Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/UnjUUsbulhDzBwKFih0qX4dYSxo.roa
File: UnjUUsbulhDzBwKFih0qX4dYSxo.roa (raw, json)
Hash identifier: zO3PIrwe+xgSWoHcPY2w0UaXKoLO1fCh81rcz/LjIf8=
Subject key identifier: 52:78:D4:52:C6:EE:96:10:F3:07:02:85:8A:1D:2A:5F:87:58:4B:1A
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019422FB60960501DBD25A3CE9E3C990DDBC
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/UnjUUsbulhDzBwKFih0qX4dYSxo.roa
Signing time: Wed 01 Jan 2025 17:48:07 +0000
ROA not before: Wed 01 Jan 2025 17:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48430
IP address blocks: 45.91.52.0/22 maxlen: 22
45.155.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:60:96:05:01:db:d2:5a:3c:e9:e3:c9:90:dd:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 17:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5278d452c6ee9610f30702858a1d2a5f87584b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c4:f6:85:0f:06:94:50:42:eb:00:30:95:78:
44:4f:71:3b:76:5f:f5:ab:77:d2:30:65:7a:15:2f:
08:e9:60:93:fc:62:06:f9:15:56:c8:a7:72:49:ed:
08:b5:fd:04:59:9e:c6:dd:98:b5:66:17:a2:19:ae:
a4:45:9f:7f:a6:c1:5b:ea:5e:3c:56:21:98:15:dc:
85:52:e4:ab:31:c5:77:df:5f:96:d3:ed:76:1c:5b:
4e:d5:0b:28:a3:e8:98:2d:37:4e:23:10:37:63:96:
ed:84:35:c5:23:1c:15:93:6f:b3:05:b0:e4:a1:eb:
15:22:2a:88:02:90:f0:3e:89:f7:04:47:70:f4:29:
e5:7b:e5:94:43:3a:6b:a6:44:07:fa:5e:36:6c:c6:
49:f4:d8:74:af:c1:ab:d7:d2:8e:12:20:0e:97:65:
b4:3b:7a:9c:ea:d6:57:54:08:d5:bf:96:45:db:41:
f4:e4:3c:c6:eb:97:50:47:45:55:70:b8:ca:e7:1f:
92:b4:6b:01:b7:1b:60:2b:45:64:88:69:6e:67:d2:
f8:28:7b:14:a4:b8:bb:8e:ec:c4:61:6c:28:af:91:
de:ce:ce:40:34:0a:e7:fa:47:55:9e:20:0f:5a:6d:
a6:bd:8f:9d:7d:79:33:c4:40:66:3d:d5:23:0d:c7:
af:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:78:D4:52:C6:EE:96:10:F3:07:02:85:8A:1D:2A:5F:87:58:4B:1A
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/UnjUUsbulhDzBwKFih0qX4dYSxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.52.0/22
45.155.52.0/22
Signature Algorithm: sha256WithRSAEncryption
03:eb:17:8c:b3:c4:1f:4d:6c:cf:2e:12:96:3d:ea:d1:ce:f0:
7f:e9:74:d7:85:4a:7c:f7:29:49:82:ff:32:67:32:88:66:1e:
61:a9:fc:6b:2b:13:ad:90:11:d0:bd:ae:3c:d5:d9:d7:5e:c4:
e8:d4:6d:ac:41:ba:93:8f:b7:65:6c:56:6e:ed:8e:e1:d7:06:
d1:58:35:23:f0:e7:21:3c:4f:cd:d3:5f:bf:e2:ea:24:03:89:
df:eb:61:17:df:10:57:f2:04:66:24:e3:78:ef:0b:9b:38:34:
e9:aa:65:98:5f:04:4c:1a:60:b6:c2:ce:9d:ff:e6:9c:a3:65:
16:39:98:86:d1:b0:62:55:00:8a:b5:13:da:63:62:44:91:79:
16:7d:44:9c:c1:d6:0a:4b:08:11:1e:9c:16:b0:4f:7f:28:4c:
43:3c:4a:aa:65:2e:55:4f:61:5e:d6:86:ce:a1:5c:b4:a4:bd:
79:97:6a:c4:da:d8:72:ad:79:57:08:0e:a8:0a:a0:26:bb:6c:
20:1a:b8:99:e7:d2:68:45:c9:27:13:a3:76:8a:ee:e6:ca:8c:
f2:41:af:ed:90:0e:ab:af:49:48:be:b0:fa:f3:a2:e4:56:90:
c1:89:f3:8a:45:c6:e0:1b:0d:c8:b1:bc:a4:7f:c4:c2:ff:dc:
3e:28:24:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:28:51 2025 by rpki-client