Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/44bc9c-47ac-42f5-9744-c468c44fa589/1/7Urdby6cXSt2G-L2GpOYGRRbgXM.roa
File: 7Urdby6cXSt2G-L2GpOYGRRbgXM.roa (raw, json)
Hash identifier: +L+z2m6La/gRCwHhl/N3AbOqe+etz8L24tbWgNiXjvM=
Subject key identifier: ED:4A:DD:6F:2E:9C:5D:2B:76:1B:E2:F6:1A:93:98:19:14:5B:81:73
Certificate issuer: /CN=b09d2f65d7228de6ee9784ed8b6ade655f5ee778
Certificate serial: 01856F38FB96AD415734B76F466DADC02801
Authority key identifier: B0:9D:2F:65:D7:22:8D:E6:EE:97:84:ED:8B:6A:DE:65:5F:5E:E7:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ0vZdcijebul4Tti2reZV9e53g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/44bc9c-47ac-42f5-9744-c468c44fa589/1/7Urdby6cXSt2G-L2GpOYGRRbgXM.roa
Signing time: Sun 01 Jan 2023 21:24:43 +0000
ROA not before: Sun 01 Jan 2023 21:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41155
IP address blocks: 45.91.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:38:fb:96:ad:41:57:34:b7:6f:46:6d:ad:c0:28:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b09d2f65d7228de6ee9784ed8b6ade655f5ee778
Validity
Not Before: Jan 1 21:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed4add6f2e9c5d2b761be2f61a939819145b8173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:56:35:fe:4b:33:7e:35:e3:5e:4b:a8:8d:
e5:76:46:84:73:94:e2:4f:dc:d1:7a:64:55:cb:71:
e0:18:c9:7a:67:27:78:1e:57:49:bc:2a:24:e0:c9:
a7:22:ff:8a:14:44:4b:07:cd:62:35:ad:36:93:81:
ee:bd:7f:e9:05:ab:f7:e6:c6:52:b9:a8:d7:d9:33:
07:04:7c:d5:8c:5a:6b:e2:12:19:5b:d2:42:57:fc:
48:05:a9:98:92:28:4f:b9:e0:dc:65:88:fc:65:33:
e8:10:45:38:81:83:5a:65:62:3e:a7:0e:d2:ec:cc:
67:ff:12:fc:f7:56:2f:93:93:27:84:f0:a3:77:06:
90:46:66:2e:a5:97:b7:4d:38:c4:5c:81:94:57:c4:
a2:89:5e:51:f9:37:e0:44:aa:24:64:e6:04:d0:38:
fb:2d:45:41:a2:04:da:47:5e:72:14:86:16:2b:1c:
1f:74:e1:89:b6:fe:44:d4:fc:f4:36:2c:0d:4e:e3:
19:a1:45:b5:cf:1b:8f:16:0f:4c:c8:e0:9d:42:9a:
a4:3b:b1:ab:95:78:24:4a:c2:10:3e:58:50:29:21:
92:8d:41:80:8e:aa:0e:be:8d:fe:05:ca:fa:ed:7b:
ae:a3:92:e9:b3:97:31:df:8a:28:ca:0c:33:f3:ed:
35:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4A:DD:6F:2E:9C:5D:2B:76:1B:E2:F6:1A:93:98:19:14:5B:81:73
X509v3 Authority Key Identifier:
keyid:B0:9D:2F:65:D7:22:8D:E6:EE:97:84:ED:8B:6A:DE:65:5F:5E:E7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ0vZdcijebul4Tti2reZV9e53g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/44bc9c-47ac-42f5-9744-c468c44fa589/1/7Urdby6cXSt2G-L2GpOYGRRbgXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/44bc9c-47ac-42f5-9744-c468c44fa589/1/sJ0vZdcijebul4Tti2reZV9e53g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.151.0/24
Signature Algorithm: sha256WithRSAEncryption
36:4c:8a:56:1a:af:0c:d7:7f:ab:44:d6:be:eb:62:c5:87:88:
00:35:e8:79:32:e5:51:2d:1b:dc:ed:b9:59:02:83:31:7d:2b:
ce:a9:95:74:64:19:e7:2e:0b:55:b7:23:04:6a:78:2c:03:94:
78:30:a7:69:eb:b1:07:20:ef:db:f2:e1:c3:40:e2:e6:1d:2c:
8d:35:0d:d4:da:ea:05:5b:7a:71:99:b1:a8:cc:00:97:ff:d5:
49:7f:e3:fb:a1:5d:61:b1:da:a6:f0:46:5e:1e:c7:17:79:a9:
ca:53:de:91:87:8a:6e:b8:f2:e9:06:ad:a1:21:71:2a:be:e1:
2a:83:9b:be:9f:25:f1:85:99:55:83:d3:d5:93:5b:c1:26:78:
3e:9a:9f:fc:95:b4:4c:e0:67:e5:60:c0:4e:f7:ee:38:e1:2b:
df:58:15:1d:99:8a:54:71:51:10:60:bb:b4:94:42:b8:6a:df:
cb:c0:db:3f:9a:66:62:b4:ba:06:c1:16:3b:38:a6:e7:7f:66:
e3:ae:1b:04:6b:f6:83:ca:d9:17:ee:d1:7c:1f:8e:b7:b7:9a:
61:4c:06:b4:f2:9d:d5:fa:65:09:ee:0f:c8:80:7d:42:0e:d7:
11:f1:34:67:8f:22:ad:dc:f8:1d:64:88:95:77:d2:84:4a:69:
2f:9d:bf:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:12:51 2025 by rpki-client