Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/V2YOzL3LBfWhWuT1EJ4A10Jma-8.roa
File: V2YOzL3LBfWhWuT1EJ4A10Jma-8.roa (raw, json)
Hash identifier: ORP+N0GlNbtZ2anWFwb5hHnqoLPAR+bOzVPDeMULCc8=
Subject key identifier: 57:66:0E:CC:BD:CB:05:F5:A1:5A:E4:F5:10:9E:00:D7:42:66:6B:EF
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01822767634DCA163F79896C931D16E23520
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/V2YOzL3LBfWhWuT1EJ4A10Jma-8.roa
Signing time: Fri 22 Jul 2022 19:34:23 +0000
ROA not before: Fri 22 Jul 2022 19:34:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 45.12.83.0/24 maxlen: 24
45.12.82.0/24 maxlen: 24
85.209.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:27:67:63:4d:ca:16:3f:79:89:6c:93:1d:16:e2:35:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jul 22 19:34:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57660eccbdcb05f5a15ae4f5109e00d742666bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:f5:cf:e6:f0:34:7d:ad:d8:35:0f:27:ba:
d3:9b:d5:8f:91:14:d8:14:3d:27:4d:a8:81:9a:08:
14:a7:b6:70:16:df:b1:eb:39:47:45:5b:40:dc:bd:
9f:10:66:ec:f2:a1:6f:8b:ba:ef:94:16:97:cc:33:
e9:b2:04:d6:3a:99:ec:02:53:f9:1a:60:13:9f:47:
79:b1:1b:2e:93:9d:e0:45:cf:be:51:1c:ec:ec:a4:
0d:31:7a:5e:6d:93:80:6b:7f:ad:e7:70:39:e5:7c:
11:29:71:a0:67:0c:63:7a:30:c6:78:0f:31:82:0c:
f2:59:40:c4:c1:25:a1:ee:7c:fc:41:23:e1:8e:68:
0a:1b:6b:29:0f:27:9b:d2:1d:1a:73:ba:c3:84:5c:
89:8c:56:a7:97:54:b4:cd:98:1c:9f:a5:5d:2f:1b:
f8:fa:d0:81:ae:2c:07:5f:93:cb:46:72:3b:38:17:
0e:2b:12:f3:e7:7e:75:ac:cd:b3:32:a3:7a:cd:9f:
b8:58:da:1e:ec:ac:ff:8b:60:d9:58:bc:b9:99:33:
cb:38:e6:2a:8a:d2:28:e6:ea:c9:a2:30:95:fd:e4:
a0:91:7d:0d:4c:1d:6a:f7:92:6c:c5:74:7a:7a:9f:
66:15:7a:2d:e5:f5:3b:5c:47:6f:05:dc:8d:cb:6d:
ba:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:66:0E:CC:BD:CB:05:F5:A1:5A:E4:F5:10:9E:00:D7:42:66:6B:EF
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/V2YOzL3LBfWhWuT1EJ4A10Jma-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.82.0/23
85.209.221.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:aa:77:db:ee:9d:1e:05:7c:67:b2:20:f3:e0:85:34:cf:4b:
f9:ee:88:c9:cd:20:21:da:f0:b4:75:42:82:a8:37:e6:42:b4:
e4:ab:a6:1f:d3:63:8d:ee:57:40:b1:ff:9e:37:3d:a2:34:c5:
b4:21:8d:f4:5b:2f:b3:cc:bb:2d:5c:b8:a8:93:28:2f:f1:f5:
ff:12:4d:c2:7d:91:e5:3f:dd:9d:63:4a:4a:72:8b:7e:f1:c0:
a7:ed:02:ce:fa:4b:0f:4f:90:86:d7:1c:25:bc:79:34:33:53:
44:61:e5:73:9e:81:87:d2:93:22:4e:77:e8:9b:e9:ba:28:5a:
b1:11:dc:02:8a:dc:45:ec:c0:b7:6b:c9:8f:89:04:5f:b8:5f:
ed:7c:27:1c:6d:30:41:10:2e:bf:20:ec:f5:e4:06:08:14:ae:
3b:aa:ce:8c:fa:46:9e:ae:d4:d6:10:08:05:52:b9:3a:1a:09:
3a:1c:02:da:12:b2:6a:9c:cc:10:46:47:61:bd:2c:fc:3f:b9:
56:64:35:64:62:fc:2b:5b:b8:58:46:3d:e2:01:e1:f1:55:f9:
89:f8:e2:fb:6b:8a:80:9e:60:3f:a7:b4:f8:72:71:d9:f8:46:
ac:2d:be:e1:1f:d5:ca:c2:70:81:6d:fe:eb:c7:ad:85:a7:69:
ed:7c:af:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:11 2025 by rpki-client