Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/U2jaSGARN2UKwQjPS2Vcw_MlbwE.roa
File: U2jaSGARN2UKwQjPS2Vcw_MlbwE.roa (raw, json)
Hash identifier: JE5KyC9SzabTWCO0T/ULT9ldj2uZdDDofUqdW2OMFl4=
Subject key identifier: 53:68:DA:48:60:11:37:65:0A:C1:08:CF:4B:65:5C:C3:F3:25:6F:01
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 019588DDC41D72D191508787D1D1794861EE
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/U2jaSGARN2UKwQjPS2Vcw_MlbwE.roa
Signing time: Wed 12 Mar 2025 05:39:49 +0000
ROA not before: Wed 12 Mar 2025 05:39:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54852
IP address blocks: 45.149.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:88:dd:c4:1d:72:d1:91:50:87:87:d1:d1:79:48:61:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Mar 12 05:39:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5368da48601137650ac108cf4b655cc3f3256f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:23:c7:58:de:04:42:80:cf:ac:31:1c:1e:
68:89:e6:8c:8b:a7:ef:57:3b:6a:0a:32:aa:b4:08:
c1:79:23:7f:85:69:b5:67:3e:a4:61:14:a4:38:89:
9c:dd:e0:1d:ad:3f:ae:22:79:9c:70:b7:38:27:5d:
c8:8f:e8:66:a1:f2:4e:d7:c5:eb:a4:87:ee:af:c6:
80:10:87:f1:18:a6:ad:47:06:1a:c4:0a:02:91:a3:
61:a1:ec:f8:8f:76:c5:98:18:0f:d3:71:ac:c9:17:
ba:58:93:80:19:62:29:30:20:d0:ed:eb:32:27:9f:
07:23:c9:12:a5:57:fe:92:23:d1:a8:9f:96:bb:d3:
f7:3f:4a:db:56:06:76:e3:31:33:72:67:90:16:59:
b3:6e:53:93:b9:fe:2a:c5:83:3c:f2:fc:73:58:7b:
30:51:30:9e:cc:92:ab:74:a6:01:6b:d2:e2:b4:4f:
40:99:a2:82:d8:ca:ac:6d:64:e9:dc:97:25:71:92:
e5:25:93:b7:25:12:fb:aa:e1:09:8c:9c:07:eb:0d:
aa:5f:e2:82:9d:be:8b:27:8a:6c:06:eb:d8:61:8b:
53:64:83:91:9b:3f:2c:6a:0a:26:12:45:7f:d1:48:
c0:98:8c:6c:ed:1d:0e:18:e1:dd:a7:69:71:53:69:
c0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:68:DA:48:60:11:37:65:0A:C1:08:CF:4B:65:5C:C3:F3:25:6F:01
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/U2jaSGARN2UKwQjPS2Vcw_MlbwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.62.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:0a:20:5c:6f:7f:ee:b1:f4:f6:b3:36:a0:53:75:7c:d8:dd:
f1:51:57:da:2e:d0:3b:82:2b:28:62:3b:65:45:4b:58:08:3e:
72:27:e2:08:0e:36:cd:28:15:6c:38:96:32:43:79:6a:27:66:
64:33:36:60:fd:47:e1:a2:ed:93:87:fe:0e:88:10:c7:b3:25:
19:b6:30:93:78:d1:09:11:09:b5:03:ee:84:58:cc:01:3b:bf:
ca:3b:f4:c9:48:cd:60:04:d0:25:f1:c5:2e:a9:c1:4e:9e:6e:
26:78:f2:ce:ad:fb:35:68:59:b1:f4:05:ad:ef:49:15:19:9a:
5d:f8:5e:2c:3c:2c:17:35:3f:50:0c:f1:81:60:b3:63:7d:00:
f9:56:07:16:d3:8e:f8:25:d8:ff:83:56:e0:06:32:b2:c3:e3:
00:fa:c7:ab:1d:d2:81:00:79:8d:2b:90:30:f5:5b:8d:b6:c9:
df:a1:30:f5:c6:20:2a:f4:41:89:0f:10:77:4d:2d:b6:ae:f9:
2d:49:c9:63:02:65:8d:3b:43:19:de:e2:04:c2:73:90:e4:20:
38:ce:3f:d4:fa:ef:3f:f8:1e:4f:c6:b4:d5:70:fe:dd:b3:15:
94:1c:10:3e:e0:29:34:2d:ba:e2:ea:34:82:42:7b:90:84:1b:
f6:36:7e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:30:33 2025 by rpki-client