Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/eIFvvK-ivxwVefbgEMRWrAvh218.roa
File: eIFvvK-ivxwVefbgEMRWrAvh218.roa (raw, json)
Hash identifier: enbiuy39QSMflYfm+7UJdD/VijdNzRJOnnOULTcOwog=
Subject key identifier: 78:81:6F:BC:AF:A2:BF:1C:15:79:F6:E0:10:C4:56:AC:0B:E1:DB:5F
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 0194266B558F119C5814EAAB97A3D9E50C63
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/eIFvvK-ivxwVefbgEMRWrAvh218.roa
Signing time: Thu 02 Jan 2025 09:49:16 +0000
ROA not before: Thu 02 Jan 2025 09:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49999
IP address blocks: 45.140.192.0/24 maxlen: 24
45.140.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:55:8f:11:9c:58:14:ea:ab:97:a3:d9:e5:0c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Jan 2 09:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78816fbcafa2bf1c1579f6e010c456ac0be1db5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3d:77:47:33:6f:21:6f:92:60:d2:85:6a:0d:
4f:15:bb:a9:3c:0e:7c:fe:b2:9d:81:fa:6e:33:73:
87:79:1f:8c:f4:4d:be:d6:a5:22:dc:8e:af:89:ac:
ea:1f:ae:1c:9a:b4:0b:0a:ea:54:79:7a:15:11:33:
5d:4c:14:25:d9:bd:6d:ec:08:0e:0e:61:7b:37:65:
45:bd:16:c5:80:2a:12:02:c5:98:47:8c:66:2d:dc:
eb:c0:cf:9c:7b:ee:98:0e:8a:58:44:4b:ae:be:7c:
90:dd:46:62:4e:75:6f:7f:bd:50:ac:cd:81:06:46:
9b:a2:02:0e:59:c0:ed:1d:bc:62:d0:eb:dc:f1:ea:
81:40:02:02:54:d0:a7:fa:0f:5a:bc:67:8f:13:9f:
4b:38:8e:23:3f:b4:a1:ea:31:91:5b:16:dc:02:59:
e2:ec:9d:e7:48:31:46:43:09:bf:a1:cc:11:5c:aa:
a3:18:e3:bf:1e:41:5c:5c:a8:96:61:6c:a0:f1:57:
88:33:cd:2c:cd:ec:3d:3b:95:06:dc:58:0a:6f:ea:
96:70:43:d6:f1:bf:95:d0:26:36:f2:6d:0a:86:d3:
5c:52:bc:64:94:95:dc:25:2e:8a:9e:93:16:57:0a:
56:11:8d:19:34:3f:85:52:fb:c3:0a:33:c7:40:b5:
e6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:81:6F:BC:AF:A2:BF:1C:15:79:F6:E0:10:C4:56:AC:0B:E1:DB:5F
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/eIFvvK-ivxwVefbgEMRWrAvh218.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.192.0/23
Signature Algorithm: sha256WithRSAEncryption
38:49:63:68:d4:f3:c7:37:23:bd:30:6c:d1:77:5e:9c:a9:1d:
05:43:7d:ef:cc:22:65:d0:87:37:0c:2d:2d:b8:a8:08:45:69:
eb:e9:ce:7f:cc:5f:12:c1:fc:5e:d1:75:fb:ae:11:ef:bd:f1:
03:65:9f:94:2b:d4:05:a5:8d:51:cd:8e:5b:f0:4a:e5:e5:45:
75:d2:8a:34:11:48:f4:bf:9e:6b:29:57:0e:e3:f5:17:90:d4:
b2:c9:8c:e7:a0:3c:5a:d2:a4:08:d7:5b:e5:c5:27:b0:79:8d:
3d:88:63:f3:23:c8:a5:73:62:73:e8:62:23:38:8f:97:aa:04:
1c:ee:58:1b:7b:b9:37:f2:d1:51:99:54:b7:1e:b9:03:3e:0a:
d5:42:4d:28:c7:cb:6a:eb:a5:a5:21:0a:bb:ec:3f:dd:49:78:
e8:89:73:40:77:b5:32:49:2e:eb:95:ae:40:b6:17:fb:cf:15:
44:bc:29:81:9a:b4:4e:b8:2e:27:91:c5:23:a9:0a:6c:1f:ee:
89:c4:ff:13:20:77:21:45:36:6e:62:2a:75:41:b2:f0:82:72:
80:92:97:ae:ed:6c:6b:49:e7:3f:c6:87:d0:60:f8:d4:2d:35:
1d:93:25:49:dd:b8:36:cc:8b:07:0f:5e:25:49:9a:72:3d:a4:
44:74:c1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:04:31 2025 by rpki-client