Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/f68eba-ad9f-40e6-96f9-beb7d2dd4c48/1/MMlsfZH0FFRmX0PtRQL-NyLbkx0.roa
File: MMlsfZH0FFRmX0PtRQL-NyLbkx0.roa (raw, json)
Hash identifier: 9OIPDJPmPI4oh7EyRSXqHayn/VUdDuivf6BOS+1apF0=
Subject key identifier: 30:C9:6C:7D:91:F4:14:54:66:5F:43:ED:45:02:FE:37:22:DB:93:1D
Certificate issuer: /CN=8536d6d8c86eac7fe626333a332294564d57b96b
Certificate serial: 052A86E6
Authority key identifier: 85:36:D6:D8:C8:6E:AC:7F:E6:26:33:3A:33:22:94:56:4D:57:B9:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTbW2MhurH_mJjM6MyKUVk1XuWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/f68eba-ad9f-40e6-96f9-beb7d2dd4c48/1/MMlsfZH0FFRmX0PtRQL-NyLbkx0.roa
Signing time: Sat 01 Jan 2022 13:59:35 +0000
ROA not before: Sat 01 Jan 2022 13:59:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 45.147.244.0/24 maxlen: 24
45.147.245.0/24 maxlen: 24
45.147.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86673126 (0x52a86e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536d6d8c86eac7fe626333a332294564d57b96b
Validity
Not Before: Jan 1 13:59:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30c96c7d91f41454665f43ed4502fe3722db931d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:3c:df:54:8e:d1:eb:c3:af:05:a9:59:4b:
9a:9b:81:88:43:04:60:ea:a5:7b:d3:b4:32:b8:35:
32:25:cb:6e:b6:c6:86:89:5e:2a:cc:16:09:57:58:
04:24:c4:3a:15:ad:68:76:a4:6b:e7:3c:2b:62:e3:
17:01:88:4b:bd:e0:07:09:c0:7d:88:f0:ce:c8:57:
47:2c:11:42:dc:b2:06:5c:ec:60:a7:0d:8f:31:82:
6f:c7:de:3e:d1:6e:e4:57:3d:00:49:50:3e:0e:03:
33:f1:98:1f:ac:48:bb:9e:96:5b:1e:33:0a:ad:2d:
48:df:54:c3:5c:c3:6d:d6:76:12:05:8a:f3:59:59:
5e:bd:b8:7c:39:62:d0:1b:e9:ec:34:2f:a3:5e:4e:
ef:c0:01:c2:6e:1e:e1:98:af:4b:27:51:7e:6b:6d:
4c:dd:36:6b:74:78:eb:63:a6:50:1f:da:66:d1:aa:
f2:81:82:7d:e7:64:7d:f5:e0:19:3b:ca:14:15:07:
41:37:0f:a7:7d:55:39:97:cd:97:bd:02:83:32:1c:
c2:8b:d5:ef:2a:92:bf:cf:af:9f:89:31:4b:fa:47:
ce:7e:12:a3:b2:38:c9:6c:a7:34:55:56:26:ef:dc:
ee:87:a2:78:be:f6:eb:6d:f3:a8:4d:3c:c8:85:fb:
50:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C9:6C:7D:91:F4:14:54:66:5F:43:ED:45:02:FE:37:22:DB:93:1D
X509v3 Authority Key Identifier:
keyid:85:36:D6:D8:C8:6E:AC:7F:E6:26:33:3A:33:22:94:56:4D:57:B9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTbW2MhurH_mJjM6MyKUVk1XuWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f68eba-ad9f-40e6-96f9-beb7d2dd4c48/1/MMlsfZH0FFRmX0PtRQL-NyLbkx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f68eba-ad9f-40e6-96f9-beb7d2dd4c48/1/hTbW2MhurH_mJjM6MyKUVk1XuWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.244.0/23
45.147.247.0/24
Signature Algorithm: sha256WithRSAEncryption
66:91:d6:d5:c4:ea:4c:a0:b2:81:0d:b3:15:53:ea:1d:d7:40:
bb:cf:4b:82:66:08:11:4e:0e:1d:ef:fe:27:ef:2a:a7:b9:72:
ae:22:dd:4e:be:b7:bf:f0:ac:b3:68:49:96:e3:d4:b7:fc:7d:
db:53:fd:4e:95:f9:9a:bb:98:7b:ec:37:63:24:4a:09:a6:4d:
02:c4:77:dd:85:52:96:05:aa:6a:59:26:56:b7:b5:f3:55:76:
9d:e0:24:73:a0:be:a1:0a:f3:63:63:93:f7:ce:9f:0e:f1:c6:
c4:2a:f6:3f:30:ff:dd:93:49:29:ca:c0:19:a1:9d:6d:db:3c:
df:ff:86:d3:37:1a:74:25:a5:24:a2:06:5e:7c:b2:90:6e:a0:
9e:ff:d2:04:a0:a5:c2:b1:02:e7:9e:21:ba:a1:51:39:7a:17:
14:61:0a:3c:06:ee:fe:b8:1d:f2:89:bb:7f:8c:bc:a6:f1:6b:
c7:e3:77:98:66:d4:62:63:b2:aa:df:7f:48:ce:c8:28:08:eb:
b8:c5:c4:16:98:39:ec:bf:33:7e:e4:ee:11:1f:1f:f8:1c:96:
28:b9:f7:b0:1d:22:74:a4:18:7b:8e:04:d6:5a:64:1b:6e:70:
b4:01:b2:c4:f0:ed:f8:05:1e:bb:4c:a9:73:61:45:db:28:c4:
bd:5b:3c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:46:33 2025 by rpki-client