Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/8XphOJkPtZHC_4MC2PQEPr0m2ac.roa
File: 8XphOJkPtZHC_4MC2PQEPr0m2ac.roa (raw, json)
Hash identifier: dXWM6e00IU0bRpxg53QiBkBA19LCXMaHdPOkhO8paFI=
Subject key identifier: F1:7A:61:38:99:0F:B5:91:C2:FF:83:02:D8:F4:04:3E:BD:26:D9:A7
Certificate issuer: /CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Certificate serial: 019424B3B6C81C5FFB8973314DDA79C734BA
Authority key identifier: 7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/8XphOJkPtZHC_4MC2PQEPr0m2ac.roa
Signing time: Thu 02 Jan 2025 01:49:05 +0000
ROA not before: Thu 02 Jan 2025 01:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201299
IP address blocks: 45.155.136.0/22 maxlen: 24
45.155.136.0/24 maxlen: 24
45.155.137.0/24 maxlen: 24
45.155.138.0/24 maxlen: 24
45.155.139.0/24 maxlen: 24
2a0f:c500::/29 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b6:c8:1c:5f:fb:89:73:31:4d:da:79:c7:34:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Validity
Not Before: Jan 2 01:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f17a6138990fb591c2ff8302d8f4043ebd26d9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:01:85:01:ee:c5:30:6a:03:aa:11:52:d9:5e:
a3:99:1b:63:c0:ca:4c:b0:13:aa:15:bd:92:d5:18:
1d:b6:a3:c0:76:1c:87:38:24:71:54:d8:ae:2f:f1:
59:f7:82:ac:e1:ec:34:7c:57:d6:a0:6a:7c:9b:64:
e3:06:23:24:aa:e3:e6:0c:55:67:1b:77:00:29:ac:
c6:c2:4e:02:76:ea:6a:91:64:ac:c0:13:91:1c:02:
a5:21:a6:3e:51:07:9f:0e:27:e5:4d:7f:66:a5:c0:
de:1f:ca:c1:0a:c5:09:95:8e:f4:22:10:40:50:96:
06:73:16:8f:26:15:9f:13:40:89:07:da:60:5d:51:
75:30:38:c7:f4:d2:96:ed:db:a2:47:20:32:66:26:
1f:6a:87:61:df:1c:5a:b9:12:90:0c:ff:28:05:3d:
64:0e:1c:c5:18:df:3f:56:fa:aa:2c:a4:05:51:84:
e3:92:35:1a:60:21:d0:af:b2:29:bb:65:e9:67:62:
f7:ce:34:2e:ca:d5:48:59:40:62:3f:05:34:83:50:
54:e7:65:33:15:62:13:ff:3e:de:d3:96:57:74:1a:
45:65:12:17:d9:2f:a4:b1:ac:77:28:06:e4:22:4b:
27:a9:a8:a1:1c:9f:ca:50:bf:55:f5:9b:62:44:61:
97:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7A:61:38:99:0F:B5:91:C2:FF:83:02:D8:F4:04:3E:BD:26:D9:A7
X509v3 Authority Key Identifier:
keyid:7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/8XphOJkPtZHC_4MC2PQEPr0m2ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.136.0/22
IPv6:
2a0f:c500::/29
Signature Algorithm: sha256WithRSAEncryption
1b:d9:20:3e:48:4b:20:78:a9:10:ad:3e:4a:97:7a:76:65:8f:
16:bc:2d:1e:cf:a4:89:6a:ee:7d:1e:bc:96:f6:fc:73:7e:d2:
