Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/1yUmumXSsVUQLEj56omIxPvVO-M.roa
File: 1yUmumXSsVUQLEj56omIxPvVO-M.roa (raw, json)
Hash identifier: 44QrC+ml5kbt+c6j+67ZG7AtxU47E/wTaT25yw3rkIE=
Subject key identifier: D7:25:26:BA:65:D2:B1:55:10:2C:48:F9:EA:89:88:C4:FB:D5:3B:E3
Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial: 018B1E2A13492228094573ADCF060F6B1D82
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/1yUmumXSsVUQLEj56omIxPvVO-M.roa
Signing time: Wed 11 Oct 2023 09:55:55 +0000
ROA not before: Wed 11 Oct 2023 09:55:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5511
IP address blocks: 45.151.252.0/22 maxlen: 24
45.129.90.0/24 maxlen: 24
45.129.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:2a:13:49:22:28:09:45:73:ad:cf:06:0f:6b:1d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Validity
Not Before: Oct 11 09:55:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d72526ba65d2b155102c48f9ea8988c4fbd53be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:ff:04:b9:fc:b2:2c:4c:a1:16:19:db:6f:
9a:82:ae:64:59:92:34:ba:1d:27:f3:f8:c4:b5:63:
66:90:59:ff:1d:1d:bf:df:91:e3:5e:89:b2:42:2f:
24:ab:7f:cf:9e:32:95:cd:63:73:0e:37:b0:e1:16:
55:3e:c9:a4:e3:79:4d:d7:83:47:61:c9:dc:da:71:
7a:e9:74:aa:7c:29:cd:90:81:fd:83:33:1d:01:d6:
d5:1f:6e:a0:ad:3a:8a:89:e9:7f:19:8d:a8:aa:66:
c3:65:19:f2:e6:4f:e4:da:29:14:75:82:bc:5b:11:
36:83:2b:be:2f:fb:14:38:dd:9e:ec:13:26:65:1b:
67:8f:61:2e:b5:d7:c6:da:6e:0f:18:46:6a:0a:7f:
74:b1:81:34:20:7d:c1:7e:f7:18:5f:2d:d4:65:a1:
ad:63:4a:de:9b:48:94:28:7f:5d:93:a1:3e:82:66:
4f:f6:3e:0d:48:20:43:68:e7:bd:48:1a:49:38:74:
60:6e:c2:b0:f3:60:7d:49:d7:78:2f:c4:ba:2c:a1:
5f:89:1b:d5:1e:79:b3:25:1b:da:3b:87:2f:61:fb:
6a:cd:ed:f0:78:85:3a:08:14:1c:42:ab:a7:01:d3:
ab:7a:6b:5b:89:91:36:3a:fc:66:72:a2:e2:33:7c:
09:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:25:26:BA:65:D2:B1:55:10:2C:48:F9:EA:89:88:C4:FB:D5:3B:E3
X509v3 Authority Key Identifier:
keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/1yUmumXSsVUQLEj56omIxPvVO-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.88.0/24
45.129.90.0/24
45.151.252.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:2b:5c:68:af:ee:66:b5:d4:ae:ba:1b:33:d6:d3:74:fa:3f:
c2:64:10:53:6e:de:11:c7:0b:83:ce:11:0b:17:4e:18:ef:ed:
ea:b8:7d:16:ea:28:b5:86:60:e7:9c:5a:c8:3b:2a:c5:6b:55:
65:dc:49:30:34:46:fc:d3:3b:52:78:9a:41:79:6a:6f:e0:77:
3e:44:c5:a3:ee:a8:e2:41:62:2e:36:63:c4:61:bf:13:bc:b7:
4a:27:b3:96:ab:46:4a:b0:4e:27:42:a0:9a:be:59:a2:45:8b:
31:8e:aa:d9:51:a5:ab:68:75:9e:af:dd:35:8e:66:cf:96:41:
81:fe:d7:0f:48:ed:a3:40:c6:4b:76:81:30:3f:15:9f:38:9e:
0f:53:3e:76:28:3d:a2:1d:f8:a9:b8:ba:11:c8:e1:6c:50:e7:
f0:1a:09:78:78:91:59:28:33:49:8f:5f:e1:6b:6c:fc:16:d8:
69:e7:02:62:18:2e:df:86:d7:15:5f:0e:e6:0b:13:aa:15:2d:
eb:ac:2d:d3:e3:ac:44:0e:24:a9:b6:da:b3:69:47:63:57:38:
b5:49:a5:7c:5d:d3:02:bb:3a:b4:3c:57:0d:a3:fe:7b:b9:f3:
89:26:1f:30:39:ee:38:2d:cb:8b:14:a6:88:fb:ae:da:93:05:
22:3e:e1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:30 2025 by rpki-client