Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/MVzetovtGmRyshR5xnQeUk8Tcj4.roa
File: MVzetovtGmRyshR5xnQeUk8Tcj4.roa (raw, json)
Hash identifier: mg7B6jgZRyqNtZfobIMwdCZZ8B96W2fgBgCBDsqyUw0=
Subject key identifier: 31:5C:DE:B6:8B:ED:1A:64:72:B2:14:79:C6:74:1E:52:4F:13:72:3E
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019422FB65027B7EDF7EAE3EE48B6E4FF2D5
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/MVzetovtGmRyshR5xnQeUk8Tcj4.roa
Signing time: Wed 01 Jan 2025 17:48:08 +0000
ROA not before: Wed 01 Jan 2025 17:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208226
IP address blocks: 45.140.164.0/24 maxlen: 24
45.140.165.0/24 maxlen: 24
185.248.33.0/24 maxlen: 24
2a0e:4007:fffe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:65:02:7b:7e:df:7e:ae:3e:e4:8b:6e:4f:f2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 17:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=315cdeb68bed1a6472b21479c6741e524f13723e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:42:aa:01:95:de:e7:d8:d1:31:cf:b8:5b:85:
1c:06:51:48:15:5c:3f:74:83:b7:b2:07:51:7f:37:
5b:3b:f0:f0:ab:4a:60:af:ed:00:ef:16:a5:83:3b:
a0:51:9f:d0:90:a6:2f:bf:67:08:d0:1a:7d:d7:ad:
0d:70:af:e4:64:6a:cd:a2:ef:ef:e2:c4:f0:43:fa:
a8:a0:00:0a:26:f9:ca:e8:7d:64:60:e3:3f:de:36:
83:ba:6b:cf:83:ec:a3:78:58:2b:bc:34:6c:41:4c:
5a:42:c9:f8:dd:3d:26:df:a0:bb:98:ee:8d:ad:03:
c1:31:9e:78:78:1d:0d:6f:63:58:c5:69:0c:a8:e0:
be:87:5d:68:62:37:c0:10:8c:95:8c:bf:94:74:dd:
5f:9a:50:3c:4f:54:49:da:42:03:b6:9c:6f:58:2b:
7e:9e:4c:fe:f3:f9:fa:1f:8a:90:18:05:6c:1e:e8:
5e:47:df:e4:c5:cb:3f:55:a0:c2:4a:9a:b6:4c:74:
1d:23:21:45:f2:23:0a:90:ad:96:0e:b5:4f:25:ff:
2b:fa:b2:a3:c8:f0:ab:7a:44:82:44:a2:31:7a:00:
bc:78:b9:71:95:16:c7:a2:35:14:33:c6:6c:d7:44:
b9:0c:0e:c0:ee:72:76:67:64:cb:21:af:e2:bb:3e:
ba:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5C:DE:B6:8B:ED:1A:64:72:B2:14:79:C6:74:1E:52:4F:13:72:3E
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/MVzetovtGmRyshR5xnQeUk8Tcj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.164.0/23
185.248.33.0/24
IPv6:
2a0e:4007:fffe::/48
Signature Algorithm: sha256WithRSAEncryption
b3:a6:e2:25:8d:f5:0c:2e:fe:18:8a:68:19:9b:61:4c:5f:bc:
9d:ae:39:a6:0a:d9:15:e4:ae:a6:22:9b:a0:e4:b4:f7:18:77:
48:36:d6:5b:53:b1:b7:c8:f8:36:54:41:57:69:53:39:26:ac:
f1:17:af:50:7b:13:02:47:36:73:14:94:ea:e0:bc:0a:95:16:
b4:8f:a0:d8:b4:5c:b2:57:f5:aa:66:25:89:a2:41:99:55:d6:
7c:4e:67:88:52:97:ea:09:e9:c4:cc:51:5e:a4:5c:77:5a:05:
4c:88:05:e1:1e:dd:5f:2c:92:93:3c:65:54:ad:e3:e8:f7:ac:
fc:89:19:e4:9b:1f:34:db:22:50:a0:0b:fd:e2:46:5d:97:26:
6a:95:8d:76:73:9e:59:ac:57:09:a1:44:0f:60:0a:b0:46:ae:
7b:9d:35:1a:0a:41:bd:f3:07:b0:57:6b:96:f0:99:43:0c:f8:
26:a1:04:19:07:5e:12:42:f0:3a:1e:40:00:48:7d:1f:38:4f:
47:53:b3:0a:80:b2:6c:c2:3d:9e:90:f1:ff:28:b9:84:b6:15:
ea:fb:15:17:0d:53:e7:3e:d7:fe:1e:e8:2b:8d:62:41:af:74:
73:a8:13:6a:04:ec:4a:4c:81:72:9a:c4:16:77:b1:b7:f0:7a:
89:fd:ec:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:31:11 2025 by rpki-client