Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Bx__fFiMMTggkGq_nd5kX3xmUcg.roa
File: Bx__fFiMMTggkGq_nd5kX3xmUcg.roa (raw, json)
Hash identifier: mKBt1ZL1NN3yHJQYqC4MudwNnNLAyAG6zsc+LH7T2yM=
Subject key identifier: 07:1F:FF:7C:58:8C:31:38:20:90:6A:BF:9D:DE:64:5F:7C:66:51:C8
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 019422FC455B7725F663393D6262BB5D43BA
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Bx__fFiMMTggkGq_nd5kX3xmUcg.roa
Signing time: Wed 01 Jan 2025 17:49:05 +0000
ROA not before: Wed 01 Jan 2025 17:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62005
IP address blocks: 45.66.248.0/24 maxlen: 24
45.66.249.0/24 maxlen: 24
45.150.108.0/24 maxlen: 24
45.150.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:45:5b:77:25:f6:63:39:3d:62:62:bb:5d:43:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 1 17:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=071fff7c588c313820906abf9dde645f7c6651c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bf:2f:97:ae:5a:94:18:ec:b2:b9:cb:fd:8e:
27:a8:92:7f:5c:78:63:4f:6a:ab:ad:15:1b:2a:9e:
2f:67:56:ed:05:26:9e:39:16:88:41:d5:db:6c:f1:
ad:bf:2c:2b:f4:ed:f2:f9:ec:72:bc:1c:ca:9c:74:
d2:47:b3:cf:75:84:90:f8:17:fb:94:24:c2:bc:37:
7b:54:4a:e9:16:33:98:70:b3:b7:a9:6f:9b:2c:e8:
5a:40:ea:d6:20:e9:95:a4:98:15:31:74:0a:7e:ae:
71:ba:df:13:6e:da:2b:0f:40:ff:a3:eb:f8:ed:84:
cc:cc:34:36:02:c7:65:c7:1f:03:41:b3:a2:5f:61:
84:2a:ca:be:96:d1:d0:81:43:1d:ba:ab:67:91:b8:
f0:1b:13:e8:b1:17:00:f3:13:15:b6:af:8e:10:45:
a1:ad:53:ca:7e:53:59:b9:46:48:ee:5d:49:68:68:
64:cd:fa:4c:b8:1c:33:fb:83:dc:05:3d:7d:bb:67:
30:18:e2:c2:c8:3d:1f:85:ea:fd:b1:21:5e:3a:61:
1c:ed:44:b5:54:ed:b2:36:11:be:5b:84:92:91:e5:
48:f8:19:bf:d8:06:9c:cb:cf:15:1d:b4:50:f5:d3:
b9:16:c1:3d:f7:e5:fb:5d:5a:df:5c:d0:25:47:e5:
88:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1F:FF:7C:58:8C:31:38:20:90:6A:BF:9D:DE:64:5F:7C:66:51:C8
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Bx__fFiMMTggkGq_nd5kX3xmUcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.248.0/23
45.150.108.0/23
Signature Algorithm: sha256WithRSAEncryption
53:b5:51:d9:03:ac:cc:4b:64:53:63:f9:07:69:09:2a:e9:c7:
e0:45:a0:28:63:64:0e:84:dc:be:7d:63:d4:f9:26:2d:af:fc:
93:fc:df:a8:d2:81:f6:c3:fd:f2:97:67:b1:94:84:81:cf:13:
fd:e2:5d:27:d9:b9:52:c1:92:f5:20:64:ec:aa:1b:08:c4:fb:
25:8b:da:3e:b5:1b:c4:66:56:78:5a:98:80:3a:bb:c4:bf:df:
81:7b:75:54:26:80:b0:1c:cb:42:87:52:45:dd:67:ec:e2:8c:
72:3e:f8:61:58:48:68:b5:dc:e3:25:f2:d9:c0:9e:30:04:f6:
7c:33:cc:3e:cd:75:5a:69:ed:a8:16:52:7c:a8:62:00:11:bf:
cb:cd:1e:23:1f:ba:67:30:57:04:33:64:dd:f5:fe:af:a4:83:
f0:d3:97:3e:b5:e5:bb:02:e9:b6:3c:68:bd:0e:02:bc:b5:4d:
b9:4d:f7:f4:c3:d8:c6:2c:2e:89:fc:c6:52:e3:48:53:70:05:
c4:49:1b:a5:24:36:32:8d:92:57:94:3f:77:04:ad:bd:4b:4f:
a5:af:ad:c6:ec:52:f6:a4:e8:21:11:b6:57:75:76:c0:6f:71:
d8:99:fa:34:3e:31:2e:65:a2:11:9c:7a:97:93:6d:05:3e:df:
bc:33:f6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:35 2025 by rpki-client