Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/gDHxZbUji7wr-mGWoKXuIkootfY.roa
File: gDHxZbUji7wr-mGWoKXuIkootfY.roa (raw, json)
Hash identifier: 70+34dxCZvFHfuuFTy2guVy0VwZxzMY8MLWKv1RmvNI=
Subject key identifier: 80:31:F1:65:B5:23:8B:BC:2B:FA:61:96:A0:A5:EE:22:4A:28:B5:F6
Certificate issuer: /CN=718ab66ee3a8c1b35accddba57c0c7d148cbe55f
Certificate serial: 020AAF28
Authority key identifier: 71:8A:B6:6E:E3:A8:C1:B3:5A:CC:DD:BA:57:C0:C7:D1:48:CB:E5:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYq2buOowbNazN26V8DH0UjL5V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/gDHxZbUji7wr-mGWoKXuIkootfY.roa
Signing time: Mon 04 Apr 2022 13:05:49 +0000
ROA not before: Mon 04 Apr 2022 13:05:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.81.36.0/24 maxlen: 24
45.81.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34254632 (0x20aaf28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718ab66ee3a8c1b35accddba57c0c7d148cbe55f
Validity
Not Before: Apr 4 13:05:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8031f165b5238bbc2bfa6196a0a5ee224a28b5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:05:81:6d:e3:e7:d5:d4:83:e6:d7:37:fc:37:
51:bb:c3:bd:bd:29:b7:27:e9:31:7f:74:46:50:cd:
02:a9:1d:5f:6a:36:6a:b5:68:53:0e:fe:f0:f8:96:
58:43:ad:03:c8:26:a2:43:a8:7d:d7:18:2e:e9:62:
cb:c8:e7:43:c7:8e:1b:a1:3d:be:bc:80:6b:35:89:
66:fc:9e:e9:c7:bd:5a:89:4c:02:67:79:cc:a0:30:
2b:fc:31:54:5c:b7:04:f0:19:71:88:ce:08:7e:7e:
50:3d:d1:ed:1e:42:28:a1:55:61:72:3a:48:88:bc:
de:66:31:e6:25:85:d3:22:a8:7b:7e:c0:2a:3f:b5:
73:5e:0d:50:25:7e:ec:f9:90:70:31:bf:76:72:5f:
34:6c:99:1f:19:9b:af:b8:a9:e2:d6:60:85:e7:2d:
be:59:38:8e:74:88:d4:e2:57:4e:29:5f:d5:9e:cd:
07:11:7f:be:ad:66:55:11:58:08:bd:1e:ae:91:e6:
f0:25:61:33:33:0f:fc:8b:84:09:a7:89:46:28:ff:
9a:47:10:9e:96:80:c3:06:e1:6f:98:69:c1:53:a2:
0c:01:d1:54:46:4d:b4:a1:5e:5c:53:9f:1e:73:e0:
ec:6c:48:77:50:63:12:93:a5:dc:d6:ec:50:b1:a7:
16:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:31:F1:65:B5:23:8B:BC:2B:FA:61:96:A0:A5:EE:22:4A:28:B5:F6
X509v3 Authority Key Identifier:
keyid:71:8A:B6:6E:E3:A8:C1:B3:5A:CC:DD:BA:57:C0:C7:D1:48:CB:E5:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYq2buOowbNazN26V8DH0UjL5V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/gDHxZbUji7wr-mGWoKXuIkootfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/cYq2buOowbNazN26V8DH0UjL5V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.36.0/24
45.81.39.0/24
Signature Algorithm: sha256WithRSAEncryption
24:d9:fc:7a:c8:01:bf:7b:48:12:2c:77:d0:5a:87:a1:7c:23:
49:44:07:eb:8e:14:f0:f1:a8:ed:70:0b:11:18:3b:0c:bd:ee:
09:63:66:1d:d4:38:9e:1e:6f:66:b4:9f:e3:7b:37:20:73:11:
c4:44:b4:30:b4:c9:38:ad:a2:23:75:8e:4b:34:6e:e4:82:d6:
04:9b:dc:4c:8d:be:97:33:a5:7f:ad:4f:71:5c:79:af:13:89:
93:b6:c5:73:aa:6d:32:4d:6f:be:97:89:22:fe:a1:60:18:18:
1e:9e:e3:1d:e8:ea:33:d3:9f:ec:38:7d:76:73:c2:c8:a4:a0:
63:f8:d3:33:15:4e:d5:90:95:8b:f5:8d:c5:ac:7b:12:03:bf:
7d:a6:82:9d:1c:6e:fa:0b:72:2b:68:34:36:22:a7:b9:0d:8f:
00:1e:2f:e8:0e:79:87:66:7e:8c:7e:b6:6f:bd:7b:ad:b7:ef:
e2:ee:55:8b:d6:eb:69:53:11:f3:a2:7d:2e:a1:7e:54:c4:a6:
ea:cd:26:d3:a4:27:20:33:4c:8d:00:39:ac:21:5c:de:0a:8d:
9a:5d:83:e9:1d:df:6b:a7:d8:38:b4:f4:a2:09:3e:ab:ec:e6:
38:05:04:b9:0f:02:bd:af:04:da:0b:0c:85:e0:4d:b0:37:eb:
16:96:12:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:36 2025 by rpki-client