Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/SkHxUs-FrIQyM07xjoxzMJo0A-0.roa
File: SkHxUs-FrIQyM07xjoxzMJo0A-0.roa (raw, json)
Hash identifier: pe66sdl4nqsnLQs5V6pFP+Jxy3p0QpIUCzbid73OCcA=
Subject key identifier: 4A:41:F1:52:CF:85:AC:84:32:33:4E:F1:8E:8C:73:30:9A:34:03:ED
Certificate issuer: /CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Certificate serial: 019424B30D5553B2FB265DBBF33CDA6836CA
Authority key identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/SkHxUs-FrIQyM07xjoxzMJo0A-0.roa
Signing time: Thu 02 Jan 2025 01:48:21 +0000
ROA not before: Thu 02 Jan 2025 01:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61049
IP address blocks: 45.13.152.0/24 maxlen: 24
45.13.153.0/24 maxlen: 24
45.13.154.0/24 maxlen: 24
45.13.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:0d:55:53:b2:fb:26:5d:bb:f3:3c:da:68:36:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Validity
Not Before: Jan 2 01:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a41f152cf85ac8432334ef18e8c73309a3403ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:80:ef:75:71:67:fd:18:1f:ff:ce:10:40:36:
67:56:5a:06:85:5f:50:1f:ed:7c:1d:32:3c:b4:85:
31:a2:43:32:a2:8b:21:89:82:3c:df:2e:c4:9d:6c:
24:97:44:51:3d:9c:e9:dc:ad:04:ef:34:8e:4e:f6:
94:95:d1:4f:16:1e:0b:f1:fd:81:70:9b:86:c2:e7:
55:c4:73:eb:b5:a6:03:2b:d3:0f:9c:00:11:1e:8a:
a3:21:dd:5c:16:70:4e:bd:d5:30:9a:35:d6:d6:d3:
3c:2e:6e:c1:d6:3a:31:d6:d1:ea:20:26:c8:e0:a6:
97:0c:ce:6a:12:46:d8:a1:76:c6:8c:2c:e5:ba:77:
72:cc:fd:47:40:ef:c7:3b:77:95:c3:66:d3:42:31:
fc:71:0d:c9:3c:23:8b:37:39:f4:1a:6f:c6:4a:db:
2e:3a:1f:44:7b:c6:88:f2:cc:bc:dd:d9:3b:a2:11:
9b:9f:b8:9b:da:ce:e2:21:00:12:74:34:13:30:ba:
60:cf:55:a4:75:6d:c5:6a:a0:39:a2:25:c1:ca:2d:
8e:9a:eb:c4:cb:c0:93:08:37:77:d0:7e:42:6a:34:
74:a3:25:b7:d5:21:c7:2b:5d:9d:bf:5a:6f:f4:6d:
f3:e7:f3:91:ed:12:63:c4:27:0b:f0:da:72:e3:c1:
9d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:41:F1:52:CF:85:AC:84:32:33:4E:F1:8E:8C:73:30:9A:34:03:ED
X509v3 Authority Key Identifier:
keyid:82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/SkHxUs-FrIQyM07xjoxzMJo0A-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.152.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:b4:14:fc:9d:10:e3:a2:6a:17:de:d0:34:66:f2:74:e0:6e:
19:2c:c1:76:c7:63:7f:96:8d:93:6f:de:21:19:11:2c:31:29:
d8:b8:64:35:26:74:b2:dd:3e:88:9b:9e:e1:26:1d:32:9c:9c:
5e:54:5c:5d:6a:77:62:e4:4f:c3:77:61:7c:c4:4b:ad:64:b1:
34:15:b0:08:0a:48:ac:c2:05:ac:e6:da:b9:8f:c1:df:9c:b3:
c0:da:41:7a:14:25:d9:ea:6e:1b:85:92:70:9e:d8:6e:60:9a:
16:e1:98:23:50:4b:bf:54:3d:0a:b4:22:ed:45:07:29:2d:c2:
e6:bc:66:86:c0:f4:d4:7b:70:1a:fa:8c:99:88:7f:7e:7e:44:
ba:c1:f7:8c:57:2b:57:c4:4b:e7:c2:51:84:50:64:6b:a5:57:
10:0c:dd:9d:be:d4:ca:c4:76:0c:e4:6b:4f:ad:2b:63:05:6b:
ed:ce:c9:9a:d8:6f:68:cb:7e:e9:ee:b8:e3:5a:19:5f:ad:4e:
19:63:c0:15:f4:57:bf:86:f4:06:f5:dd:df:b5:52:48:08:28:
35:62:cf:be:ac:e4:9b:10:ac:af:6d:5c:81:f9:15:3f:1a:4d:
53:c6:e0:b0:6d:93:fa:ec:87:7a:14:00:c1:c1:cc:b9:9c:af:
b7:e1:de:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:32:02 2025 by rpki-client