Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/6y4imLI7mrPUCyC4ohAhkXPWZIs.roa
File: 6y4imLI7mrPUCyC4ohAhkXPWZIs.roa (raw, json)
Hash identifier: 3goWR3fPUqFMR5Z8Kw7Vpz2bSo/rQ358QT4CHplZTiw=
Subject key identifier: EB:2E:22:98:B2:3B:9A:B3:D4:0B:20:B8:A2:10:21:91:73:D6:64:8B
Certificate issuer: /CN=51a0d9825103d9da4761efa91a60ea2ca758d003
Certificate serial: 0194221FE87172CC73B9BE9C3B288AF45DA1
Authority key identifier: 51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/6y4imLI7mrPUCyC4ohAhkXPWZIs.roa
Signing time: Wed 01 Jan 2025 13:48:23 +0000
ROA not before: Wed 01 Jan 2025 13:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.156.96.0/24 maxlen: 24
45.156.97.0/24 maxlen: 24
45.156.98.0/24 maxlen: 24
45.156.99.0/24 maxlen: 24
2a0f:1c80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e8:71:72:cc:73:b9:be:9c:3b:28:8a:f4:5d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a0d9825103d9da4761efa91a60ea2ca758d003
Validity
Not Before: Jan 1 13:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb2e2298b23b9ab3d40b20b8a210219173d6648b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:a9:c9:b5:0b:79:5e:af:75:3f:80:91:76:
af:3f:ae:6d:1d:8f:ad:0a:5b:33:fd:5a:cb:18:8b:
9e:a5:98:f7:86:8a:07:9c:2b:84:1f:2f:8a:45:25:
2b:7c:7f:2f:b4:1d:1a:ab:1f:56:a9:e6:88:e1:e8:
98:05:96:03:db:5f:c1:07:c3:69:5d:74:34:58:9c:
26:1e:45:c3:d4:80:26:b2:7d:30:d6:1e:b8:21:b3:
61:40:1a:7b:c7:73:11:ca:61:a1:b4:df:d8:c8:e3:
2f:b1:9e:cf:fc:ab:57:d2:0c:22:2e:02:a0:76:7d:
c7:af:44:14:e5:b7:44:6e:0e:08:fc:03:0d:83:c7:
00:2b:af:35:40:b6:5a:ee:1a:1f:79:20:31:27:26:
b1:6d:8d:af:88:58:a8:03:5b:01:0b:34:13:33:06:
92:57:00:c4:0a:45:e0:98:a7:bc:5b:ef:f1:e0:82:
3f:10:1e:c0:c0:43:e4:f2:08:65:d3:62:f0:c4:5e:
a9:f6:bd:af:72:48:93:2f:1d:d0:59:20:8f:b2:9a:
b1:45:8e:4d:15:25:12:ce:23:7d:05:36:9e:1e:de:
79:a4:fd:73:04:71:ae:ab:07:38:66:7d:8b:ef:f4:
93:86:e6:8a:4c:9a:13:46:b8:d2:4e:ec:d9:0f:25:
d2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2E:22:98:B2:3B:9A:B3:D4:0B:20:B8:A2:10:21:91:73:D6:64:8B
X509v3 Authority Key Identifier:
keyid:51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/6y4imLI7mrPUCyC4ohAhkXPWZIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.96.0/22
IPv6:
2a0f:1c80::/29
Signature Algorithm: sha256WithRSAEncryption
61:e7:92:10:b6:41:a5:72:2d:97:a4:9a:c3:a4:b5:0a:59:5c:
98:1a:a7:41:c9:f3:5d:7f:a6:a0:be:67:54:ff:d2:e5:61:f0:
5e:2d:07:c3:12:bc:33:2c:18:2e:8a:61:68:04:47:2f:22:60:
2e:5c:1d:f7:eb:1b:af:ee:d5:5b:99:47:26:a7:13:05:14:a0:
38:ac:38:46:f8:a7:32:4a:24:ca:44:e9:71:3a:86:73:0f:0d:
17:c0:ae:2d:ca:0b:f6:dd:07:3c:11:8e:bd:84:90:26:52:63:
a2:be:85:1a:7f:ff:99:a5:9e:5d:e2:65:9e:96:ab:b8:e7:05:
30:2b:f6:4d:ab:b4:32:c6:e0:1e:ee:42:81:5f:84:51:8e:d2:
7c:53:b6:fd:42:28:0b:a1:4f:b3:c5:e1:a5:de:33:b7:6c:f5:
a3:75:b5:60:4d:89:02:5a:e4:6d:a4:b8:24:f4:d4:05:51:c0:
c9:11:53:7c:6e:e1:b7:6d:2d:09:1e:f4:7e:33:de:37:3a:03:
c2:b6:36:e9:68:1e:f2:d9:61:85:75:96:e4:a7:83:70:56:4c:
55:4f:8f:fd:b7:52:1b:e3:f2:04:4e:2b:79:79:77:42:d4:2e:
95:16:c2:31:ed:8a:96:52:5b:50:9c:55:c9:fc:d2:eb:f4:8a:
ca:8c:a5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:31:24 2025 by rpki-client