Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/5og211vAaF6IAuIj65I_eaqQcuA.roa
File: 5og211vAaF6IAuIj65I_eaqQcuA.roa (raw, json)
Hash identifier: vwWweAdY1NcWb8GVlsQwL5d1P062VUgLlWNv9Nw3lYo=
Subject key identifier: E6:88:36:D7:5B:C0:68:5E:88:02:E2:23:EB:92:3F:79:AA:90:72:E0
Certificate issuer: /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Certificate serial: 01856E82087442BA48DBAA9C03F0B8460394
Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/5og211vAaF6IAuIj65I_eaqQcuA.roa
Signing time: Sun 01 Jan 2023 18:04:53 +0000
ROA not before: Sun 01 Jan 2023 18:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206483
IP address blocks: 84.45.31.0/24 maxlen: 24
84.45.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:82:08:74:42:ba:48:db:aa:9c:03:f0:b8:46:03:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Validity
Not Before: Jan 1 18:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e68836d75bc0685e8802e223eb923f79aa9072e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:09:f9:1a:3f:ab:76:24:da:89:c8:99:39:c6:
e4:f7:74:85:1f:96:bc:f6:4d:0e:e9:29:07:d1:5c:
2c:e7:13:d0:d4:73:e4:8d:d6:44:ef:43:c0:40:42:
2d:90:34:d4:4e:11:55:d8:e0:57:fe:8f:84:d7:cf:
81:e3:ce:79:56:ad:48:33:77:b8:19:50:94:3d:c0:
13:79:fc:d3:18:3f:6d:fe:cf:dd:e9:04:dc:30:6e:
e5:27:28:25:db:e7:35:02:79:68:db:52:f4:e6:88:
5f:18:79:2f:4b:bb:68:9b:c9:75:74:2a:43:bf:f2:
de:73:94:01:3c:86:1e:bc:21:5f:e0:8f:87:f0:aa:
62:98:74:60:a5:9a:54:91:7a:4e:c8:6b:92:7d:43:
c0:9e:e8:f6:a1:34:75:a3:81:24:9a:64:ce:e5:4b:
d9:19:c0:8e:0e:4f:27:4c:f8:81:9d:8a:98:79:28:
0f:f0:31:ea:45:62:2b:99:48:00:e9:6f:dd:bd:01:
9c:11:48:8c:5e:75:63:93:16:36:65:8e:2e:f7:c2:
13:09:36:04:5a:2f:b0:64:f7:6a:87:cc:1d:26:32:
da:9a:ef:c0:2a:a9:a3:2b:96:fe:9a:6d:88:16:c3:
c3:77:e3:c7:a6:f0:49:19:b6:44:ab:dc:84:ba:0f:
cc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:88:36:D7:5B:C0:68:5E:88:02:E2:23:EB:92:3F:79:AA:90:72:E0
X509v3 Authority Key Identifier:
keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/5og211vAaF6IAuIj65I_eaqQcuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.45.30.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:55:09:a8:2e:c5:f4:eb:a0:77:fa:3e:1d:bf:74:fd:24:13:
b6:c6:eb:f4:8c:05:88:03:10:40:0a:8d:fa:3e:fa:7b:b9:2a:
f7:0d:1f:b7:48:48:05:ff:08:0a:76:8b:2d:bd:c7:55:aa:35:
87:29:8a:e5:c5:85:e6:eb:52:6f:9a:72:48:03:ba:a7:c6:1f:
5c:23:64:4f:f7:55:b7:6b:c1:1a:43:4e:ac:9e:db:a0:42:7b:
4b:ac:38:53:17:69:20:8a:c3:e9:3e:b2:c6:33:9c:c2:8c:d9:
4a:23:10:52:4e:c9:ad:ca:42:60:50:8c:ad:6a:41:01:d4:a7:
57:25:a1:eb:bd:1f:d8:52:69:c8:3e:1d:3a:ec:38:fc:14:b8:
43:fa:e1:0f:de:2f:89:26:00:d9:6a:13:7c:fd:07:19:ab:8a:
de:93:70:da:d8:52:c8:64:d8:6e:08:12:5f:a2:8f:2b:e7:0b:
77:04:99:b0:a8:a4:b3:4e:5b:67:d3:70:96:8d:99:35:71:cf:
dd:a0:c9:02:21:2f:f6:b8:b2:7d:4d:55:77:1c:b4:80:6f:e5:
94:cb:a3:f3:8a:d8:fb:85:06:27:05:ea:ec:cb:06:fb:7b:26:
59:8b:2e:03:69:ae:51:c9:b5:8c:6b:36:f2:68:6c:d0:dc:4a:
ec:5e:7f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:42 2025 by rpki-client