2:
f2:7b:df:05:c2:e4:86:24:9a:a3:b8:31:93:c2:83:2b:f5:14:
f2:34:26:ea:48:ac:42:69:a2:b5:02:60:2d:fd:7f:30:a8:84:
a4:1c:48:17:ad:8e:df:3d:cb:b9:0f:1c:ec:bc:f8:a0:53:5c:
5c:94:22:e7:33:67:40:1f:5c:a3:3f:e9:b9:6d:49:2a:2c:51:
e3:b6:4f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:43 2025 by rpki-client