Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4e03f0-9820-496e-bee5-74ec15e72ee8/1/UJ6MkU8kN4a8aMtPLxX8ZNDpnHI.roa
File: UJ6MkU8kN4a8aMtPLxX8ZNDpnHI.roa (raw, json)
Hash identifier: ZIeTHPxPM9Dc3z7m8AgALCxKJP22KCijTByC7RItNhc=
Subject key identifier: 50:9E:8C:91:4F:24:37:86:BC:68:CB:4F:2F:15:FC:64:D0:E9:9C:72
Certificate issuer: /CN=fb0726994524a2757a42c9d6e4e0e1726c795931
Certificate serial: 04518D
Authority key identifier: FB:07:26:99:45:24:A2:75:7A:42:C9:D6:E4:E0:E1:72:6C:79:59:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wcmmUUkonV6QsnW5ODhcmx5WTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4e03f0-9820-496e-bee5-74ec15e72ee8/1/UJ6MkU8kN4a8aMtPLxX8ZNDpnHI.roa
Signing time: Fri 29 Apr 2022 12:37:05 +0000
ROA not before: Fri 29 Apr 2022 12:37:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208525
IP address blocks: 45.80.108.0/24 maxlen: 24
45.80.110.0/24 maxlen: 24
45.80.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283021 (0x4518d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb0726994524a2757a42c9d6e4e0e1726c795931
Validity
Not Before: Apr 29 12:37:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=509e8c914f243786bc68cb4f2f15fc64d0e99c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:20:d1:0b:7b:1d:61:eb:e0:5c:f6:55:02:69:
fe:05:3e:80:9e:cc:97:6a:f0:74:29:ac:f3:9e:27:
fe:d1:d5:d2:d4:7b:4f:c7:39:02:80:94:69:55:83:
91:79:2b:ed:e3:f0:17:58:04:cf:64:72:b7:93:8f:
de:81:1d:a3:67:23:ad:70:85:54:e9:e3:27:65:34:
0c:cb:b3:d1:a0:cb:70:89:ac:17:0d:a7:27:9f:91:
09:94:30:3c:71:8b:c9:37:6c:7a:39:fa:5d:ff:d5:
22:26:31:38:07:57:ba:ca:88:a8:fb:5a:9f:c4:f2:
43:44:e7:56:99:24:60:f6:a6:94:90:76:f7:5b:c0:
51:d6:9c:fc:92:32:7a:25:59:f7:5a:ab:10:a6:2a:
e6:54:4e:ef:86:4b:c4:ae:2a:36:09:13:66:69:33:
6c:11:95:a2:bb:9c:0e:e3:e9:25:58:08:66:71:87:
b7:61:37:2a:b6:4c:7c:3b:95:56:8e:82:af:bb:a0:
4e:30:bd:0f:d4:7f:7e:12:f4:2d:67:e5:a9:3f:24:
b9:d9:c5:d1:ce:12:67:56:86:35:60:f5:33:b6:3c:
9f:30:7a:4d:be:19:5d:5a:0e:c4:4d:47:09:2c:30:
ad:96:e7:d8:e8:2b:8d:ee:56:d4:68:9f:64:b8:e8:
2e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9E:8C:91:4F:24:37:86:BC:68:CB:4F:2F:15:FC:64:D0:E9:9C:72
X509v3 Authority Key Identifier:
keyid:FB:07:26:99:45:24:A2:75:7A:42:C9:D6:E4:E0:E1:72:6C:79:59:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wcmmUUkonV6QsnW5ODhcmx5WTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4e03f0-9820-496e-bee5-74ec15e72ee8/1/UJ6MkU8kN4a8aMtPLxX8ZNDpnHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4e03f0-9820-496e-bee5-74ec15e72ee8/1/1-wcmmUUkonV6QsnW5ODhcmx5WTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.108.0-45.80.110.255
Signature Algorithm: sha256WithRSAEncryption
6d:80:f2:e7:7f:92:d5:6c:15:95:4f:f5:3a:0b:9a:2a:49:d2:
db:0b:36:2b:11:ec:1f:a6:ee:d0:b3:92:c4:06:86:2c:1f:bb:
4c:37:1c:1a:bd:88:e0:dc:43:24:71:48:95:d4:33:96:ed:c3:
3d:3a:cf:3d:b7:df:e2:7f:14:6c:fd:2e:bc:a7:b3:96:a7:d8:
30:a4:f3:05:ea:75:38:e9:2f:fd:3d:a0:0b:b4:3e:78:4c:d3:
10:0f:9e:14:70:86:ce:89:2f:05:9b:46:7d:4d:bd:41:fd:3f:
10:f1:9b:ae:4f:25:a8:b7:56:2c:74:b1:f9:c2:4d:a8:f8:06:
2e:28:45:b0:6b:0d:b7:09:45:64:f5:19:a7:39:eb:3e:cd:c6:
5f:9d:84:cb:44:95:6a:1a:62:9f:e0:0b:06:ef:65:30:9c:9f:
b0:9c:4a:52:b6:14:e2:ba:67:32:2b:e2:35:de:c9:66:9d:a6:
44:63:77:f3:c6:fb:8f:f0:84:51:a7:53:a7:c6:9a:b3:82:e8:
68:34:9c:3f:8f:36:7e:82:e9:d5:62:ac:b2:33:04:61:f5:e8:
9c:f5:25:43:63:8c:c4:82:7a:a8:0b:85:6f:d9:c5:a2:89:12:
e5:1c:ad:a6:35:70:36:b4:49:3b:6f:a7:75:9e:da:ca:ad:cd:
86:e1:6f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:27 2025 by rpki-client