Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/vb1dDyyTWxxLlSgfwG-f2LoghnM.roa
File: vb1dDyyTWxxLlSgfwG-f2LoghnM.roa (raw, json)
Hash identifier: /aBDSc4vT/oTqhg2Zpyh6DEtnkQwwXOnttzniIq6fsw=
Subject key identifier: BD:BD:5D:0F:2C:93:5B:1C:4B:95:28:1F:C0:6F:9F:D8:BA:20:86:73
Certificate issuer: /CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67
Certificate serial: 019420D6574C8A2246FF65F72132FC7AACF0
Authority key identifier: CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/vb1dDyyTWxxLlSgfwG-f2LoghnM.roa
Signing time: Wed 01 Jan 2025 07:48:25 +0000
ROA not before: Wed 01 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205500
IP address blocks: 45.152.168.0/22 maxlen: 22
45.152.171.0/24 maxlen: 24
185.216.16.0/22 maxlen: 22
2a0f:5000::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:57:4c:8a:22:46:ff:65:f7:21:32:fc:7a:ac:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdbd5d0f2c935b1c4b95281fc06f9fd8ba208673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:54:68:8a:d8:0f:f1:fa:bb:35:14:72:8a:7c:
bb:5c:23:7c:c8:82:18:3f:8b:33:24:de:9d:ae:13:
f0:e8:51:48:98:c7:d4:b1:46:2c:96:4e:5d:94:6e:
71:e9:7f:e0:48:3a:c8:6c:49:9c:92:a8:d0:f4:98:
a1:4f:12:7b:50:b9:65:48:bf:31:ae:b1:eb:c4:ae:
87:56:61:c1:e5:a0:fa:e4:8f:0f:44:c3:bc:58:68:
e6:61:12:15:a8:2f:e0:8e:b6:10:17:ad:8b:d0:8b:
78:57:40:a6:1d:1b:10:47:81:30:ac:52:81:fb:d9:
29:15:0c:03:ab:6c:2a:1b:48:f3:1f:ca:f9:70:73:
19:b0:e1:b0:3a:50:59:60:eb:2e:e5:d3:44:c5:b0:
81:7b:02:33:28:0c:e0:2e:56:5c:86:30:43:7a:22:
93:31:9a:f9:bb:75:2b:1b:09:e4:f8:f3:a7:59:b3:
ed:93:66:be:f7:ff:8b:5b:23:42:ee:4c:14:d6:e6:
db:2a:d0:5e:e7:a3:05:79:c6:06:17:f9:d3:ad:6a:
8d:da:df:ef:75:0a:62:9a:6b:a5:a2:bd:73:90:e0:
fc:0e:61:89:1d:3c:10:7a:c4:30:c0:82:e6:5b:c9:
88:12:dd:17:5e:1b:87:22:5f:d3:9c:7b:4b:6c:b9:
b1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BD:5D:0F:2C:93:5B:1C:4B:95:28:1F:C0:6F:9F:D8:BA:20:86:73
X509v3 Authority Key Identifier:
keyid:CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/vb1dDyyTWxxLlSgfwG-f2LoghnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.168.0/22
185.216.16.0/22
IPv6:
2a0f:5000::/29
Signature Algorithm: sha256WithRSAEncryption
c2:2f:80:69:cf:90:ec:8e:cc:05:0d:70:d0:b4:25:17:93:e3:
c9:ef:f4:56:f9:9d:de:06:ac:56:b2:23:89:b7:94:a0:c5:05:
b8:60:56:4d:2f:12:b9:98:f6:e8:f6:32:d2:30:54:04:a6:d4:
13:39:a3:a0:b9:9c:e0:ec:09:f3:8b:a0:f9:7c:38:1a:8e:40:
95:1f:96:4b:e0:a7:ae:d2:26:06:49:09:70:fe:dd:aa:7f:5d:
43:9e:b8:ae:b0:51:2b:f0:5d:06:ff:2c:34:ae:0d:7b:b2:9c:
d4:1d:94:68:b0:3d:95:43:30:8e:58:ce:43:6b:25:5d:b9:e3:
e2:4b:be:7c:41:47:bc:7c:e5:94:57:d9:63:0e:1f:f5:55:37:
7c:dd:3f:42:d9:14:93:1f:70:b7:03:ac:90:38:af:63:12:8a:
59:f1:13:e7:73:fb:17:a4:f1:d1:3c:76:f0:86:08:33:38:32:
69:2d:e2:d9:80:48:2b:dc:fb:d9:dc:0f:64:b0:0f:bf:1c:f4:
c9:6f:f2:6f:fc:44:b3:ff:4c:ae:60:59:25:03:f4:32:69:f3:
c2:05:da:cc:51:80:bf:dc:43:d1:c1:ba:c8:ed:7c:eb:00:07:
85:c9:19:cd:d9:f4:3e:e3:5d:60:5e:38:c8:90:95:c8:2c:05:
d8:b5:84:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:43 2025 by rpki-client