Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6bbf55-4d87-4e42-ba5e-e2f93533d6e4/1/Ba0GiEeO6rOQ1fJDf5f2Tfr7wnc.roa
File: Ba0GiEeO6rOQ1fJDf5f2Tfr7wnc.roa (raw, json)
Hash identifier: eoNBPGle9tHAAA/qs56SIGQ4FmXO6Pp0QmRX38DNfPc=
Subject key identifier: 05:AD:06:88:47:8E:EA:B3:90:D5:F2:43:7F:97:F6:4D:FA:FB:C2:77
Certificate issuer: /CN=d4b39fc8a53be1dc674b6da755e86110952174e4
Certificate serial: 018D7DF43F290C7F2AA1EE1CE8C4EA85173B
Authority key identifier: D4:B3:9F:C8:A5:3B:E1:DC:67:4B:6D:A7:55:E8:61:10:95:21:74:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LOfyKU74dxnS22nVehhEJUhdOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6bbf55-4d87-4e42-ba5e-e2f93533d6e4/1/Ba0GiEeO6rOQ1fJDf5f2Tfr7wnc.roa
Signing time: Tue 06 Feb 2024 10:26:15 +0000
ROA not before: Tue 06 Feb 2024 10:26:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44326
IP address blocks: 45.154.32.0/23 maxlen: 23
45.154.34.0/24 maxlen: 24
2a0f:a300::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:f4:3f:29:0c:7f:2a:a1:ee:1c:e8:c4:ea:85:17:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b39fc8a53be1dc674b6da755e86110952174e4
Validity
Not Before: Feb 6 10:26:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05ad0688478eeab390d5f2437f97f64dfafbc277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e4:9a:01:d5:d1:ad:98:c9:00:19:2a:35:b7:
a2:68:22:4f:25:7b:07:41:8d:31:35:51:94:f3:7d:
85:98:61:1c:65:d2:fc:27:29:3f:9c:ec:57:70:6b:
6a:5b:c6:45:7d:ef:f5:8b:92:3c:a7:7b:f8:72:55:
4a:ff:cd:7b:77:2f:3f:fe:30:54:7a:6c:a8:8b:ab:
b5:e2:9d:82:f3:9c:9f:73:bb:c9:64:32:98:f3:05:
f7:14:be:40:9e:5a:14:04:d7:e7:d4:4f:ab:b4:91:
e5:d0:27:ff:7e:8c:86:0d:e3:6d:b7:77:08:c1:1c:
5b:3b:e2:f9:5e:b8:48:c3:03:e2:92:9f:6f:a8:e5:
d5:77:94:00:53:4c:a2:d8:65:bf:0c:2d:b6:3f:b6:
e8:b8:68:87:4a:b5:81:6f:e7:d1:83:ad:9e:26:fa:
e3:17:94:5d:a4:92:eb:78:b1:b4:ef:78:9e:a0:d9:
4d:67:6a:69:6a:a2:67:2d:61:63:85:c0:1b:ae:24:
8e:00:c6:e5:3f:18:66:ec:be:bc:7e:36:6b:19:a2:
f6:3f:52:06:1b:e7:43:67:82:f4:e5:0c:d2:a3:47:
c6:22:c1:2e:55:f3:da:ae:2d:45:ed:29:94:29:83:
6e:b7:6b:69:b5:39:51:5f:be:28:42:2d:24:b2:67:
09:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AD:06:88:47:8E:EA:B3:90:D5:F2:43:7F:97:F6:4D:FA:FB:C2:77
X509v3 Authority Key Identifier:
keyid:D4:B3:9F:C8:A5:3B:E1:DC:67:4B:6D:A7:55:E8:61:10:95:21:74:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LOfyKU74dxnS22nVehhEJUhdOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6bbf55-4d87-4e42-ba5e-e2f93533d6e4/1/Ba0GiEeO6rOQ1fJDf5f2Tfr7wnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6bbf55-4d87-4e42-ba5e-e2f93533d6e4/1/1LOfyKU74dxnS22nVehhEJUhdOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.32.0-45.154.34.255
IPv6:
2a0f:a300::/29
Signature Algorithm: sha256WithRSAEncryption
03:f4:14:3b:5b:96:0b:eb:52:3e:3b:88:eb:53:fd:0e:e5:2d:
3e:4c:f3:5a:ee:13:cf:fa:88:84:cc:30:62:19:ba:22:16:e0:
0f:69:32:91:d5:5f:26:b5:58:e6:82:13:99:19:c1:75:9a:33:
1b:21:d4:17:ba:d5:ed:3f:d9:5f:d3:38:5d:33:4f:e1:df:82:
b8:cd:fd:35:78:ed:62:e8:59:fd:10:17:a0:25:e8:7d:b9:5c:
c0:f7:27:6f:ae:10:5d:2e:73:34:ae:2f:9b:df:4b:ae:bf:a6:
38:4f:6f:7b:ce:27:76:ab:ea:a6:2b:75:45:b2:c6:68:b9:d6:
d1:1c:05:b6:d2:ad:b8:9e:f6:65:97:eb:85:b9:a0:71:d0:53:
a2:84:ea:bb:c3:d0:4f:b2:82:ff:e8:41:42:8f:e7:6f:e3:94:
25:0c:b7:03:72:db:7d:2c:db:13:34:80:42:aa:77:b5:46:7f:
92:da:0c:df:24:a6:50:55:23:d7:fb:f0:cb:f2:8e:ba:79:f2:
20:d5:88:77:ce:e9:5a:c3:c3:5a:70:80:76:89:e7:37:e1:2a:
bc:3c:da:c4:d9:a2:4e:7d:f6:e7:c3:40:42:3c:56:a5:f9:fd:
ad:c1:6c:6e:6e:b1:18:61:ad:4c:c6:d6:f7:99:3b:b7:99:e4:
4b:ce:12:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:54:07 2025 by rpki-client