Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/0pxjStoTlDBcVu6elA6zkBO8xwU.roa
File: 0pxjStoTlDBcVu6elA6zkBO8xwU.roa (raw, json)
Hash identifier: Ci5qZ/HtIb+6XQOxy4Hghw2SFaKcdZEtbJxpLGnJcPQ=
Subject key identifier: D2:9C:63:4A:DA:13:94:30:5C:56:EE:9E:94:0E:B3:90:13:BC:C7:05
Certificate issuer: /CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
Certificate serial: 0185362DD36873F4353A662B8CACBA493C0E
Authority key identifier: 61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/0pxjStoTlDBcVu6elA6zkBO8xwU.roa
Signing time: Wed 21 Dec 2022 19:34:10 +0000
ROA not before: Wed 21 Dec 2022 19:34:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210636
IP address blocks: 45.144.198.0/23 maxlen: 24
185.102.169.0/24 maxlen: 24
45.144.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:36:2d:d3:68:73:f4:35:3a:66:2b:8c:ac:ba:49:3c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
Validity
Not Before: Dec 21 19:34:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d29c634ada1394305c56ee9e940eb39013bcc705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c1:f0:51:6a:5a:f9:ef:c0:c1:38:77:75:d4:
cf:e9:6c:01:42:b7:81:6b:ef:ce:4c:06:40:89:db:
84:1c:ff:68:fe:30:25:11:da:23:3c:34:bd:2b:5a:
c2:f1:4a:c8:bb:96:6c:e4:0c:92:93:85:d0:ab:30:
24:66:9c:b2:b8:be:31:b5:b4:ed:aa:28:7d:e0:9e:
99:f0:de:01:42:45:2e:d7:7b:73:e1:b4:97:17:71:
31:62:ba:d5:c3:52:cd:71:e3:6e:9c:5d:e0:7a:47:
f7:d8:19:d4:5c:3a:c7:7b:86:02:b4:9e:2a:d0:92:
95:4a:45:44:d2:88:7d:2a:aa:6a:cf:b2:91:17:70:
f4:68:09:10:47:29:79:8d:7f:91:66:0e:4d:e1:1b:
c2:0b:7a:89:36:45:c8:73:43:ba:08:c5:99:68:ee:
05:01:7a:9f:f2:db:c2:05:6b:00:2b:12:99:f2:25:
60:a5:a1:35:f4:86:77:ad:1e:07:d8:c3:6a:6d:98:
fb:9f:5f:63:6e:91:f8:0b:82:6b:79:33:94:5e:96:
a4:ef:e3:db:4c:01:ef:10:29:06:6c:94:29:05:0f:
1a:01:78:da:db:ad:1d:8a:5d:d6:6c:92:b5:e6:ae:
dc:d2:50:72:ff:2b:5e:0d:b9:8a:1c:69:d4:89:09:
2f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9C:63:4A:DA:13:94:30:5C:56:EE:9E:94:0E:B3:90:13:BC:C7:05
X509v3 Authority Key Identifier:
keyid:61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/0pxjStoTlDBcVu6elA6zkBO8xwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/YYL6MljC0s6hWExW8CYlwD_ysNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.197.0-45.144.199.255
185.102.169.0/24
Signature Algorithm: sha256WithRSAEncryption
50:00:e6:14:08:1d:4e:d3:12:45:0b:ad:9e:bf:25:c7:68:73:
b8:6f:55:2f:a8:5b:c3:bb:86:fb:f2:55:3c:a1:c8:3b:53:8a:
3d:4a:46:cd:5d:09:3e:80:bf:46:f4:32:d4:24:c3:fb:88:b5:
98:9d:79:c5:97:e2:70:0d:a1:eb:54:9b:5e:35:5e:e6:cb:20:
dc:0a:a2:12:b5:7a:21:5a:90:0c:14:71:e5:de:6a:ba:98:e5:
43:67:3f:24:71:b3:6e:c3:2d:7b:7d:bb:d7:b5:87:38:d2:05:
8f:18:bc:ca:50:c8:2a:70:54:fe:21:50:f8:2e:10:36:b4:1b:
35:01:e6:48:41:ab:c2:3e:64:a4:18:78:c8:3d:37:a2:67:5f:
63:d3:d4:74:84:2a:d3:d7:55:57:50:b6:c7:c0:fa:e7:d7:44:
63:a7:33:ef:4b:f2:23:14:8c:1f:c2:70:23:7e:ef:0d:a5:43:
c9:d0:8e:8b:aa:ac:87:a6:8a:51:29:7d:89:d1:80:f8:a7:da:
c8:51:41:09:b8:7e:63:d0:09:9d:70:04:36:bb:3b:81:13:48:
20:6c:2f:e6:90:b6:58:9c:41:68:12:6b:2e:4b:bc:e9:15:fc:
49:4f:79:fa:a5:b4:17:cd:03:0c:2d:35:57:82:48:ff:df:6d:
53:93:e0:b6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:03:43 2025 by rpki-client