Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/h5Pey3t7ILGJvHcV0wlWm8IDgRE.roa
File: h5Pey3t7ILGJvHcV0wlWm8IDgRE.roa (raw, json)
Hash identifier: /bmLdcY/7qOd0oeU6NCbdR7DKpvTkMz1r7GZ1d675P4=
Subject key identifier: 87:93:DE:CB:7B:7B:20:B1:89:BC:77:15:D3:09:56:9B:C2:03:81:11
Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial: 0194221F7563F4A1A0EF80F899A231589074
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/h5Pey3t7ILGJvHcV0wlWm8IDgRE.roa
Signing time: Wed 01 Jan 2025 13:47:54 +0000
ROA not before: Wed 01 Jan 2025 13:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44090
IP address blocks: 45.142.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:75:63:f4:a1:a0:ef:80:f8:99:a2:31:58:90:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Validity
Not Before: Jan 1 13:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8793decb7b7b20b189bc7715d309569bc2038111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f2:ab:a4:61:4f:40:df:c6:4f:0d:37:1c:2c:
90:8c:e3:76:bd:b4:d9:23:f0:70:ba:0d:c1:ea:db:
42:04:90:f3:ef:71:8d:fc:75:0d:5b:92:5b:66:2b:
7d:fc:48:86:ed:70:b2:67:47:c6:d8:5a:c7:4f:bf:
4c:4e:f1:50:75:ed:cd:c8:a4:54:69:cc:c4:65:ac:
6c:0e:dd:34:3e:8b:2c:0a:be:19:94:38:88:4b:f2:
f0:a5:d4:f5:9c:ec:d1:4a:29:2d:a0:b5:fe:8b:12:
fd:3a:3f:12:b7:47:e2:b5:1d:09:6c:bf:43:1c:5b:
2e:89:3a:e0:48:14:a0:b4:82:f2:c8:b0:d8:22:1d:
ca:83:cd:1e:7b:cf:c1:34:99:4a:92:b1:2b:44:e1:
d6:53:b0:aa:e0:5b:fb:de:94:e9:c4:e5:f4:2a:48:
03:ee:61:ef:de:9a:aa:61:d7:87:7e:c7:fd:60:6c:
83:a0:d6:9a:ad:95:6b:64:25:43:ca:91:89:55:95:
ba:a2:64:6c:da:86:20:1c:e9:7f:f3:99:cf:37:e1:
86:c5:c4:e5:1f:b5:af:24:6e:56:63:56:1f:1d:40:
a9:f5:37:a2:ec:c0:b8:f4:f3:f3:ed:64:51:da:54:
17:d7:13:dd:50:d5:ce:50:38:b9:61:75:50:e7:30:
f8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:93:DE:CB:7B:7B:20:B1:89:BC:77:15:D3:09:56:9B:C2:03:81:11
X509v3 Authority Key Identifier:
keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/h5Pey3t7ILGJvHcV0wlWm8IDgRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.189.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:48:40:8a:4f:75:af:43:2f:30:e6:38:d0:bc:65:11:11:ed:
8e:af:2c:6e:c1:f4:47:53:4e:af:d5:a3:e5:ad:3d:d9:fa:f3:
50:ed:2a:30:db:59:e0:ae:67:ea:e0:78:7c:f5:05:06:e9:1c:
e1:7a:15:06:f4:4c:89:b1:5f:7e:03:f6:96:48:f3:0e:8a:f2:
b2:41:dd:00:ad:5e:b1:cc:de:38:72:a6:ce:41:7a:a2:fc:3f:
a7:5c:3d:11:c2:c2:08:49:58:1c:0f:f1:50:9e:24:5c:48:b9:
77:13:9a:00:a4:f8:f2:c5:d8:92:1e:18:d8:6e:1b:5b:74:d8:
19:af:90:af:db:63:c7:66:21:df:2e:3e:54:6b:e3:8d:b2:d0:
e8:5b:80:4a:44:40:87:e8:44:1d:f2:3a:9e:27:17:98:f3:24:
72:d0:36:e7:4b:dd:42:14:8e:b3:38:20:e8:43:a4:b0:51:31:
84:da:44:16:d0:9b:47:5a:7a:69:d9:48:ff:53:f9:5f:7a:e8:
a4:e5:d9:f9:60:bd:73:51:7d:bc:a7:2d:4e:8d:64:5d:0d:fa:
da:d5:87:06:47:70:02:c1:9d:59:4e:71:87:d7:72:7f:40:af:
37:32:dd:be:be:84:31:cd:92:11:c0:e5:91:14:58:f5:f6:a9:
3c:d7:55:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:16 2025 by rpki-client