Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/toxzanGK-txDM2P4u6B0ryIs_7s.roa
File: toxzanGK-txDM2P4u6B0ryIs_7s.roa (raw, json)
Hash identifier: dYFNGp7KXtaTI/+1EZdNM1iGk3WC5580qGsx7KKffBg=
Subject key identifier: B6:8C:73:6A:71:8A:FA:DC:43:33:63:F8:BB:A0:74:AF:22:2C:FF:BB
Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial: 01942144598B89AE80AE225F742D0EF8BB29
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/toxzanGK-txDM2P4u6B0ryIs_7s.roa
Signing time: Wed 01 Jan 2025 09:48:35 +0000
ROA not before: Wed 01 Jan 2025 09:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 45.85.204.0/22 maxlen: 22
45.134.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:59:8b:89:ae:80:ae:22:5f:74:2d:0e:f8:bb:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
Validity
Not Before: Jan 1 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b68c736a718afadc433363f8bba074af222cffbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:3b:76:c4:b4:26:26:36:9f:ef:b3:38:33:
d3:59:6f:29:bb:75:6c:a0:30:bf:45:fd:27:31:98:
11:84:04:b6:d7:2e:d9:7d:0d:6d:99:c0:dd:be:52:
98:e9:87:6a:12:dd:98:1b:27:2c:38:f9:e6:92:d9:
8c:e5:b3:dc:34:58:9d:37:bb:65:03:be:cd:bc:a3:
86:0c:55:22:6d:58:cb:e1:c6:0c:0f:ef:88:08:22:
97:45:06:2e:07:b3:94:77:6c:32:32:f6:a4:03:b8:
68:b1:42:67:32:06:d8:0c:86:44:ee:b4:13:0e:d0:
86:a6:8a:79:b3:f5:80:7f:5a:a0:1a:7b:ad:f7:4f:
76:4f:c5:02:5b:ab:1f:7e:31:dd:4f:b4:ea:71:2b:
07:3a:e9:50:54:e5:a1:32:c3:95:43:0e:48:a7:cd:
34:39:6f:54:ea:34:50:c1:25:38:e7:93:48:b8:2b:
5e:06:16:2d:25:46:ec:5b:db:f8:13:11:1f:e9:8c:
33:94:10:f1:87:f2:03:cc:8e:fd:eb:5f:fa:a2:81:
a5:34:fc:52:e8:2c:37:84:90:82:6b:2e:9a:96:71:
b2:14:4c:2b:bb:b8:c0:20:ae:2c:ff:f4:01:0b:47:
99:b9:ef:39:cf:d0:f6:5b:8b:e0:39:30:2c:ad:90:
e0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8C:73:6A:71:8A:FA:DC:43:33:63:F8:BB:A0:74:AF:22:2C:FF:BB
X509v3 Authority Key Identifier:
keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/toxzanGK-txDM2P4u6B0ryIs_7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.204.0/22
45.134.92.0/22
Signature Algorithm: sha256WithRSAEncryption
35:83:9e:41:dc:90:02:01:5a:40:2d:80:49:82:b5:ac:17:d2:
6e:33:4c:be:88:b1:29:31:de:c5:d5:e2:4f:cb:70:1c:cc:1c:
2f:e9:c6:09:ed:ad:66:e8:12:99:c9:73:01:2f:a1:04:ee:50:
c9:cf:fa:b3:91:3b:0f:94:8f:0d:90:2b:c0:64:e6:8b:54:42:
ef:2f:5e:34:9e:c2:f2:2d:fe:71:18:c2:41:8d:07:28:f7:f5:
17:b2:30:f9:2d:6a:7a:c3:e4:09:8e:03:85:ea:66:8a:7b:36:
ee:e2:c6:a5:cb:dd:b7:3f:2f:b7:c2:e0:f6:99:b8:ef:1a:8f:
c5:ac:3f:cc:6a:04:8f:8d:9f:1d:d8:3c:bd:17:61:e8:e1:16:
2f:34:19:c0:76:da:5b:51:f2:0e:dd:3c:7f:46:7c:96:ae:74:
e8:9a:27:6b:80:fc:ef:65:91:5e:1a:63:f2:c4:4b:ef:65:a3:
b1:1b:90:98:b7:fe:3f:f4:cb:b0:6d:87:1d:cc:35:40:37:4d:
74:22:b4:eb:8c:21:08:7b:ff:db:66:9d:1f:a9:62:c1:e4:35:
ee:4a:6d:3e:d7:f0:65:d6:57:43:57:3a:ce:a3:e8:e0:0e:fe:
7a:78:0a:fc:4c:64:a0:8f:44:9b:a9:a0:89:52:ca:25:ea:55:
cd:f0:28:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:25 2025 by rpki-client