Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/aUEo_6I1NIoEpJrfmKA_-34y2x4.roa
File: aUEo_6I1NIoEpJrfmKA_-34y2x4.roa (raw, json)
Hash identifier: qf/pPhy348tojuz4A7OR24KHAsQ8d6peWd65flxSoJ4=
Subject key identifier: 69:41:28:FF:A2:35:34:8A:04:A4:9A:DF:98:A0:3F:FB:7E:32:DB:1E
Certificate issuer: /CN=8b9f258283517df19859388e13bad1ae0268a5fb
Certificate serial: 01941FFA28D57E21A944C69711809CFDDB3E
Authority key identifier: 8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/aUEo_6I1NIoEpJrfmKA_-34y2x4.roa
Signing time: Wed 01 Jan 2025 03:47:55 +0000
ROA not before: Wed 01 Jan 2025 03:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48181
IP address blocks: 2.56.52.0/22 maxlen: 24
45.154.76.0/22 maxlen: 22
151.237.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:28:d5:7e:21:a9:44:c6:97:11:80:9c:fd:db:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9f258283517df19859388e13bad1ae0268a5fb
Validity
Not Before: Jan 1 03:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=694128ffa235348a04a49adf98a03ffb7e32db1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:e9:66:5f:43:1f:45:05:19:5f:4b:73:24:
57:a0:13:d1:90:8f:d0:42:c6:de:48:7a:44:90:a7:
04:58:ba:20:7a:20:6f:c6:98:d3:5f:2b:6c:27:cb:
56:af:5b:a9:29:29:fc:87:5b:59:f7:fd:b8:49:c0:
62:49:31:e0:40:52:62:f2:97:8e:34:21:4d:83:14:
ac:3e:44:78:79:d5:c8:e4:af:68:f6:0e:f4:f5:41:
54:0c:09:12:0d:ca:5b:d1:4d:da:e9:84:34:42:95:
ec:e1:75:e1:48:f5:4f:e9:7a:d8:23:06:30:ba:fa:
26:b7:5c:c9:d4:e5:e6:23:db:7b:cc:3b:a1:9e:1f:
30:5f:e9:b7:33:44:62:69:42:85:23:5b:3b:0f:33:
92:e3:aa:32:43:f5:75:04:ff:ee:e1:15:da:75:ff:
98:54:55:3e:a2:f9:65:c2:97:84:74:56:80:cb:30:
5b:a2:ae:8d:19:43:32:c8:51:a5:16:b2:28:56:fe:
7d:6e:aa:24:66:e8:f7:9a:91:7e:bf:f7:d9:d0:3e:
65:58:d5:7a:22:4e:7a:5a:aa:fd:d7:eb:a1:64:00:
01:32:d5:c2:d9:4b:2e:03:29:90:23:9c:a8:7f:8e:
1b:c3:57:6b:08:cd:d0:a6:10:4f:9b:2b:d5:67:45:
2e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:41:28:FF:A2:35:34:8A:04:A4:9A:DF:98:A0:3F:FB:7E:32:DB:1E
X509v3 Authority Key Identifier:
keyid:8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/aUEo_6I1NIoEpJrfmKA_-34y2x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.52.0/22
45.154.76.0/22
151.237.48.0/21
Signature Algorithm: sha256WithRSAEncryption
13:e3:a5:1a:99:51:fe:f5:63:4b:a4:5a:19:de:81:14:f2:b9:
89:2c:e9:de:76:18:35:c8:b0:58:3d:0c:31:67:1c:61:cb:cf:
ee:2d:ee:de:0c:c3:56:9e:93:fa:79:34:36:74:0d:1c:f1:4f:
b6:91:1c:de:1a:0d:a5:39:bb:e4:d1:d7:80:3e:e0:28:bc:1c:
0d:ac:7e:26:1d:17:4b:b6:46:f0:38:ba:40:57:b0:4b:02:f7:
b1:0d:f4:3f:bc:fd:af:e7:10:2f:a0:25:46:9b:82:06:63:49:
63:e8:66:69:d8:35:5b:1a:a6:a3:f7:8c:5b:28:54:25:47:f4:
9a:4b:2d:43:03:78:45:a4:17:86:29:f8:ab:43:9c:b6:54:bf:
de:9e:f0:14:18:53:45:24:62:f1:c6:40:b2:d4:3e:0d:7f:bd:
4a:a7:47:44:bf:6c:17:37:ed:63:9f:b6:c4:b4:db:11:10:d8:
03:b9:44:c2:8f:4e:4b:15:df:87:ac:f6:7f:33:0a:32:cc:f0:
ad:25:0d:4b:d2:75:67:4d:9c:f6:2a:ad:14:e8:92:9c:57:b5:
87:e0:db:69:84:4e:24:0e:56:da:72:a0:f6:f6:a0:64:b9:17:
df:c8:63:85:6f:0a:e6:96:b4:c3:cc:5c:5b:1f:43:01:41:02:
f7:4a:35:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:18:13 2025 by rpki-client