Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/0VydyBl5ycHp_LitLqn70WkmsGs.roa
File: 0VydyBl5ycHp_LitLqn70WkmsGs.roa (raw, json)
Hash identifier: G0Vbj2gINoWCfUtMMQ5UnLSIPVG5M8aZ2AnmVlaMndg=
Subject key identifier: D1:5C:9D:C8:19:79:C9:C1:E9:FC:B8:AD:2E:A9:FB:D1:69:26:B0:6B
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 04DE9366
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/0VydyBl5ycHp_LitLqn70WkmsGs.roa
Signing time: Tue 28 Jun 2022 12:36:02 +0000
ROA not before: Tue 28 Jun 2022 12:36:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 82.118.26.0/23 maxlen: 24
82.118.28.0/22 maxlen: 24
82.118.25.0/24 maxlen: 24
213.225.238.0/24 maxlen: 24
45.146.104.0/24 maxlen: 24
45.146.106.0/24 maxlen: 24
212.2.236.0/22 maxlen: 24
45.80.4.0/22 maxlen: 24
45.132.96.0/22 maxlen: 24
141.98.74.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81695590 (0x4de9366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jun 28 12:36:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d15c9dc81979c9c1e9fcb8ad2ea9fbd16926b06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1f:16:fb:54:a6:64:6d:7a:ae:5e:b3:b6:a5:
3e:89:3a:61:12:b6:b5:f1:00:3d:6e:f1:66:53:d2:
8b:58:ed:fe:09:ae:33:b5:d5:7f:1a:70:2a:44:6f:
47:52:b0:7b:0c:e7:ca:60:88:7e:0e:24:d8:90:70:
79:ea:c1:cc:25:2c:c7:26:e8:47:cd:ca:ac:8e:9c:
e8:18:18:fb:a3:a5:c9:8c:96:52:c7:0a:65:1c:ca:
fd:b2:fe:58:f7:d3:e8:26:fc:a0:f6:5b:e0:21:99:
f5:d5:ff:4c:e3:16:40:47:bf:1c:e3:02:f1:c8:a5:
18:71:ab:be:cc:ec:8f:71:7a:1c:17:cd:4c:e9:77:
2d:95:b2:26:d1:13:0d:e7:af:74:4e:83:79:b2:9f:
86:d4:11:78:e2:55:87:e7:0f:3a:da:3c:58:02:36:
f4:d9:c2:c0:94:9f:00:4d:90:da:83:71:41:1c:21:
bd:39:8d:e7:e2:e7:a2:2a:e6:5e:d0:17:6d:1e:52:
e9:6b:19:90:5c:3e:c0:01:e4:8a:de:78:25:e7:19:
f5:ed:e8:95:79:88:07:e7:80:66:ec:99:98:d8:eb:
4a:7b:71:c9:c2:8a:d6:1f:e8:80:3b:0a:4e:02:9f:
b1:b7:d0:78:91:22:e2:ed:a7:25:ca:a3:08:09:37:
e0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5C:9D:C8:19:79:C9:C1:E9:FC:B8:AD:2E:A9:FB:D1:69:26:B0:6B
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/0VydyBl5ycHp_LitLqn70WkmsGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.4.0/22
45.132.96.0/22
45.146.104.0/24
45.146.106.0/24
82.118.25.0-82.118.31.255
141.98.74.0/23
212.2.236.0/22
213.225.238.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:96:db:8b:5b:e7:83:19:7a:6d:b9:23:24:98:be:19:33:e1:
0b:9c:af:bd:e0:51:7a:90:45:6e:ba:a3:d4:90:86:39:81:b5:
9c:e5:eb:9b:dd:cb:76:36:87:6c:7a:ae:38:cf:ea:37:66:02:
a2:bf:ca:75:ed:80:e9:27:3e:ed:c3:15:4c:47:bc:a3:2d:f4:
31:ed:0b:18:90:14:f4:e8:c3:96:93:8f:2e:6c:c6:57:15:15:
c1:7d:a4:8b:48:94:18:9c:84:a1:48:61:e3:46:88:85:50:92:
dc:9f:3b:14:13:79:e7:c2:bc:57:39:2f:03:c4:1b:e7:56:00:
a6:dd:73:4b:63:ab:93:bb:99:ad:64:88:1b:6a:4c:64:5f:cf:
68:9f:f8:55:cd:d7:a3:14:59:13:83:5e:5e:55:c7:0f:5e:52:
01:f3:da:96:56:17:63:ba:cd:7d:00:67:cf:43:d2:f4:ef:74:
ff:2f:ba:09:28:82:c7:16:aa:68:a0:95:aa:0e:dc:e3:b3:d1:
c6:4e:e4:64:49:eb:66:ca:0a:4c:22:13:e6:fb:bf:55:04:97:
af:35:51:2a:be:c7:6d:04:44:27:d7:ae:82:61:bc:87:4d:b7:
60:7d:ea:86:71:f8:6b:69:b2:88:51:ac:3b:e4:bd:e9:d2:4f:
5a:40:41:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:15 2025 by rpki-client