Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/RVBk2ljCcJ7wGV0VvygNlaSXh1A.roa
File: RVBk2ljCcJ7wGV0VvygNlaSXh1A.roa (raw, json)
Hash identifier: PGru7iTEycZTPUwH/uO+jhY5pErxWP+fyGDhUDPQaMw=
Subject key identifier: 45:50:64:DA:58:C2:70:9E:F0:19:5D:15:BF:28:0D:95:A4:97:87:50
Certificate issuer: /CN=6a0f5830dbc4bbabb682777ebd3843d750489ec8
Certificate serial: 0185E33F56FA011BA862FE2F319234117886
Authority key identifier: 6A:0F:58:30:DB:C4:BB:AB:B6:82:77:7E:BD:38:43:D7:50:48:9E:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag9YMNvEu6u2gnd-vThD11BInsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/RVBk2ljCcJ7wGV0VvygNlaSXh1A.roa
Signing time: Tue 24 Jan 2023 10:07:37 +0000
ROA not before: Tue 24 Jan 2023 10:07:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.145.120.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e3:3f:56:fa:01:1b:a8:62:fe:2f:31:92:34:11:78:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0f5830dbc4bbabb682777ebd3843d750489ec8
Validity
Not Before: Jan 24 10:07:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=455064da58c2709ef0195d15bf280d95a4978750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:00:a0:24:9d:b6:86:b6:b9:c4:44:9b:99:6c:
78:65:c5:70:2c:a2:b2:16:b6:7f:65:98:17:22:ca:
1e:8e:2a:56:22:d7:d4:54:60:41:e6:8b:e3:a5:d2:
66:c0:f0:54:67:8e:35:b2:31:3f:0e:89:56:b2:d9:
4d:ac:61:9d:47:47:1b:b5:fb:73:9b:36:ff:45:60:
5e:ce:02:f0:90:ec:bd:b8:58:0a:7d:4b:fd:65:d1:
30:84:e4:c5:16:d9:45:40:ba:94:db:15:a1:52:97:
69:d1:b6:78:b1:70:78:c6:6b:3c:ce:5a:7a:fb:95:
eb:23:76:5f:61:f2:aa:d7:4c:89:bb:cd:a1:95:cb:
69:60:39:06:61:9d:f5:4f:44:67:49:cb:2b:a3:d4:
52:76:99:e3:2e:be:4f:f8:56:a3:7a:3b:f3:c2:63:
67:b6:94:e8:e1:75:52:d9:3e:53:d2:f4:ff:e4:58:
42:9e:fa:e7:a8:3f:49:85:7f:d2:b8:f6:c3:14:6b:
43:84:04:17:8f:e4:6d:90:dc:a0:ee:55:2e:61:e1:
f2:49:cb:c5:3a:b4:81:e9:56:97:58:a7:5a:79:2a:
58:f6:71:55:e6:c7:fd:f6:fd:f1:49:e0:a7:b4:de:
00:1f:0a:b9:59:dc:e3:7c:a7:17:9b:54:b4:45:29:
32:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:50:64:DA:58:C2:70:9E:F0:19:5D:15:BF:28:0D:95:A4:97:87:50
X509v3 Authority Key Identifier:
keyid:6A:0F:58:30:DB:C4:BB:AB:B6:82:77:7E:BD:38:43:D7:50:48:9E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag9YMNvEu6u2gnd-vThD11BInsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/RVBk2ljCcJ7wGV0VvygNlaSXh1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/ag9YMNvEu6u2gnd-vThD11BInsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.120.0/23
Signature Algorithm: sha256WithRSAEncryption
56:b1:b0:5a:2d:61:c0:81:83:bb:32:e6:80:91:1b:64:19:63:
a1:8f:6b:a5:37:de:35:03:2e:2e:ff:f8:36:72:61:7d:05:59:
82:2f:7b:0a:77:e6:e3:f9:56:1a:9d:48:27:05:c9:dc:92:81:
9b:71:d4:17:62:73:77:55:82:b4:5c:d7:9d:bd:f6:0b:15:e5:
26:43:cb:16:f6:d0:36:7a:10:71:c2:c8:59:e1:27:bc:24:00:
f2:34:26:8d:1e:c3:f0:62:3f:7b:c4:d9:fc:22:97:66:ff:9c:
d3:83:a1:35:aa:ac:93:5c:06:c7:34:ac:39:14:06:ed:c1:96:
3e:ff:4e:4d:1a:68:d6:dd:8d:d9:b0:24:5a:3f:77:74:c6:56:
66:3d:7d:68:dc:e9:b9:d1:71:e9:58:06:bf:2f:cf:15:6c:40:
27:b0:97:87:be:d9:62:b0:ff:48:67:4e:b9:1d:e3:82:8d:64:
9d:12:3b:15:23:0f:24:91:8d:17:5e:79:eb:4d:ae:34:5d:23:
06:b9:dd:ba:11:4d:64:89:5f:9f:52:63:f0:32:23:5a:be:c3:
c6:b3:96:a6:d6:15:a2:83:2b:a5:1f:6b:d6:7e:e6:b2:11:81:
17:b2:8e:82:c9:df:ae:9d:c6:18:28:6d:74:e9:81:71:62:94:
23:1f:7a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:35:22 2025 by rpki-client