Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/aAu5S5IbLCTcHF2sjNSq_YvIkRs.roa
File: aAu5S5IbLCTcHF2sjNSq_YvIkRs.roa (raw, json)
Hash identifier: Ofs8Vq4O2KmWTmDnq5aKJmZojKw/IVecQ8WTuC45ixk=
Subject key identifier: 68:0B:B9:4B:92:1B:2C:24:DC:1C:5D:AC:8C:D4:AA:FD:8B:C8:91:1B
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 01941FFA99BF3E2277B010FE0AF3ADE23DE2
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/aAu5S5IbLCTcHF2sjNSq_YvIkRs.roa
Signing time: Wed 01 Jan 2025 03:48:24 +0000
ROA not before: Wed 01 Jan 2025 03:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 45.147.68.0/23 maxlen: 23
45.147.70.0/24 maxlen: 24
45.147.71.0/24 maxlen: 24
88.218.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:99:bf:3e:22:77:b0:10:fe:0a:f3:ad:e2:3d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=680bb94b921b2c24dc1c5dac8cd4aafd8bc8911b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e4:44:8b:63:ec:85:e4:b8:c4:f2:26:92:b6:
dc:25:da:a6:3d:d7:aa:1d:82:41:f1:d0:f8:f9:70:
0e:db:89:16:4d:39:e6:00:2c:e3:d9:79:ef:8f:91:
4e:53:ac:ad:06:0e:51:32:ae:c8:77:e8:44:40:d3:
78:8c:e4:56:fe:67:a3:cb:eb:b1:4f:ee:0a:84:c0:
29:94:a3:e8:0c:1f:56:c9:2e:ac:1c:e6:a4:04:d3:
64:6d:76:38:10:a9:81:7f:26:50:30:4f:35:ab:3d:
38:5a:de:bf:21:5f:04:6a:98:c4:0e:91:9b:e1:d1:
38:03:bf:71:fc:e6:0c:35:f4:a9:29:c8:8c:7b:4e:
ee:56:a1:a0:5d:fd:f8:19:9e:b1:a6:62:5d:83:6d:
af:a9:d2:8b:65:92:dd:6b:0b:26:5d:55:99:60:a0:
b8:b0:4c:e3:72:b1:34:29:fb:28:00:2e:b7:22:bd:
62:1b:84:b7:70:d9:42:78:00:54:70:a1:85:bf:a9:
1f:2c:e9:f2:f6:1d:e6:ed:ca:a0:d1:d3:89:61:b6:
2a:64:17:a3:f9:2c:bd:79:c6:b9:f7:a1:74:9b:dc:
db:7e:65:04:0a:c4:c1:b7:45:dd:bf:a0:55:0d:e8:
41:d0:1a:e1:1d:ee:80:47:0a:20:17:97:91:e9:26:
44:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0B:B9:4B:92:1B:2C:24:DC:1C:5D:AC:8C:D4:AA:FD:8B:C8:91:1B
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/aAu5S5IbLCTcHF2sjNSq_YvIkRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.68.0/22
88.218.104.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:8c:f2:8f:ce:55:99:f7:e9:43:3d:b6:71:a1:45:62:2c:67:
21:42:c2:7e:5b:11:1f:1d:97:88:c7:25:d1:e4:52:96:d2:e7:
ce:2f:f6:89:da:d6:2f:e2:d6:75:5e:d9:80:de:c0:7f:ac:be:
79:c3:b6:23:99:75:7b:a1:fe:2f:6b:ab:18:09:a0:38:72:20:
ae:af:cd:c5:e1:ff:88:b6:db:11:9e:2a:c6:06:27:94:c5:d7:
e3:c7:01:be:07:38:ca:71:89:de:6b:18:bc:19:7f:8c:51:c7:
6a:05:1d:0b:6c:4f:cf:28:58:d5:f5:8f:e2:67:25:2a:63:83:
0a:7a:ab:17:42:0d:e0:10:68:26:2e:c6:4c:c6:ce:a7:c0:fc:
27:b5:c8:cc:31:0f:68:d8:19:49:4f:f5:e7:8e:73:2e:db:89:
e9:9f:b2:65:58:84:4d:20:8c:ae:be:60:ac:a5:25:6e:67:89:
02:82:d9:50:28:d9:31:dc:7b:7e:e7:a6:fa:50:78:f3:7a:8b:
c6:76:60:8c:34:67:c6:fc:51:20:ae:c4:c9:aa:29:0a:7c:7f:
0c:e6:c5:1e:56:a1:67:0a:3c:df:58:52:a1:16:42:be:bc:a9:
26:4d:73:f8:d1:ea:9c:56:00:84:4e:33:0b:5d:f6:15:01:43:
a1:d0:62:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:22:11 2025 by rpki-client