Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/aSLrN21bysRTCmenKeKWzISpdIg.roa
File: aSLrN21bysRTCmenKeKWzISpdIg.roa (raw, json)
Hash identifier: odaIj2QWvzPdkJJFs1G5U1lNSLHttoMpHUdzly584m0=
Subject key identifier: 69:22:EB:37:6D:5B:CA:C4:53:0A:67:A7:29:E2:96:CC:84:A9:74:88
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01856C5CA2005EAB85D2F969E73EE875AA58
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/aSLrN21bysRTCmenKeKWzISpdIg.roa
Signing time: Sun 01 Jan 2023 08:04:48 +0000
ROA not before: Sun 01 Jan 2023 08:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142430
IP address blocks: 86.62.30.0/24 maxlen: 24
45.80.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:a2:00:5e:ab:85:d2:f9:69:e7:3e:e8:75:aa:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Jan 1 08:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6922eb376d5bcac4530a67a729e296cc84a97488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2b:71:d4:dd:fd:ca:4f:9e:fd:a7:41:44:fc:
70:4a:10:6e:55:3d:09:b1:0e:13:ba:ba:56:8f:0b:
50:11:cd:73:9e:d9:d8:c5:12:42:ef:6f:2a:1d:cb:
8e:05:b1:d5:3a:b7:72:39:0d:f9:ea:6c:ab:04:d3:
a2:39:8e:37:1c:5e:8b:47:f0:6e:ab:b9:23:8d:a8:
e7:22:df:14:e8:13:ce:35:18:e1:cb:55:cc:e8:b3:
84:38:16:93:47:bf:45:40:71:1e:35:c7:08:17:7b:
81:90:84:7a:61:a5:6d:c3:a3:b3:a7:8c:29:04:20:
eb:d0:fc:c9:35:cd:23:64:d6:ec:6f:b6:53:07:80:
32:c4:fb:d1:1e:e7:2d:00:ec:a7:17:40:bc:0c:cd:
0e:3c:58:2e:56:dd:f8:e1:14:12:8d:7a:97:55:99:
d8:12:0f:93:eb:a2:70:ad:d7:99:9d:1e:8b:74:78:
0a:23:8f:43:27:16:78:49:4b:2b:26:e8:b9:bb:98:
3d:8e:ae:b0:d5:3f:2f:e0:83:33:fa:f0:ec:b3:7b:
ba:6a:51:16:a3:a8:ce:a9:12:d0:67:7d:5d:ff:f0:
e0:c7:64:3e:6a:1e:6a:53:86:db:e9:19:de:90:fe:
a0:33:f6:fc:59:75:d6:45:0c:29:a3:96:50:e3:0a:
e1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:22:EB:37:6D:5B:CA:C4:53:0A:67:A7:29:E2:96:CC:84:A9:74:88
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/aSLrN21bysRTCmenKeKWzISpdIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.29.0/24
86.62.30.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:cf:6b:e2:8a:e0:fd:80:11:f1:82:29:7c:67:5e:96:81:7d:
b8:ff:ad:b3:08:d0:b2:fd:1a:8a:ee:ec:8f:8b:2b:72:8c:d4:
eb:89:95:a7:67:8c:40:f3:bb:9b:55:b9:b7:66:39:30:9b:4e:
2b:06:67:17:85:f8:d5:68:d0:61:aa:6f:38:9f:f1:ff:5d:ea:
60:d9:07:cd:48:1f:07:f9:12:c0:05:07:67:02:4f:4e:6b:a0:
ad:5f:34:f9:ef:e9:b4:f6:6c:76:65:67:74:58:33:0c:48:c9:
72:cc:eb:b3:be:0e:fc:cc:e1:32:c6:16:cb:8d:12:a3:6d:82:
8a:d8:25:ee:71:64:d3:e7:21:09:17:62:f1:1c:c1:93:30:26:
02:b8:16:89:37:31:73:1e:c3:7d:ad:7e:2a:83:f1:29:16:4e:
ad:a6:65:d9:42:d3:59:78:fe:c4:48:c7:a4:e4:30:71:5a:62:
9e:27:a0:7d:05:4c:c9:09:ce:b1:42:57:9d:43:97:65:42:76:
e4:24:9e:49:b9:1e:da:30:0a:80:d7:a7:1f:91:0f:26:02:2d:
50:5b:0a:a7:68:92:d6:2f:52:e4:72:9d:ab:5a:e2:55:7c:15:
55:9b:24:c4:e0:d3:f2:d1:26:c1:85:64:21:c0:31:0f:c7:fa:
97:a1:6b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:26 2025 by rpki-client