Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bRB7aMwhL-hNkLrHJhHGOJ9viMM.roa
File: bRB7aMwhL-hNkLrHJhHGOJ9viMM.roa (raw, json)
Hash identifier: a66DAS9XPWtb+y+W9y0L07gF7GbmWJNEtb5B3mTk1f0=
Subject key identifier: 6D:10:7B:68:CC:21:2F:E8:4D:90:BA:C7:26:11:C6:38:9F:6F:88:C3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282480ABE467613628CFB5BE510A42A3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bRB7aMwhL-hNkLrHJhHGOJ9viMM.roa
Signing time: Thu 02 Jan 2025 17:51:08 +0000
ROA not before: Thu 02 Jan 2025 17:51:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47674
IP address blocks: 45.84.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:80:ab:e4:67:61:36:28:cf:b5:be:51:0a:42:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d107b68cc212fe84d90bac72611c6389f6f88c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e5:83:45:ce:f2:62:dd:04:4e:ba:35:81:7d:
e8:a1:ce:3a:9d:bb:4c:22:43:58:5c:4c:7c:74:3e:
94:f6:36:0f:22:5d:22:5b:07:7f:4a:68:13:86:51:
82:7e:5d:74:28:9b:10:d7:e1:32:f5:b5:5c:f1:59:
99:6a:d6:6f:21:60:82:ee:e1:ec:37:49:9e:2e:cd:
05:7b:a1:26:1e:47:5f:67:66:08:d3:60:d8:30:e8:
84:71:63:9e:a8:a1:57:fc:76:ca:ce:b1:cc:b4:a0:
f3:66:11:a2:5e:31:f6:72:b6:ca:a0:0e:77:e4:35:
01:ae:90:3b:6e:f0:87:dd:f4:63:e3:a6:e9:7c:4c:
ec:f0:61:91:9a:54:d3:b4:3a:1b:7f:ca:d0:4c:94:
a8:9b:4b:e4:76:2a:ac:83:b5:87:91:49:1a:6b:0c:
5a:3b:e0:6d:ba:76:f4:a5:ca:51:db:6f:9b:64:5c:
42:da:e5:04:12:e5:5d:05:52:47:97:c8:ba:47:28:
a4:e9:b9:68:5f:c9:f1:6b:ed:75:be:91:96:fc:76:
df:b9:5d:cf:d6:dd:79:c1:b8:45:40:1f:77:82:22:
15:57:6b:bd:05:f1:b6:cf:84:b0:06:7a:49:66:91:
a5:b1:e8:5b:5e:58:c4:94:77:3e:cf:1e:ed:ea:75:
7c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:10:7B:68:CC:21:2F:E8:4D:90:BA:C7:26:11:C6:38:9F:6F:88:C3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bRB7aMwhL-hNkLrHJhHGOJ9viMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.222.0/24
Signature Algorithm: sha256WithRSAEncryption
78:27:44:68:55:a8:43:2d:9e:aa:7f:68:08:79:cd:ff:59:54:
cc:e3:96:a9:66:28:83:43:57:3b:8d:3e:23:bb:b9:c1:80:ff:
16:77:4c:2c:28:4f:27:bd:89:a8:12:c1:85:ef:f4:7e:52:1e:
6a:c5:5e:fe:c1:d6:21:89:38:85:1b:83:8b:fa:1a:36:b1:2c:
09:cd:5b:a4:00:03:e5:86:9d:1e:a5:3b:ee:fd:bf:f0:b7:67:
bc:69:e3:b0:d1:10:85:42:0c:38:f9:b1:bb:17:16:df:5a:64:
b9:da:23:f5:ec:51:44:3e:4b:69:7f:bb:2a:01:b7:26:09:30:
3f:0c:b5:c7:ad:3d:04:be:76:f7:f9:e0:65:5f:42:b2:c0:58:
7a:0a:c9:6e:cf:29:fb:10:9a:0b:f2:f5:44:3a:b8:9c:24:b9:
27:01:eb:7e:e3:ab:a8:40:ad:cd:d2:ce:9e:f3:f7:3f:84:7b:
f9:85:d4:c0:7e:93:a9:c8:50:94:75:74:09:60:78:20:47:84:
f3:9e:40:29:e3:e4:f6:6e:49:2f:64:9f:13:65:c5:59:0c:c8:
18:6b:e5:0d:f8:cb:45:8b:41:fc:d0:d6:7b:32:5f:d4:41:21:
6f:b9:15:97:fa:e9:79:26:55:d1:ed:f7:4a:e9:22:43:f3:74:
20:77:09:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:29 2025 by rpki-client