Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/83a83b-813c-4076-bc64-01d04d0b890e/1/MtP1z6dgwdSI-FWaw65GAUSAcOo.roa
File: MtP1z6dgwdSI-FWaw65GAUSAcOo.roa (raw, json)
Hash identifier: K2wEsxL2LHNvj0b02Cs70Zdde6GIh8Ipdq+wqxMIm4I=
Subject key identifier: 32:D3:F5:CF:A7:60:C1:D4:88:F8:55:9A:C3:AE:46:01:44:80:70:EA
Certificate issuer: /CN=bb7f08d35f4f76c843d1f1db00a9f7b454a94159
Certificate serial: 087C5C56
Authority key identifier: BB:7F:08:D3:5F:4F:76:C8:43:D1:F1:DB:00:A9:F7:B4:54:A9:41:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u38I019PdshD0fHbAKn3tFSpQVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/83a83b-813c-4076-bc64-01d04d0b890e/1/MtP1z6dgwdSI-FWaw65GAUSAcOo.roa
Signing time: Sat 01 Jan 2022 11:54:36 +0000
ROA not before: Sat 01 Jan 2022 11:54:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 45.81.142.0/24 maxlen: 24
45.81.143.0/24 maxlen: 24
45.81.140.0/24 maxlen: 24
45.81.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142367830 (0x87c5c56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7f08d35f4f76c843d1f1db00a9f7b454a94159
Validity
Not Before: Jan 1 11:54:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32d3f5cfa760c1d488f8559ac3ae4601448070ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:17:90:d3:12:46:bc:23:33:12:7a:60:89:
ae:f5:c6:7d:ce:f5:d0:2e:ac:19:52:17:a1:25:33:
73:da:9d:ce:07:fd:70:d5:8a:12:91:c4:70:b0:cc:
2c:1d:0f:c2:d4:c8:14:03:e8:a8:ad:89:cf:07:21:
01:74:01:97:5a:55:3d:07:ef:92:0b:c5:47:5b:53:
5c:4d:25:ca:c6:ec:42:21:b1:bc:91:c5:1c:1d:44:
df:f8:0e:19:33:89:30:6a:f8:9d:2b:68:3f:ab:b6:
a5:e3:03:29:4b:f2:52:45:ad:76:a1:2c:dc:81:15:
c3:31:dd:88:a6:6d:e2:c0:a6:75:2a:d7:20:bc:03:
c8:46:01:43:32:5b:20:f8:4d:1b:b0:64:6c:f1:38:
a8:e2:de:c7:27:1e:83:16:e9:2d:f8:a2:39:bc:8a:
64:a5:83:1a:13:ad:a6:3c:78:44:f0:d6:6c:99:21:
10:d7:ee:e8:77:36:03:b2:3c:1a:54:5f:4f:b5:9d:
d7:af:4f:43:04:fd:22:b2:72:42:89:fe:92:5e:e6:
16:da:18:fa:3d:82:ee:25:70:a0:d5:58:da:65:00:
8f:42:2a:96:4d:c1:ce:f1:71:5a:e5:ff:20:16:d3:
37:16:60:c4:67:00:d3:e1:28:28:3e:ea:97:85:f7:
d8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D3:F5:CF:A7:60:C1:D4:88:F8:55:9A:C3:AE:46:01:44:80:70:EA
X509v3 Authority Key Identifier:
keyid:BB:7F:08:D3:5F:4F:76:C8:43:D1:F1:DB:00:A9:F7:B4:54:A9:41:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u38I019PdshD0fHbAKn3tFSpQVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/83a83b-813c-4076-bc64-01d04d0b890e/1/MtP1z6dgwdSI-FWaw65GAUSAcOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/83a83b-813c-4076-bc64-01d04d0b890e/1/u38I019PdshD0fHbAKn3tFSpQVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.140.0/22
Signature Algorithm: sha256WithRSAEncryption
03:8c:98:6e:34:a9:d6:f0:ec:0c:1f:0e:11:05:45:65:68:de:
cd:8a:64:6c:fd:c5:2b:46:ac:3b:48:9e:88:af:1d:67:b4:38:
8a:8e:ee:40:59:66:84:fb:be:0c:b2:72:61:19:fc:c7:d9:c4:
b9:8a:6b:01:b4:66:04:f1:99:2b:13:d0:e9:5b:29:1d:ec:16:
51:81:90:d5:c9:05:f5:3c:9f:e8:86:3e:de:2f:54:41:25:70:
36:3a:1b:3f:f3:d4:a4:1b:99:0b:99:aa:e7:ff:41:fd:9a:71:
93:3b:e4:ff:d3:7e:7e:10:e9:e9:3f:7a:ff:35:0d:5c:3a:cd:
1d:af:b3:b8:4d:c5:fe:09:47:78:8a:72:c9:b7:7f:7e:b1:7f:
b6:33:13:af:ee:e8:5d:27:d8:68:cc:26:00:3e:ee:6d:a5:f6:
d7:3c:2f:cb:fc:f7:e4:93:a2:bf:e5:46:a4:16:6c:1f:49:f3:
ca:66:35:6e:e7:f2:ca:13:49:d8:e3:72:92:53:7f:bc:7c:6b:
98:50:2b:7f:a7:6d:70:59:8d:a5:66:01:27:e3:64:3e:54:8b:
12:d6:e3:e3:12:b4:4a:7e:62:06:f7:fb:56:14:04:53:a2:5f:
c7:e2:56:dc:32:46:fd:9e:3a:a2:46:96:2a:36:41:28:b5:a8:
cc:39:71:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:54 2025 by rpki-client