Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/KzwcVkjlhX69dxrlv7olJX_RAbA.roa
File: KzwcVkjlhX69dxrlv7olJX_RAbA.roa (raw, json)
Hash identifier: gUbTMm4H6DbKNm6pfA7dxWIwH1KdmDQVZCuZ7KpmJUQ=
Subject key identifier: 2B:3C:1C:56:48:E5:85:7E:BD:77:1A:E5:BF:BA:25:25:7F:D1:01:B0
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B3A111C6C7AF4E00FFFFCAEDE43E5E
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/KzwcVkjlhX69dxrlv7olJX_RAbA.roa
Signing time: Thu 02 Jan 2025 01:48:59 +0000
ROA not before: Thu 02 Jan 2025 01:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141718
IP address blocks: 45.155.90.0/24 maxlen: 24
45.155.226.0/24 maxlen: 24
45.156.223.0/24 maxlen: 24
103.211.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a1:11:c6:c7:af:4e:00:ff:ff:ca:ed:e4:3e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b3c1c5648e5857ebd771ae5bfba25257fd101b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cf:2a:6a:4d:8a:e9:54:1c:a7:09:0c:f0:b0:
29:12:80:36:8f:d1:56:f3:41:48:22:03:9e:03:2e:
12:96:49:52:0d:ac:39:08:af:52:49:60:62:dd:ae:
32:56:5f:16:0c:11:50:f8:2d:4d:63:8d:b3:9a:b0:
83:26:51:21:cc:fd:8a:43:3f:6d:61:38:67:c1:ab:
37:63:9a:c5:8b:f1:06:f1:b3:b1:c3:f6:62:ba:a1:
d6:96:8a:2e:a7:4d:4d:25:2d:a6:06:49:a2:5c:7c:
9b:31:63:7d:e0:ad:9f:62:ae:75:40:63:f3:66:dd:
f9:57:ae:3e:25:25:46:0d:91:f1:85:1b:71:8f:5a:
87:94:c2:78:88:ea:e6:9f:39:0d:00:fc:0a:45:fe:
06:16:fa:cb:eb:dd:21:38:6c:78:ad:73:42:6b:d5:
16:53:04:46:53:f7:6e:e9:30:2a:90:ee:90:58:ca:
07:fc:50:5d:58:ab:0f:3b:d6:5c:af:0c:8f:64:0f:
cb:26:b1:5e:bf:ad:c0:f9:9f:fd:08:71:be:60:73:
5f:85:60:9d:71:a6:02:07:42:01:10:09:fd:d9:ed:
d8:94:c7:2b:d0:04:3d:60:f8:34:47:1b:dd:43:cb:
1b:e1:1f:4f:de:c5:d8:4b:9b:66:36:7f:a1:90:dd:
23:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3C:1C:56:48:E5:85:7E:BD:77:1A:E5:BF:BA:25:25:7F:D1:01:B0
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/KzwcVkjlhX69dxrlv7olJX_RAbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.90.0/24
45.155.226.0/24
45.156.223.0/24
103.211.103.0/24
Signature Algorithm: sha256WithRSAEncryption
23:17:71:fe:7e:38:ce:4a:19:39:2d:98:6f:e6:ff:b7:5e:7a:
ff:ef:ac:6f:5f:3b:9c:41:55:58:80:64:b5:5f:07:e2:fc:00:
de:98:17:2a:c4:17:7a:61:86:0c:dc:2d:85:93:a0:9a:65:d0:
ef:f5:b9:7c:94:b8:00:08:c0:5f:ad:fd:08:8b:01:e4:22:19:
c4:af:e0:7c:c5:7d:0e:7c:6d:7c:79:0f:c0:f6:2a:1a:3f:9a:
70:bb:ba:e8:e4:4a:15:6e:07:8a:e3:19:8b:e3:c3:fc:29:b0:
48:59:bf:44:93:60:8c:7f:64:72:00:c4:14:f2:cc:70:bd:64:
ed:81:96:ff:75:2e:f8:ff:99:46:8b:29:5f:ca:4d:e9:a6:6e:
13:40:1a:80:64:9e:8d:e4:11:64:06:22:3f:9a:41:46:9a:7b:
76:90:17:fd:96:c3:ec:04:07:46:e5:4b:ac:b0:c4:eb:40:72:
ac:11:54:0a:59:fb:48:7f:ba:8e:a3:2d:da:c8:fc:5a:5f:19:
67:a4:4b:c8:33:d8:34:80:37:e6:cf:b8:46:e8:4f:93:19:10:
3e:6e:90:07:ac:f6:79:c8:98:de:e8:c8:27:3c:17:4a:bb:64:
ee:0e:9a:0c:83:36:43:06:9a:94:da:98:a2:e4:31:eb:50:9a:
bb:de:06:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:48:45 2025 by rpki-client on console.sobornost.net