Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/xUGm3kpTiMAlzgkonjqufuYlmQk.roa
File: xUGm3kpTiMAlzgkonjqufuYlmQk.roa (raw, json)
Hash identifier: 3q3AXsJge0KIrT2tTs/ggx0aF7QEDS7JWPpyt1gZZ38=
Subject key identifier: C5:41:A6:DE:4A:53:88:C0:25:CE:09:28:9E:3A:AE:7E:E6:25:99:09
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 01942067EB4C188156BE4B59AE31B5617DDB
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/xUGm3kpTiMAlzgkonjqufuYlmQk.roa
Signing time: Wed 01 Jan 2025 05:47:48 +0000
ROA not before: Wed 01 Jan 2025 05:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 45.15.18.0/24 maxlen: 24
2a0e:1c80:a::/48 maxlen: 48
2a0e:1c80:e::/48 maxlen: 48
2a0e:1c80:11::/48 maxlen: 48
2a0e:1c80:12::/48 maxlen: 48
2a0e:1c80:14::/48 maxlen: 48
2a0e:1c80:15::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:eb:4c:18:81:56:be:4b:59:ae:31:b5:61:7d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Jan 1 05:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c541a6de4a5388c025ce09289e3aae7ee6259909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:f3:c2:32:89:d3:29:20:97:92:b6:85:33:
f0:83:f3:bb:3a:b0:0a:3c:c8:f0:6f:dc:f9:2f:1d:
95:f8:08:66:18:3b:26:76:95:d1:d3:b7:04:1c:f6:
08:37:49:1e:64:97:1a:07:2a:2e:45:4b:e8:38:fc:
20:59:8b:df:10:a4:c3:d7:90:3d:cd:84:c5:d9:96:
81:5a:a5:b0:7a:37:ea:44:68:91:f4:8d:3a:f9:e2:
04:da:9d:9c:7d:5e:86:e5:28:1e:da:2f:62:42:02:
ee:b2:e9:de:b0:78:a1:62:ce:b6:81:a6:81:b7:32:
ea:10:39:66:b9:9a:6c:5f:3d:80:8a:5e:f2:a9:6e:
fa:71:d0:4b:e0:7f:e3:c3:df:3e:c0:07:64:7e:94:
0e:62:35:09:c4:0d:b1:fb:b3:75:f8:dd:a2:68:4a:
7a:eb:6d:23:b3:bc:31:45:53:83:b7:dc:a4:01:82:
71:e9:6c:3c:7d:72:b7:2e:92:c8:8c:61:71:e3:bc:
ac:f0:37:16:7a:89:54:1d:a3:53:5e:ce:64:e1:20:
5e:68:ee:74:7d:d9:fd:88:b8:96:b8:41:9c:9f:67:
62:64:a4:0d:b2:12:f8:9f:89:28:88:17:ee:46:ad:
85:83:1f:fe:35:e1:27:2b:c7:44:02:1d:8d:1f:91:
d7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:41:A6:DE:4A:53:88:C0:25:CE:09:28:9E:3A:AE:7E:E6:25:99:09
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/xUGm3kpTiMAlzgkonjqufuYlmQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.18.0/24
IPv6:
2a0e:1c80:a::/48
2a0e:1c80:e::/48
2a0e:1c80:11::-2a0e:1c80:12:ffff:ffff:ffff:ffff:ffff
2a0e:1c80:14::/47
Signature Algorithm: sha256WithRSAEncryption
9b:35:96:df:e0:8e:3e:84:53:bd:ce:15:be:b3:91:9f:6b:e0:
26:08:3d:92:03:8d:9f:3a:67:4c:1d:81:f3:8b:21:88:b6:75:
97:32:30:96:dd:76:91:1e:ca:28:e7:e0:85:df:b3:85:60:ba:
3e:41:4d:36:dc:38:77:e0:aa:ad:f4:91:c3:65:10:eb:bd:85:
5d:47:f6:0e:8f:e8:5f:2b:40:f6:3e:60:cc:0b:ce:a4:c6:f8:
29:ac:e8:1c:31:39:69:8c:18:86:1a:d6:f2:24:fd:18:83:89:
40:c2:92:77:6f:f2:38:a3:b4:3f:7f:8e:9f:df:b4:0b:ad:84:
fb:84:91:dd:4e:91:d5:fb:cd:53:e1:66:c8:da:1d:3c:48:29:
fb:31:86:23:fe:69:c9:2e:54:fb:bf:6f:a3:74:b2:02:cb:a3:
3c:ac:40:83:c3:e1:f0:c3:7c:52:33:30:1b:39:e4:db:e7:eb:
c3:05:39:f3:ba:4d:ed:4e:94:0d:88:48:6d:08:d4:48:46:8b:
f5:16:83:53:d3:c7:de:f0:9d:a1:9d:7d:99:b8:df:26:ae:9b:
4b:e6:f7:69:da:6f:ca:34:f0:f5:eb:67:43:e3:bb:3a:11:be:
c8:91:c2:43:b7:aa:ca:7a:80:40:d7:0c:0d:2d:21:4f:dd:c0:
78:d7:50:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:13 2025 by rpki-client