Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/bpUknoPoxbI0JF5P8RlKMGZKbCk.roa
File: bpUknoPoxbI0JF5P8RlKMGZKbCk.roa (raw, json)
Hash identifier: DxEryGDrSUD8vsTOJYbNkz8v8Es3OlOWBxq++mvy84o=
Subject key identifier: 6E:95:24:9E:83:E8:C5:B2:34:24:5E:4F:F1:19:4A:30:66:4A:6C:29
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 04D48D28
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/bpUknoPoxbI0JF5P8RlKMGZKbCk.roa
Signing time: Wed 20 Apr 2022 08:42:54 +0000
ROA not before: Wed 20 Apr 2022 08:42:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 77.83.105.0/24 maxlen: 24
77.83.104.0/24 maxlen: 24
194.150.204.0/23 maxlen: 24
77.83.106.0/24 maxlen: 24
77.83.107.0/24 maxlen: 24
45.65.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81038632 (0x4d48d28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Apr 20 08:42:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e95249e83e8c5b234245e4ff1194a30664a6c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:85:b0:f6:cd:1f:99:73:36:a4:7e:8c:5a:57:
fd:ab:49:c0:03:a1:68:fd:e5:c7:a4:31:48:8a:ea:
a9:96:c4:76:2c:13:42:98:82:c7:6d:55:1d:53:78:
f3:77:92:51:73:b1:2b:de:d1:23:fd:0e:23:4e:be:
b7:f9:b7:40:d0:26:2f:80:c3:00:f6:a3:85:45:24:
75:79:58:16:f0:e9:a0:4a:f6:88:72:25:37:0a:db:
87:e1:96:43:c3:f0:23:87:74:be:c2:48:61:2e:04:
68:66:23:d7:6f:76:11:c3:1e:fb:2f:7c:e1:de:e3:
41:71:31:b0:05:59:df:02:27:14:3d:f0:9a:0f:9c:
32:a0:25:12:18:eb:07:f8:4b:6c:f1:f6:66:72:f7:
06:42:4a:a1:76:9c:7b:5d:c7:c5:91:f5:d6:e5:f9:
f9:af:8e:3a:b3:17:7a:92:f0:ce:b0:11:ad:30:0e:
3a:18:d8:9c:92:84:1a:37:3a:34:1c:f6:84:bc:b4:
17:79:9a:d2:eb:23:f2:6b:a6:7a:49:f7:20:0a:4c:
b9:be:ab:ca:fb:40:6e:67:7c:34:52:69:f0:92:1e:
9c:2c:fb:0c:eb:26:41:ef:c9:99:1a:72:bd:80:63:
87:3d:b5:55:ac:bf:b5:43:b8:b5:0c:e3:04:e2:8b:
db:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:95:24:9E:83:E8:C5:B2:34:24:5E:4F:F1:19:4A:30:66:4A:6C:29
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/bpUknoPoxbI0JF5P8RlKMGZKbCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.116.0/22
77.83.104.0/22
194.150.204.0/23
Signature Algorithm: sha256WithRSAEncryption
42:27:b7:e1:bd:42:b0:3f:cf:5f:71:76:de:a4:b8:c3:62:ac:
f1:b3:b5:3a:11:cf:f1:32:0e:63:67:46:3d:6a:0c:5a:85:b4:
17:e0:d0:4e:a6:6c:3c:3e:cc:95:fd:00:06:b2:85:54:76:17:
3f:ce:81:dd:cb:48:ee:11:fd:95:9a:7a:63:15:b7:76:fa:93:
c0:e4:db:be:40:fc:c3:ee:30:ba:8b:f6:99:ed:3b:3a:7a:4b:
23:38:c2:82:0e:1d:eb:89:71:23:7f:60:e1:18:06:7b:b5:f1:
f1:3c:e3:61:77:0c:45:95:c3:a0:13:ef:d7:76:86:f2:d8:62:
a7:b5:97:d7:65:92:b2:fd:ce:3e:a0:2e:08:80:3a:3a:9f:c3:
49:9a:77:41:d6:85:73:7f:d6:0a:e9:26:c3:19:be:d2:86:0a:
4e:26:ae:85:ee:42:da:6c:d2:da:34:94:dd:56:95:76:bb:f5:
51:35:16:4a:6d:e1:d8:04:5e:ec:8b:12:52:6a:cc:ad:75:9c:
45:8d:b8:64:07:a6:8d:01:a7:64:df:32:7a:ac:f3:79:4e:d1:
38:68:bb:82:e6:8c:0f:fa:78:a1:89:35:b3:ff:30:a2:90:a8:
c1:a8:bb:c0:d6:35:b5:2a:58:76:62:4f:a8:e4:7a:4d:db:5e:
e2:49:3c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:48:10 2025 by rpki-client