Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/FmOtZXf1vUFy-pSby0-Lth5ig0A.roa
File: FmOtZXf1vUFy-pSby0-Lth5ig0A.roa (raw, json)
Hash identifier: DWSNqc4yq+cO828Q16k/KQjhzKZCtdVKkqz9OUEjKJ4=
Subject key identifier: 16:63:AD:65:77:F5:BD:41:72:FA:94:9B:CB:4F:8B:B6:1E:62:83:40
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019427487F9F420D0905AD0547BFFA9CC87D
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/FmOtZXf1vUFy-pSby0-Lth5ig0A.roa
Signing time: Thu 02 Jan 2025 13:50:50 +0000
ROA not before: Thu 02 Jan 2025 13:50:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30823
IP address blocks: 45.89.124.0/23 maxlen: 23
45.89.126.0/23 maxlen: 23
45.91.250.0/24 maxlen: 24
185.117.1.0/24 maxlen: 24
185.117.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7f:9f:42:0d:09:05:ad:05:47:bf:fa:9c:c8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1663ad6577f5bd4172fa949bcb4f8bb61e628340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:b1:2d:b5:d0:37:6f:69:54:4a:d4:48:2d:
2c:a5:fc:1f:de:69:53:b7:6a:09:ed:28:db:e9:b2:
9e:bd:7c:24:85:57:6c:ca:b8:b8:ff:53:54:41:d2:
28:98:74:62:a6:6a:de:cf:31:c6:d3:1e:e1:14:7a:
e1:e7:6d:92:15:f3:ca:00:93:39:aa:a5:bf:dd:0b:
c0:5c:39:2d:55:14:30:f7:9e:30:f0:24:f9:76:d0:
41:08:8f:71:5e:94:2b:01:05:ea:c9:77:ba:fd:69:
cc:86:60:0c:96:6f:b3:fe:1c:63:84:79:da:13:fc:
2f:80:2c:0f:fd:a9:e1:71:aa:4f:77:b5:35:2b:c0:
b8:cd:93:39:e6:47:c9:11:c8:5a:2e:5a:85:9c:a7:
b8:bc:84:4c:b1:3b:d5:b1:ec:b5:3f:97:d0:d8:96:
92:79:09:48:66:e3:e2:53:2f:a1:b1:b3:cc:0a:bb:
4c:53:20:c4:ed:7a:1b:e6:5d:cf:1f:b5:6e:a4:b4:
b8:d9:9c:fe:7d:fc:35:ab:f8:7d:3f:82:8e:74:e7:
d9:80:8c:fb:74:ce:fb:f8:3d:42:f7:8e:3d:dc:3a:
a6:bc:d3:3d:35:6a:e1:e0:fc:85:d6:69:af:e1:18:
b8:be:8e:45:99:e1:88:0c:d3:c2:6b:8e:46:e9:dc:
b4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:63:AD:65:77:F5:BD:41:72:FA:94:9B:CB:4F:8B:B6:1E:62:83:40
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/FmOtZXf1vUFy-pSby0-Lth5ig0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.124.0/22
45.91.250.0/24
185.117.1.0-185.117.2.255
Signature Algorithm: sha256WithRSAEncryption
a8:7f:68:dc:f6:b2:e0:68:89:c4:85:a4:b9:03:a7:d9:29:77:
7b:64:d5:54:bb:03:19:0a:03:1d:bb:36:1a:05:44:3f:39:2d:
bd:6f:ec:e3:e9:db:95:f7:20:78:f0:4d:3f:bf:42:3c:ac:b4:
02:92:a4:4e:1d:30:0c:9e:c7:b2:56:e5:70:d9:ee:69:a1:62:
36:9b:72:8d:2a:6f:32:d7:5a:ae:c8:2c:51:2d:c7:59:5d:97:
d2:46:82:a6:3b:0d:cc:4d:db:c9:2d:c5:91:46:1f:5b:a7:69:
68:2c:72:c9:5e:2e:26:66:b6:63:8d:d8:02:58:29:a9:18:6f:
83:92:4a:f0:11:96:6c:b7:3b:d1:c8:e7:15:2b:c7:13:9d:3b:
78:b9:a3:db:22:79:5d:e7:4b:4b:cd:72:1d:0c:fe:60:f3:85:
6b:37:25:5b:c9:c5:17:67:f6:c3:b1:a1:27:45:79:32:1a:bb:
25:69:33:a4:49:a2:43:82:11:e3:92:52:e2:73:19:08:57:7f:
3b:f6:20:d8:29:8a:a8:69:27:92:5d:21:af:26:af:3c:82:dc:
5b:0a:fb:6f:f0:7a:ea:f8:7c:b3:f0:8b:c4:1f:f3:56:8f:c2:
15:49:9c:41:43:db:13:ef:b1:82:f1:39:88:88:6c:70:88:a9:
ee:88:23:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:48 2025 by rpki-client