Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/STGvBouar9-_4KYmVGhdFg2fuj0.roa
File: STGvBouar9-_4KYmVGhdFg2fuj0.roa (raw, json)
Hash identifier: 0L4bIhYk79YDWSI93Y5CMGJpZpUgCe4tWd+HGUyb22o=
Subject key identifier: 49:31:AF:06:8B:9A:AF:DF:BF:E0:A6:26:54:68:5D:16:0D:9F:BA:3D
Certificate issuer: /CN=78356c6a831680e9b8b7c95514953007a9407e87
Certificate serial: 0194266B93A909C4ED68E7D75DC6DCD361A3
Authority key identifier: 78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/STGvBouar9-_4KYmVGhdFg2fuj0.roa
Signing time: Thu 02 Jan 2025 09:49:31 +0000
ROA not before: Thu 02 Jan 2025 09:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3223
IP address blocks: 45.87.156.0/22 maxlen: 24
185.181.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:93:a9:09:c4:ed:68:e7:d7:5d:c6:dc:d3:61:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78356c6a831680e9b8b7c95514953007a9407e87
Validity
Not Before: Jan 2 09:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4931af068b9aafdfbfe0a62654685d160d9fba3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:01:ce:8a:a8:cb:39:f6:b1:7f:98:fd:6e:e6:
ed:93:fb:17:df:90:0d:39:5a:68:fd:69:60:29:d1:
b2:46:6a:ba:98:21:e7:09:9b:79:e9:0b:41:aa:4e:
08:82:49:0f:92:53:ba:26:6e:2e:b0:a8:54:49:c0:
1c:f7:9d:bc:1c:82:f8:65:d7:17:a3:a4:a8:c5:76:
01:2a:d9:e0:07:33:11:4e:f5:42:7c:96:27:4a:ac:
ea:04:b7:4a:ec:ce:70:e0:90:f9:16:d3:24:42:90:
b6:72:1d:ef:9d:01:56:7c:89:fd:9f:e8:0b:44:61:
e3:8f:84:0b:87:f0:e1:fd:0a:56:5c:df:87:0f:96:
41:a2:76:5c:01:22:6b:48:18:d2:6f:ce:61:7b:5b:
5a:bc:2f:6b:0a:c2:44:e3:3f:24:43:6d:d2:6d:0d:
a5:67:82:bb:9b:48:25:58:c4:28:d7:2d:ec:e0:48:
24:a5:e6:d8:54:76:94:d5:38:aa:27:eb:65:d6:c0:
e9:cc:75:52:bf:ed:07:17:2a:40:a8:28:ed:09:9d:
2d:20:54:63:c2:49:0d:f7:f4:5a:05:6b:08:2f:a6:
42:60:a7:d1:10:02:22:0e:2e:ff:f1:a6:03:07:81:
33:50:65:23:03:b8:2c:18:71:76:c3:21:02:c4:b3:
8d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:31:AF:06:8B:9A:AF:DF:BF:E0:A6:26:54:68:5D:16:0D:9F:BA:3D
X509v3 Authority Key Identifier:
keyid:78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/STGvBouar9-_4KYmVGhdFg2fuj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.156.0/22
185.181.104.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:87:b2:1e:59:cb:30:3c:2b:2e:7f:39:75:cd:be:e2:cc:c0:
88:0e:e8:21:ad:70:f9:ce:dc:5f:55:dc:f0:74:8d:4a:85:52:
11:3f:7f:7a:d9:50:0e:be:45:e2:a1:f4:92:d5:2e:d4:e7:4c:
8e:42:76:95:7c:8c:32:8a:6b:c5:0a:e5:37:93:c8:43:d4:ed:
22:c8:01:db:03:5f:9c:93:84:0c:a7:0d:ec:51:43:93:73:f2:
ca:bb:3d:37:29:62:90:98:03:2f:73:8c:04:91:50:19:05:ce:
31:1b:a4:4a:a0:b5:46:fa:9a:f1:ac:63:d4:0b:76:84:6c:63:
56:9b:a3:bb:13:42:f4:89:c8:ec:00:1f:81:f2:94:fe:44:a8:
70:6a:db:46:61:92:a1:57:7b:34:37:a9:6e:8d:8e:a8:b4:06:
2e:05:a4:a6:bf:35:03:e5:42:b0:ea:d4:0c:18:4e:25:3c:1c:
ec:6b:5b:72:a3:12:32:4c:b1:6b:51:22:7e:e2:44:11:ed:de:
f4:fc:99:11:0f:b5:55:6f:69:8c:d9:03:ef:b0:f0:48:30:a0:
51:9a:36:68:4f:13:4c:0f:b6:c8:b7:ec:b6:cb:28:8a:3a:9b:
ee:23:c1:63:81:6b:01:ff:75:9f:6a:9f:a0:bb:12:10:dd:de:
68:4e:bb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:04 2025 by rpki-client