32:7b:07:50:f1:ac:a7:c1:a6:6f:38:d7:c3:9f:ae:9b:a1:02:
d4:ef:98:9f:c0:4b:83:fd:f4:22:f7:c7:13:00:f7:06:92:ec:
c5:01:71:03:c1:a0:98:e8:27:dc:bf:2d:f4:6f:05:1e:8f:3b:
aa:1e:5d:cc:0b:f0:61:9e:05:f5:ab:34:2d:29:85:3f:ea:ac:
07:b7:39:ae:84:28:78:1c:dd:17:5a:23:47:82:aa:01:ad:09:
06:7b:58:8d:ee:b7:7b:38:b1:c3:d6:eb:bb:b0:38:ff:a7:cd:
1b:b0:1e:3b:c0:55:8f:b5:9a:0d:7f:19:1e:f7:82:53:d1:d3:
af:ac:fe:2f:ef:01:32:c9:bd:87:17:cf:70:0a:1e:3c:07:c2:
2b:66:7e:a1:80:99:22:ed:e6:40:74:45:89:78:c3:fc:a9:52:
ab:ae:57:a0:0c:70:e2:75:c7:61:76:e0:07:d6:87:59:f7:5b:
59:37:e6:63:08:78:2c:47:47:7d:72:ad:cc:a3:9e:38:da:0b:
75:ac:f9:83:c3:43:ab:b4:1b:eb:f3:33:6b:8d:d8:a9:69:db:
79:2d:bd:9a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQks7bIHF/7iXMxTdp5xzS6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMThmY2FhYzZjODQwOWYyNGQzZmE5MGRmOGUzMDIxOGVl
OWMzZmYwHhcNMjUwMTAyMDE0OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTdhNjEzODk5MGZiNTkxYzJmZjgzMDJkOGY0MDQzZWJkMjZkOWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQGFAe7FMGoDqhFS2V6jmRtjwMpM
sBOqFb2S1RgdtqPAdhyHOCRxVNiuL/FZ94Ks4ew0fFfWoGp8m2TjBiMkquPmDFVn
G3cAKazGwk4CdupqkWSswBORHAKlIaY+UQefDiflTX9mpcDeH8rBCsUJlY70IhBA
UJYGcxaPJhWfE0CJB9pgXVF1MDjH9NKW7duiRyAyZiYfaodh3xxauRKQDP8oBT1k
DhzFGN8/VvqqLKQFUYTjkjUaYCHQr7Ipu2XpZ2L3zjQuytVIWUBiPwU0g1BU52Uz
FWIT/z7e05ZXdBpFZRIX2S+ksax3KAbkIksnqaihHJ/KUL9V9ZtiRGGXaQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPF6YTiZD7WRwv+DAtj0BD69JtmnMB8GA1UdIwQY
MBaAFHoY/KrGyECfJNP6kN+OMCGO6cP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWhqOHFzYklRSjhrMF9xUTM0NHdJWTdwd184LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC81OGE4NmMtYjg4Mi00MmZmLWI3NDMt
YzQxYjhhYTJkZjk1LzEvOFhwaE9Ka1B0WkhDXzRNQzJQUUVQcjBtMmFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC81OGE4NmMtYjg4Mi00MmZmLWI3NDMtYzQxYjhhYTJkZjk1
LzEvZWhqOHFzYklRSjhrMF9xUTM0NHdJWTdwd184LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZuIMA0E
AgACMAcDBQMqD8UAMA0GCSqGSIb3DQEBCwUAA4IBAQAb2SA+SEsgeKkQrT5Kl3p2
ZY8WvC0ez6SJau59HryW9vxzftIyewdQ8aynwaZvONfDn66boQLU75ifwEuD/fQi
98cTAPcGkuzFAXEDwaCY6Cfcvy30bwUejzuqHl3MC/BhngX1qzQtKYU/6qwHtzmu
hCh4HN0XWiNHgqoBrQkGe1iN7rd7OLHD1uu7sDj/p80bsB47wFWPtZoNfxke94JT
0dOvrP4v7wEyyb2HF89wCh48B8IrZn6hgJki7eZAdEWJeMP8qVKrrlegDHDidcdh
duAH1odZ91tZN+ZjCHgsR0d9cq3Mo5442gt1rPmDw0OrtBvr8zNrjdipadt5Lb2a
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:59 2025 by rpki-client on console.sobornost.net