Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/PQmLIVoeSOIwIoKz3RvYJrpb2xM.roa
File: PQmLIVoeSOIwIoKz3RvYJrpb2xM.roa (raw, json)
Hash identifier: hlojli+o3fpj5DjUXvEZS5bdJMfuplLhFYrIdheEs5Q=
Subject key identifier: 3D:09:8B:21:5A:1E:48:E2:30:22:82:B3:DD:1B:D8:26:BA:5B:DB:13
Certificate issuer: /CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Certificate serial: 0194266A36D3D282C7FE5E1A3F29A707D974
Authority key identifier: B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/PQmLIVoeSOIwIoKz3RvYJrpb2xM.roa
Signing time: Thu 02 Jan 2025 09:48:02 +0000
ROA not before: Thu 02 Jan 2025 09:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 45.130.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:36:d3:d2:82:c7:fe:5e:1a:3f:29:a7:07:d9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Validity
Not Before: Jan 2 09:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d098b215a1e48e2302282b3dd1bd826ba5bdb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:c0:83:89:53:f3:f4:b8:1b:97:3a:70:88:
7c:a9:fa:cb:34:f7:28:d6:ee:0a:43:35:82:07:ed:
e4:51:f3:2e:6e:ff:f3:a3:94:7a:61:0b:c6:be:18:
62:dc:2a:2a:aa:ab:b9:79:e1:c7:ac:39:cb:71:60:
98:6c:88:15:37:39:ec:c9:59:b8:07:e4:5e:0a:67:
13:fc:30:7a:f3:33:14:e8:25:d8:00:be:db:66:b5:
dc:42:a0:05:fe:1b:47:64:bc:62:a1:ed:78:83:89:
8e:41:42:bf:aa:bf:26:ad:1f:54:f0:fd:06:cd:69:
7a:71:d9:77:5c:38:62:ec:c9:33:ef:be:53:3a:9f:
f4:5c:f9:b3:e1:5a:7e:54:71:83:52:a1:79:a0:c9:
a5:10:b3:ce:a6:3c:ee:06:3c:ef:ba:71:21:d9:a8:
13:28:ff:ab:d4:53:11:8f:f8:dc:3b:81:33:a1:c2:
ba:eb:1a:a8:75:a1:b7:83:d4:50:f2:01:45:2d:78:
8d:b1:5a:80:bf:71:64:24:04:a4:79:a3:a4:a0:0e:
55:95:c1:d3:e5:f3:2e:31:b4:79:d3:d1:9c:ea:e0:
73:fa:78:ff:74:79:9e:24:6d:bf:14:f1:ee:79:c6:
71:3e:6e:3e:69:78:4c:8b:86:1e:0e:b0:d3:70:76:
a1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:09:8B:21:5A:1E:48:E2:30:22:82:B3:DD:1B:D8:26:BA:5B:DB:13
X509v3 Authority Key Identifier:
keyid:B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/PQmLIVoeSOIwIoKz3RvYJrpb2xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.12.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d3:a6:33:2a:89:de:bc:0a:48:37:15:a5:77:8e:ef:33:e6:
35:1b:58:09:09:ba:ad:ad:8c:85:ce:47:9a:80:08:59:7b:37:
25:e3:e4:60:ca:4e:fa:9d:b6:2c:e0:ff:d0:26:2d:da:fc:79:
3c:c4:08:04:6b:66:2e:08:47:2e:73:cb:14:67:cf:7e:60:3c:
0f:e3:ff:61:4e:90:ad:c8:ba:c6:9f:a4:7a:8a:86:d7:8a:24:
03:06:e3:65:70:ea:1e:72:b5:aa:23:55:6f:0e:09:7e:10:94:
c9:34:9e:aa:a5:74:ca:67:09:0e:a9:b0:af:f5:66:bb:84:91:
cb:2c:bc:59:80:04:b0:25:67:20:e7:a0:01:81:ba:ec:7b:b1:
9c:42:ea:8c:5a:9b:22:b7:5a:c9:02:4e:75:e4:8e:ba:b4:2e:
8d:cb:55:68:07:24:60:bc:e9:77:9e:6f:f1:5f:67:33:04:4b:
ca:82:eb:4f:1c:aa:3d:2b:68:5a:d5:d7:07:1b:57:fa:ea:f8:
1c:7c:65:46:9b:72:3f:c0:e2:1d:d2:10:5a:0c:a9:cc:25:c2:
22:a9:dd:6b:51:4a:1b:67:87:f3:f0:e8:f0:c4:b8:b5:bf:8f:
de:bf:0c:66:5d:aa:6b:14:b2:20:73:11:7c:34:3e:ce:2d:41:
cf:ec:c1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:13 2025 by rpki-client