Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/VY6eGI_a6Y97kj5eqc3fec7C9Gc.roa
File: VY6eGI_a6Y97kj5eqc3fec7C9Gc.roa (raw, json)
Hash identifier: PTFBVdcyherryTJPMKmrn7MYY2boIbLWBFzgW7lSKuM=
Subject key identifier: 55:8E:9E:18:8F:DA:E9:8F:7B:92:3E:5E:A9:CD:DF:79:CE:C2:F4:67
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0191BEE1C4BFA018A8BF448DE5DEAEFC55AC
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/VY6eGI_a6Y97kj5eqc3fec7C9Gc.roa
Signing time: Wed 04 Sep 2024 21:12:32 +0000
ROA not before: Wed 04 Sep 2024 21:12:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12679
IP address blocks: 45.151.97.0/24 maxlen: 24
45.151.98.0/24 maxlen: 24
94.137.72.0/24 maxlen: 24
94.137.78.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:be:e1:c4:bf:a0:18:a8:bf:44:8d:e5:de:ae:fc:55:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Sep 4 21:12:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=558e9e188fdae98f7b923e5ea9cddf79cec2f467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:70:b4:bb:7c:93:59:ef:49:a1:ae:cb:a2:
7f:10:2f:34:30:c2:b6:09:91:ab:56:01:f6:b5:80:
53:dc:ca:f6:f9:ee:bc:b8:74:eb:61:0e:89:0f:90:
64:f5:6c:c2:58:75:3c:82:ed:44:b0:d5:20:36:1d:
5d:a7:8e:f1:b1:3b:67:15:6c:96:cd:2e:31:b7:f7:
05:cb:d1:e3:d1:28:7c:0b:13:cb:a9:08:2c:d3:84:
0c:1f:5f:14:0f:bc:11:67:f9:bd:33:73:49:4a:9e:
55:e4:25:ce:b3:b9:c8:29:fb:ce:55:6e:92:44:53:
38:63:42:e6:10:73:82:0d:3e:71:ec:c9:8f:da:10:
0d:86:72:1d:3a:82:a0:15:8a:cd:e9:ea:84:22:69:
1f:32:72:30:78:5e:a0:54:b8:8b:87:e8:26:f4:78:
cf:0e:e0:bf:a8:cf:cd:40:b9:7e:1c:4c:b6:84:be:
01:05:c4:33:24:0d:33:2a:c0:c9:5c:29:5a:3a:60:
13:5e:5f:48:ba:b0:98:9f:05:13:64:24:ec:86:57:
49:44:5b:44:81:1e:31:0a:30:bb:5b:44:a3:aa:62:
b7:42:c2:2a:3b:be:b2:b6:e8:98:4c:7c:fb:03:e3:
d1:59:15:c5:50:12:50:cc:1d:7b:87:15:74:75:ba:
15:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8E:9E:18:8F:DA:E9:8F:7B:92:3E:5E:A9:CD:DF:79:CE:C2:F4:67
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/VY6eGI_a6Y97kj5eqc3fec7C9Gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.97.0-45.151.98.255
94.137.72.0/24
94.137.78.0/24
94.137.89.0-94.137.91.255
Signature Algorithm: sha256WithRSAEncryption
07:5f:9b:08:3d:1c:d2:73:7d:87:88:54:48:0c:9b:58:44:2e:
0b:2f:15:17:dd:ea:47:49:9d:53:92:76:81:ba:81:ca:7e:83:
b9:11:b4:df:23:74:84:da:1d:a0:bd:56:b6:45:1d:14:1d:c7:
e3:b4:c6:92:1f:4b:af:4a:89:5c:cd:fc:1c:63:83:c0:66:c9:
c6:ab:19:4d:ce:f7:8d:25:8b:d7:ae:f0:15:63:b9:4d:d5:69:
b2:f9:39:96:82:6f:f6:3d:33:d6:d4:3f:a6:87:1c:34:19:0c:
ef:3c:77:e3:52:48:e7:7a:40:e8:7f:bc:cc:1c:73:6b:9a:a4:
b3:bc:48:6c:0c:00:ec:fa:48:90:25:be:6a:27:67:7a:5c:b4:
92:e8:45:82:49:26:e4:e5:27:61:ef:5c:1d:60:f0:6e:ae:37:
ea:c9:c2:6a:cc:5f:b1:bc:65:c5:bf:53:c5:ae:ca:ae:ca:29:
a1:3e:03:48:7f:e5:89:48:89:e5:d5:f7:3a:88:5c:c1:96:0d:
36:96:db:1e:1e:a9:f3:f9:15:52:65:b1:2e:a8:71:2b:22:94:
8e:26:ba:3d:1e:e0:53:ef:f6:a6:3f:54:ab:1b:19:e8:51:93:
dc:a5:dc:58:10:b9:4e:2e:1c:94:8c:f2:44:05:a2:5c:5b:b4:
43:22:7f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:07 2025 by rpki-client