Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/iT1EwKryhm0BoPYWHUce5gYQyu4.roa
File: iT1EwKryhm0BoPYWHUce5gYQyu4.roa (raw, json)
Hash identifier: zhH60TaMJH/Xur6jAhM7pPOL+caX5Nqi2bMB03GsWbM=
Subject key identifier: 89:3D:44:C0:AA:F2:86:6D:01:A0:F6:16:1D:47:1E:E6:06:10:CA:EE
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01942748909AB0D58DBEBDC231D6F136FEBE
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/iT1EwKryhm0BoPYWHUce5gYQyu4.roa
Signing time: Thu 02 Jan 2025 13:50:54 +0000
ROA not before: Thu 02 Jan 2025 13:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64289
IP address blocks: 45.142.106.0/24 maxlen: 24
92.118.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:90:9a:b0:d5:8d:be:bd:c2:31:d6:f1:36:fe:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=893d44c0aaf2866d01a0f6161d471ee60610caee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:7e:28:2b:a2:66:e5:2f:bb:1a:17:81:58:
06:db:8f:af:8d:50:bb:75:0b:7e:37:1d:0b:e4:0f:
fc:7e:06:0b:d3:18:06:eb:15:ed:e7:77:f5:27:bf:
d3:ce:78:e3:0f:00:90:15:91:fd:e3:d6:32:29:65:
02:6e:36:4f:1e:81:26:bd:e2:35:cf:07:bc:3c:07:
d1:7d:43:80:91:5d:27:21:d5:bc:25:b4:b3:fa:03:
ec:b0:bf:00:39:d9:e8:71:77:02:2c:9e:58:73:08:
e3:ef:8f:2c:af:8a:99:99:e1:c4:6d:e8:22:64:59:
66:0d:e6:31:20:1f:8a:5c:43:88:b4:ba:cb:4f:50:
43:01:dd:63:a8:be:b2:17:74:65:d6:87:03:9c:25:
f1:47:7f:bd:c9:fe:c0:d0:99:59:dc:58:70:06:4d:
f2:27:b5:69:61:68:4f:37:9a:f5:4e:b5:98:a9:0f:
08:99:3f:cc:9e:a4:84:43:c7:88:6e:27:79:08:b7:
28:ee:cf:cc:9c:33:f2:ab:ce:1a:10:62:62:67:51:
9b:35:bc:4c:c7:1a:83:40:c3:59:6b:97:f6:f0:9f:
b0:0b:11:c6:6b:6c:85:66:0d:af:8e:70:9c:3a:73:
a9:c0:69:15:8c:5a:d4:57:c6:92:ec:27:bc:0f:9b:
83:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3D:44:C0:AA:F2:86:6D:01:A0:F6:16:1D:47:1E:E6:06:10:CA:EE
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/iT1EwKryhm0BoPYWHUce5gYQyu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.106.0/24
92.118.206.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:dd:94:c6:c0:6f:17:8b:68:bc:ea:4e:d9:35:6e:eb:13:f7:
be:9d:4d:8f:3b:89:14:ea:7f:20:63:b1:0d:40:50:92:1e:06:
31:af:0e:3c:01:4c:7b:0e:85:65:98:1d:5b:42:b5:73:66:74:
ec:5b:85:a4:00:71:a9:c1:2c:c6:1b:42:89:b2:41:94:9f:56:
d5:b1:d6:c4:c4:a9:42:9e:5f:d4:83:6b:b6:bb:03:2f:32:ed:
ad:35:cc:a1:77:de:86:f5:32:bf:d4:e7:07:9d:a2:7f:e6:9d:
bc:2a:c1:dc:a8:41:3b:9a:c1:83:dc:2b:ee:10:51:18:0b:6b:
7a:ea:65:23:47:ce:e0:6a:d0:0c:f8:b8:9e:b3:ee:55:c5:29:
7c:5b:15:27:bf:ac:12:61:07:5b:d7:c4:9f:bc:54:cf:8e:41:
60:f4:62:4b:1e:17:0f:a7:e6:0b:93:12:6f:a7:98:76:62:04:
79:82:9b:75:22:02:c8:46:75:33:a1:2d:5b:bd:d8:cb:4a:c1:
fa:9f:6f:1e:8b:6f:5f:87:8c:a2:2d:d9:c4:df:c0:bc:26:96:
5a:8f:aa:6e:c8:a0:80:30:cf:b9:58:03:65:ea:c5:3a:61:ed:
b4:ad:e3:5f:8f:ee:6e:f4:13:95:b6:3e:18:b3:f6:76:46:4b:
a7:a6:fe:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:52:16 2025 by rpki-client