Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6aefaa-86bd-404a-9030-35b100090d4f/1/5XYFAzLrJp48GzvHbUjv01Nsjlk.roa
File: 5XYFAzLrJp48GzvHbUjv01Nsjlk.roa (raw, json)
Hash identifier: kTHe+W3a0KXL4djFStBtqrtVncj/YTs6AcU/1cwZeJ0=
Subject key identifier: E5:76:05:03:32:EB:26:9E:3C:1B:3B:C7:6D:48:EF:D3:53:6C:8E:59
Certificate issuer: /CN=1f6551edd483908f99fb29d3485a619a09e33211
Certificate serial: 022041A3
Authority key identifier: 1F:65:51:ED:D4:83:90:8F:99:FB:29:D3:48:5A:61:9A:09:E3:32:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2VR7dSDkI-Z-ynTSFphmgnjMhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6aefaa-86bd-404a-9030-35b100090d4f/1/5XYFAzLrJp48GzvHbUjv01Nsjlk.roa
Signing time: Sat 01 Jan 2022 12:54:16 +0000
ROA not before: Sat 01 Jan 2022 12:54:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63473
IP address blocks: 45.132.72.0/24 maxlen: 24
45.132.73.0/24 maxlen: 24
45.132.74.0/24 maxlen: 24
45.132.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35668387 (0x22041a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f6551edd483908f99fb29d3485a619a09e33211
Validity
Not Before: Jan 1 12:54:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e576050332eb269e3c1b3bc76d48efd3536c8e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2c:98:e5:a6:8e:63:86:eb:df:cf:cc:ca:cf:
b2:a3:87:b1:c1:93:89:bd:43:9b:70:25:d9:d9:de:
64:e6:5a:66:98:23:2f:98:db:ea:8a:be:a6:f4:ba:
1b:06:54:ba:0a:59:7b:b3:ca:45:a5:8c:7a:da:5d:
a4:ec:4d:c7:19:e9:07:bc:ef:fa:35:19:2f:d8:14:
45:ae:77:66:ed:4f:94:42:7c:59:a1:9b:54:74:1d:
8e:10:dc:69:dc:ca:4e:dc:f3:af:ea:32:d6:67:e9:
c1:bc:a5:af:f0:ea:d8:85:b5:5b:ce:d7:b8:67:a2:
9b:ba:56:c7:67:a9:cd:30:1e:a7:b9:8d:99:47:72:
04:e8:b3:f7:b8:6a:c8:96:36:c3:2d:9b:62:76:60:
ea:91:a0:31:4d:db:63:ce:96:f0:01:8a:1e:dd:98:
06:5f:be:e0:e0:87:9f:96:2a:7e:07:bd:0a:1e:a3:
84:d6:3f:39:29:66:eb:c0:8f:fb:74:99:3b:b6:fe:
ed:cb:80:b7:85:ec:cf:da:3d:7c:c0:1a:d4:53:67:
0a:f3:51:37:aa:9d:21:8b:55:a8:6b:62:3c:ea:27:
3d:56:31:f1:3e:ee:36:6c:39:a7:9c:68:ab:e0:74:
a1:7a:80:33:1a:53:55:86:d8:8f:60:e7:d1:ff:04:
94:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:76:05:03:32:EB:26:9E:3C:1B:3B:C7:6D:48:EF:D3:53:6C:8E:59
X509v3 Authority Key Identifier:
keyid:1F:65:51:ED:D4:83:90:8F:99:FB:29:D3:48:5A:61:9A:09:E3:32:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2VR7dSDkI-Z-ynTSFphmgnjMhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6aefaa-86bd-404a-9030-35b100090d4f/1/5XYFAzLrJp48GzvHbUjv01Nsjlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6aefaa-86bd-404a-9030-35b100090d4f/1/H2VR7dSDkI-Z-ynTSFphmgnjMhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.72.0/22
Signature Algorithm: sha256WithRSAEncryption
13:c9:fd:25:a2:0c:16:88:93:d8:9c:ec:48:03:f0:8b:68:f9:
d8:29:9d:58:d3:48:5f:ca:fa:7d:36:77:89:b8:ce:33:ae:2e:
98:24:50:20:83:6d:dc:71:19:1e:9d:fe:3a:b0:9f:47:88:36:
96:92:f0:a9:06:ec:69:04:18:f2:35:50:3c:41:a1:62:fa:00:
b8:c4:57:3f:e2:46:d6:bc:9f:e9:7c:1b:32:7a:02:af:30:e1:
2e:74:27:9f:54:36:4c:27:9e:13:7f:b7:cf:2b:20:96:62:b6:
d3:7a:2e:f4:84:4a:32:21:f3:07:04:f2:a1:c4:41:cb:a9:35:
aa:d8:fd:23:78:b0:c4:c7:55:6c:4b:a6:56:bb:55:d4:e5:d7:
3e:e0:43:93:f4:c5:b5:08:eb:09:4d:f8:f4:39:34:c2:0b:ee:
e0:6a:45:7c:67:13:50:3f:e0:e6:03:61:76:4d:11:65:ea:db:
75:5e:17:f4:dc:c8:dd:21:de:6e:f5:83:53:f9:f5:ce:07:2d:
1f:f4:24:bc:db:e0:27:76:bb:b4:b5:74:30:ed:70:b8:4b:32:
5b:59:fc:1d:b3:b3:2f:e6:55:95:7f:1d:f4:29:e3:d8:cc:60:
cf:49:03:2e:f4:e2:45:20:4a:97:4d:81:31:ae:09:55:95:dc:
d2:88:e3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 05:05:41 2025 by rpki-client