Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/2L9tST2xxsB46ZV-Wm7-7d0Z8Yc.roa
File: 2L9tST2xxsB46ZV-Wm7-7d0Z8Yc.roa (raw, json)
Hash identifier: 2H+U81Sea1KvCbnxcSszHg71YCfhD1GEm2cdKStIW6w=
Subject key identifier: D8:BF:6D:49:3D:B1:C6:C0:78:E9:95:7E:5A:6E:FE:ED:DD:19:F1:87
Certificate issuer: /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Certificate serial: 0194214419C317AA4192373DB02D8D19099F
Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/2L9tST2xxsB46ZV-Wm7-7d0Z8Yc.roa
Signing time: Wed 01 Jan 2025 09:48:18 +0000
ROA not before: Wed 01 Jan 2025 09:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50302
IP address blocks: 45.133.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:19:c3:17:aa:41:92:37:3d:b0:2d:8d:19:09:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Validity
Not Before: Jan 1 09:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8bf6d493db1c6c078e9957e5a6efeeddd19f187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:d4:49:af:6b:d2:2c:04:e0:8e:94:13:65:
7f:d4:4d:de:71:7b:88:d9:e1:c3:90:85:19:f6:48:
7f:0c:e1:c0:c9:4f:9b:f8:11:3c:2f:87:1c:da:d3:
1a:04:ce:0f:db:88:f3:95:0a:cf:21:2f:1a:a0:03:
9f:c1:db:c5:d8:14:61:9a:9c:b0:d4:c5:27:f5:52:
0c:fc:d1:13:67:00:ad:56:b7:c0:37:e5:fc:09:cc:
65:d0:be:cc:7a:c9:60:0b:ff:e4:d9:c6:16:0f:f5:
65:98:c4:75:f7:4c:14:42:d8:06:c4:47:69:64:1f:
74:4e:c5:33:51:d6:fb:85:a7:a9:f2:a7:12:7c:82:
91:4e:cb:31:22:66:e6:66:06:c2:d8:f5:52:4f:b3:
1d:f6:07:f2:c7:d7:a1:de:43:2d:f0:6f:59:eb:67:
2b:dd:80:c1:a9:2f:e6:98:a4:f8:58:ba:b7:d4:cf:
f0:3c:7c:d3:85:5b:ae:6e:e1:d0:90:ec:c3:72:33:
bc:34:37:b9:0b:be:5e:c5:89:57:af:7a:7b:cc:14:
84:92:d7:47:c5:e4:b8:a1:2c:dc:21:a8:6b:3d:ab:
7d:5a:58:b8:88:2c:7d:4d:c4:a5:c1:38:1b:cb:f9:
1d:a4:22:20:46:9d:56:f0:53:78:d0:3f:d8:aa:63:
e8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BF:6D:49:3D:B1:C6:C0:78:E9:95:7E:5A:6E:FE:ED:DD:19:F1:87
X509v3 Authority Key Identifier:
keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/2L9tST2xxsB46ZV-Wm7-7d0Z8Yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.92.0/22
Signature Algorithm: sha256WithRSAEncryption
83:2b:c7:dc:1a:9f:9d:c0:8d:9a:31:66:f5:f6:9a:3b:f1:52:
b4:b8:eb:c4:3a:58:1b:2a:fc:c0:63:91:b4:ff:de:96:43:7d:
49:aa:74:1e:f0:30:8e:b4:19:2f:f4:3d:0f:aa:10:fa:7c:13:
fc:9e:78:c7:38:ae:d9:c2:d3:e7:e9:28:7a:1b:56:9c:ba:d4:
2a:49:39:cb:06:a8:e8:7e:38:7b:a4:64:13:6b:f1:b0:ec:73:
4b:27:96:62:3b:06:8e:41:02:39:e8:46:f7:54:11:9c:c1:b3:
2f:c3:bf:8c:5d:4f:e0:17:e6:fd:00:37:bf:40:1a:fb:2a:7b:
8a:55:3a:e7:97:14:8d:32:f5:ed:8d:3a:39:3c:6d:d3:de:5a:
4a:d2:ef:60:72:c5:dc:69:e5:74:2b:5d:90:2a:42:0b:f4:b3:
1f:35:0c:bb:aa:c9:a2:3c:34:86:a8:bf:06:6d:df:ba:19:d8:
cf:ee:5b:cc:83:a4:b8:fa:b7:02:02:31:3e:ef:cf:b3:0f:38:
76:ab:9e:30:78:6d:36:89:e8:16:9e:ca:7d:70:61:74:4f:d9:
f2:1b:b7:65:41:97:f7:33:30:a6:1a:05:3c:f6:f0:19:f6:ac:
6c:ec:8d:9c:fc:25:ab:20:b9:70:ac:f7:91:48:6a:23:03:d2:
40:05:1c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:50 2025 by rpki-client on console.sobornost.net