Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/qBoHuNv7znixCyhzyH3L6b4JjMs.roa
File: qBoHuNv7znixCyhzyH3L6b4JjMs.roa (raw, json)
Hash identifier: 8FVJ5zW+hXKUbs3QXSxUyH4ee1KWcw96gUoDz4eFoqs=
Subject key identifier: A8:1A:07:B8:DB:FB:CE:78:B1:0B:28:73:C8:7D:CB:E9:BE:09:8C:CB
Certificate issuer: /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial: 019421446A24720DAAAB0A4BB43B02824848
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/qBoHuNv7znixCyhzyH3L6b4JjMs.roa
Signing time: Wed 01 Jan 2025 09:48:39 +0000
ROA not before: Wed 01 Jan 2025 09:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.146.156.0/24 maxlen: 24
45.146.157.0/24 maxlen: 24
45.146.158.0/24 maxlen: 24
45.146.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6a:24:72:0d:aa:ab:0a:4b:b4:3b:02:82:48:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
Validity
Not Before: Jan 1 09:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a81a07b8dbfbce78b10b2873c87dcbe9be098ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:f7:da:b6:b4:ab:0d:6b:ee:59:dc:1a:ea:
a1:92:b9:4f:d6:43:db:88:81:38:29:de:e7:fe:fd:
61:f0:56:57:3a:7c:2c:02:8d:4d:2e:91:2c:2a:df:
b2:56:9f:4e:5f:9d:11:60:85:76:23:3e:d5:f9:6c:
4b:6e:9a:98:f4:73:6f:97:57:b3:6e:27:fb:57:b2:
54:fd:c3:22:84:6e:73:dc:39:9e:66:c3:00:18:89:
f7:57:22:0e:a3:6b:ba:88:de:65:c0:55:84:2c:39:
1f:5f:37:29:68:0a:64:e4:92:58:aa:71:ca:9a:d0:
b6:b5:10:8a:3b:4b:a2:ef:b5:2f:63:35:d0:65:85:
17:3b:c0:1e:08:14:59:a2:76:2f:b9:ac:3c:8d:ca:
40:00:c3:09:04:2d:38:34:c1:c6:81:eb:e3:a3:ad:
b3:52:4f:24:29:96:72:bd:2e:4d:a9:55:26:b0:1a:
e1:01:94:32:37:61:ff:83:a9:55:43:5c:3b:ec:dc:
93:fd:27:db:2d:05:63:2d:6e:c5:0e:dc:26:a8:18:
a4:bc:e1:cb:08:34:c6:63:d6:a5:66:0c:9c:63:c9:
82:4d:6d:ac:d0:d8:43:d1:ca:13:c8:14:8e:cc:db:
05:5f:dc:02:a7:bb:ad:a3:ef:29:d5:bb:83:a9:82:
d6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1A:07:B8:DB:FB:CE:78:B1:0B:28:73:C8:7D:CB:E9:BE:09:8C:CB
X509v3 Authority Key Identifier:
keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/qBoHuNv7znixCyhzyH3L6b4JjMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.156.0/22
Signature Algorithm: sha256WithRSAEncryption
04:30:3f:5d:71:a9:be:9a:74:3d:63:81:a5:72:5a:36:1e:09:
db:86:c4:fd:be:d2:ea:71:50:f9:3f:9b:17:7c:60:c5:2c:34:
6e:b4:0b:a0:ea:a3:a8:b0:6e:24:b7:09:5d:b0:ac:d3:65:2b:
1d:18:40:c5:63:25:cf:2a:9c:7e:d3:0a:0c:eb:44:f9:1e:30:
5f:bf:a6:b5:67:7a:fe:96:9c:a5:a6:1c:26:1e:6c:16:b8:94:
ae:81:69:f7:a1:9e:f6:a2:b5:0c:64:15:c0:78:ae:8a:a6:93:
1e:11:aa:9c:97:f8:29:00:80:d9:57:4f:91:d2:09:52:c5:a1:
3b:fc:91:60:77:4f:c9:20:4c:8d:9b:2b:a1:a5:f1:07:97:a2:
17:e5:70:a7:8a:12:44:71:bd:96:67:1f:a7:ad:14:37:98:e1:
aa:30:16:1e:8e:0f:64:2c:2e:64:80:a7:a0:89:e6:cb:bc:da:
24:18:c1:a5:e9:5e:1e:cb:a2:57:da:aa:60:20:82:14:4d:e0:
4a:5e:19:8e:f3:7f:e6:2a:07:c4:2b:ce:97:75:7d:00:1c:66:
c4:a4:2d:41:fe:88:b0:99:05:70:f8:c2:e6:aa:13:86:f6:db:
ef:ae:e2:a2:6d:48:58:bc:f1:ae:d6:fb:82:ed:15:f2:7d:b6:
f9:35:60:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:47:52 2025 by rpki-client