Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/3pxtcoitrFP84ablFN0e1N99UbU.roa
File: 3pxtcoitrFP84ablFN0e1N99UbU.roa (raw, json)
Hash identifier: 3rHwb/LGbKBgtS++gv9s6PE/pIkC8kqsGTnPOdr75VM=
Subject key identifier: DE:9C:6D:72:88:AD:AC:53:FC:E1:A6:E5:14:DD:1E:D4:DF:7D:51:B5
Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial: 0194D663B6D4D03A7F23E018A70BD392BAB9
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/3pxtcoitrFP84ablFN0e1N99UbU.roa
Signing time: Wed 05 Feb 2025 13:54:06 +0000
ROA not before: Wed 05 Feb 2025 13:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 553
IP address blocks: 45.12.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d6:63:b6:d4:d0:3a:7f:23:e0:18:a7:0b:d3:92:ba:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
Validity
Not Before: Feb 5 13:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de9c6d7288adac53fce1a6e514dd1ed4df7d51b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a0:0f:96:35:bb:a4:7b:6c:22:81:a3:b9:66:
d4:33:3f:d4:18:be:0b:e7:1e:d0:4c:0f:9d:56:60:
c4:26:da:85:9a:3a:4e:b2:56:e3:f4:28:59:49:e3:
5d:52:be:e8:33:74:cd:b1:b2:0d:59:8a:32:55:de:
97:5f:72:3f:29:d5:a2:9b:45:dd:6f:54:11:ab:d7:
1f:a0:8d:6b:d4:50:72:7a:cf:4e:0f:fe:40:7d:83:
58:8a:2a:81:dc:b4:fc:95:aa:50:77:a8:1c:2b:59:
84:6c:a7:5b:c0:f4:dc:f2:ba:4b:54:ec:36:ef:4a:
b8:7a:e6:65:cf:64:17:8c:6a:ec:b0:2f:74:3e:39:
be:76:88:78:3c:56:48:fe:e5:81:26:5b:67:2c:2a:
25:7b:40:f1:e5:70:a0:47:08:10:63:ac:53:7a:25:
0b:50:eb:06:de:bb:ad:38:4c:c0:9d:9b:ba:51:19:
58:37:e3:49:38:23:00:d8:11:9b:e4:b6:5a:cd:f7:
4f:21:87:b1:78:61:c2:f7:98:59:55:74:bd:07:b7:
fb:1e:ab:fd:83:a2:ab:bc:07:b1:29:82:12:c7:f9:
20:cc:98:60:7a:9b:26:88:f8:44:bc:23:7e:bc:b9:
7f:f8:2c:f9:89:a7:ce:81:45:b5:37:23:2f:bc:61:
76:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9C:6D:72:88:AD:AC:53:FC:E1:A6:E5:14:DD:1E:D4:DF:7D:51:B5
X509v3 Authority Key Identifier:
keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/3pxtcoitrFP84ablFN0e1N99UbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.171.0/24
Signature Algorithm: sha256WithRSAEncryption
e5:0b:87:8a:44:10:d8:02:3f:92:f3:e3:0c:ea:31:50:81:5c:
32:24:cb:84:a0:0c:9e:96:91:7c:ec:e6:00:a6:de:8e:15:f3:
b5:e8:e6:94:3c:0e:15:84:b1:4e:86:3a:ac:1e:dd:de:52:57:
74:8c:1b:1f:8a:f6:66:a1:f5:58:3e:8c:3c:6e:7c:61:e9:fc:
35:8f:f8:e2:c0:62:51:40:61:b6:35:c6:55:8f:d6:bf:bc:c8:
8b:fa:77:4a:98:e1:1f:49:73:16:49:87:1c:12:3a:93:51:a5:
ec:c0:fb:3f:b8:97:e6:3b:7c:25:2d:7b:1b:1a:f3:9b:7b:ed:
c9:a8:c4:9f:8a:63:67:98:52:13:ca:0e:6b:f2:9e:d5:6d:e9:
da:09:93:6d:00:86:4a:a9:50:b7:06:20:c2:fa:a8:45:9f:58:
92:87:d0:8b:69:1a:24:bd:b0:e3:2b:bc:ce:ab:18:3a:07:e4:
24:ca:11:7d:7a:b2:63:49:a2:cc:ba:40:fd:ef:df:0c:44:5f:
de:08:82:dd:74:9d:6a:8e:d9:66:2f:42:42:df:86:ae:93:23:
04:bc:58:28:04:5e:0a:13:06:7a:75:f2:d5:7c:2d:f4:c0:77:
5d:a5:11:b7:15:db:cb:10:fa:f0:7e:ab:b4:70:db:a8:65:36:
70:64:35:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTWY7bU0Dp/I+AYpwvTkrq5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YzA3ZGI5ODgwMTMzYzVjZGNlMDA1YmNhMTExYjU1MmNk
MTRjNTMwHhcNMjUwMjA1MTM1NDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTljNmQ3Mjg4YWRhYzUzZmNlMWE2ZTUxNGRkMWVkNGRmN2Q1MWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaAPljW7pHtsIoGjuWbUMz/UGL4L
5x7QTA+dVmDEJtqFmjpOslbj9ChZSeNdUr7oM3TNsbINWYoyVd6XX3I/KdWim0Xd
b1QRq9cfoI1r1FByes9OD/5AfYNYiiqB3LT8lapQd6gcK1mEbKdbwPTc8rpLVOw2
70q4euZlz2QXjGrssC90Pjm+doh4PFZI/uWBJltnLCole0Dx5XCgRwgQY6xTeiUL
UOsG3rutOEzAnZu6URlYN+NJOCMA2BGb5LZazfdPIYexeGHC95hZVXS9B7f7Hqv9
g6KrvAexKYISx/kgzJhgepsmiPhEvCN+vLl/+Cz5iafOgUW1NyMvvGF2BwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN6cbXKIraxT/OGm5RTdHtTffVG1MB8GA1UdIwQY
MBaAFOfAfbmIATPFzc4AW8oRG1Us0UxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMt
MGFhNDYzY2RmY2EwLzEvM3B4dGNvaXRyRlA4NGFibEZOMGUxTjk5VWJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMtMGFhNDYzY2RmY2Ew
LzEvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQyrMA0G
CSqGSIb3DQEBCwUAA4IBAQDlC4eKRBDYAj+S8+MM6jFQgVwyJMuEoAyelpF87OYA
pt6OFfO16OaUPA4VhLFOhjqsHt3eUld0jBsfivZmofVYPow8bnxh6fw1j/jiwGJR
QGG2NcZVj9a/vMiL+ndKmOEfSXMWSYccEjqTUaXswPs/uJfmO3wlLXsbGvObe+3J
qMSfimNnmFITyg5r8p7VbenaCZNtAIZKqVC3BiDC+qhFn1iSh9CLaRokvbDjK7zO
qxg6B+QkyhF9erJjSaLMukD9798MRF/eCILddJ1qjtlmL0JC34aukyMEvFgoBF4K
EwZ6dfLVfC30wHddpRG3FdvLEPrwfqu0cNuoZTZwZDUX
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:21 2025 by rpki-client on console.sobornost.net