Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/Xw6d5Q0Ua1XRZl5MjugABbqCL-g.roa
File: Xw6d5Q0Ua1XRZl5MjugABbqCL-g.roa (raw, json)
Hash identifier: 7lcJjOAWe6HvAJ8ku7/K4ZXcDrrbdwoOF4w1DXALzIA=
Subject key identifier: 5F:0E:9D:E5:0D:14:6B:55:D1:66:5E:4C:8E:E8:00:05:BA:82:2F:E8
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 019425221F475C7C2E1B8357973B01892A1B
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/Xw6d5Q0Ua1XRZl5MjugABbqCL-g.roa
Signing time: Thu 02 Jan 2025 03:49:40 +0000
ROA not before: Thu 02 Jan 2025 03:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400536
IP address blocks: 45.129.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1f:47:5c:7c:2e:1b:83:57:97:3b:01:89:2a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Jan 2 03:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f0e9de50d146b55d1665e4c8ee80005ba822fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:76:11:8a:86:4f:64:44:d6:fc:35:72:41:67:
3f:03:d4:bd:40:f3:dd:37:52:2a:af:ee:ec:96:26:
d4:d2:0b:7a:c5:bf:8b:15:ab:44:07:f4:1d:c5:d1:
bd:a4:a5:3c:9a:54:5d:9f:1a:fd:55:4d:0f:09:c0:
c5:fa:c1:70:62:20:45:fc:d3:26:a1:12:8b:f0:71:
61:ea:4b:cd:45:ab:73:b8:d3:32:52:3b:54:ba:e4:
29:0e:f0:e9:42:b0:d0:f6:44:14:d4:df:33:f2:d2:
e3:c4:f0:9d:d4:df:73:91:9f:42:3c:36:e0:2b:f9:
a8:0f:24:c9:f5:05:23:3f:27:f5:cd:9e:ed:a2:d2:
c5:84:66:bf:cb:64:d9:a0:9c:d5:4c:37:c6:05:7b:
33:0b:b2:72:02:ac:a6:d0:66:1f:ad:3b:37:c3:7f:
e2:b7:77:76:37:f4:2c:66:59:82:b1:5c:1c:cd:4e:
58:5a:2b:77:85:9c:a6:91:e0:1e:60:d6:38:94:cd:
1b:16:26:62:07:cb:14:46:df:ae:84:b8:11:52:c0:
aa:48:e8:29:50:d8:cf:5d:fd:b6:7c:8e:80:2d:75:
b9:94:7f:0c:95:c8:04:cf:78:a4:24:ea:7f:c3:dd:
d1:cd:82:b2:85:82:ee:84:53:26:c4:17:89:69:ea:
a5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0E:9D:E5:0D:14:6B:55:D1:66:5E:4C:8E:E8:00:05:BA:82:2F:E8
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/Xw6d5Q0Ua1XRZl5MjugABbqCL-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.92.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:a7:a5:22:24:1d:dd:73:c4:54:46:6d:be:79:10:54:a1:a6:
6f:ad:64:5f:bd:79:19:53:c8:5c:7a:fc:4b:f8:9e:e3:62:bb:
92:11:2e:37:73:bb:bc:8e:0d:63:84:b3:37:f5:a2:cf:15:80:
2c:c1:e0:0a:43:52:9f:59:09:4d:fc:36:98:59:b0:36:39:4f:
91:1e:49:3f:82:43:f4:e7:b3:60:d2:ea:b4:63:7c:cc:43:52:
8d:09:63:2e:ba:f6:d4:bb:4c:61:78:0f:4e:d6:49:47:a0:33:
1e:4e:13:0c:2e:c7:13:66:dc:92:96:2d:64:a7:c8:ba:e6:2b:
9e:a6:61:d0:81:49:b8:fa:69:cd:32:62:1e:b7:0d:8e:50:b4:
73:13:66:4c:72:b0:7a:ec:3b:54:b4:8c:9e:c9:2a:31:2a:9a:
56:da:e9:9c:e1:e2:61:64:3b:b1:16:8c:bc:1c:e5:fc:b4:5f:
67:5f:38:d9:c5:bd:6d:9d:33:83:55:c5:0d:da:c2:db:2e:39:
39:a8:aa:f6:72:e5:86:1e:78:f2:67:f6:83:e3:ec:13:84:b1:
f9:fb:a4:ed:fd:5e:4f:cc:92:17:1c:c1:97:b5:4e:a8:e1:bd:
45:4d:6b:5e:b3:cd:8e:f8:58:6a:6c:6a:f2:a0:b3:91:28:18:
a8:9b:f8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:01 2025 by rpki-client