Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/Bg7puHHXFHbNfS3a5sVFs0myGow.roa
File: Bg7puHHXFHbNfS3a5sVFs0myGow.roa (raw, json)
Hash identifier: V78gtn6veWPL3UM60zx4US1H9+aw1a84pPvtrJT+/sw=
Subject key identifier: 06:0E:E9:B8:71:D7:14:76:CD:7D:2D:DA:E6:C5:45:B3:49:B2:1A:8C
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 018EA257783908C3F099B96862CE9392289B
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/Bg7puHHXFHbNfS3a5sVFs0myGow.roa
Signing time: Wed 03 Apr 2024 05:03:45 +0000
ROA not before: Wed 03 Apr 2024 05:03:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 45.13.108.0/22 maxlen: 24
45.133.140.0/24 maxlen: 24
45.133.142.0/23 maxlen: 24
91.212.20.0/24 maxlen: 24
91.212.27.0/24 maxlen: 24
193.39.246.0/24 maxlen: 24
195.80.230.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a2:57:78:39:08:c3:f0:99:b9:68:62:ce:93:92:28:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Apr 3 05:03:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=060ee9b871d71476cd7d2ddae6c545b349b21a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:83:03:55:58:d3:52:0b:31:19:a3:dc:3c:6e:
3e:be:19:95:e6:bb:2d:31:77:d8:ef:2b:73:b5:26:
fb:31:d1:d3:e1:01:00:22:da:f3:e1:0e:42:ba:8c:
1f:20:b1:a0:2b:cf:f0:6b:44:b0:dd:48:13:6a:cd:
4f:08:0c:c8:9f:23:12:9b:e8:f8:3a:96:ea:aa:ce:
4b:a6:7b:83:ee:2b:51:08:ee:c8:93:2f:ba:ff:c4:
e5:cb:a5:95:aa:a7:02:04:f5:f4:db:78:67:66:01:
99:b8:31:2d:7f:36:52:ae:5f:3e:52:0e:33:5e:7b:
7e:5f:a5:30:9b:95:c0:e2:b3:b1:bb:46:18:e0:cb:
35:d6:ae:81:29:06:9f:28:47:cc:1c:7d:36:70:1e:
d2:93:f5:af:23:e5:fe:88:30:1a:f0:20:a5:a5:16:
fe:6d:3f:d1:3a:7a:5c:f6:7e:4a:68:e2:35:eb:44:
61:86:69:d3:92:17:d7:7d:8a:69:6d:09:db:11:67:
23:aa:04:8c:b0:28:be:d2:28:b8:95:3a:6d:2d:e6:
17:b3:b2:3a:4e:36:bb:92:42:e7:36:1b:35:b2:ff:
08:6c:2c:16:3a:bd:4c:1b:e5:84:5d:8e:98:3a:51:
bd:e9:f7:f4:d0:7a:e5:8d:15:f0:45:86:a7:9f:3b:
f4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0E:E9:B8:71:D7:14:76:CD:7D:2D:DA:E6:C5:45:B3:49:B2:1A:8C
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/Bg7puHHXFHbNfS3a5sVFs0myGow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.108.0/22
45.133.140.0/24
45.133.142.0/23
91.212.20.0/24
91.212.27.0/24
193.39.246.0/24
195.80.230.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:64:ac:a3:7b:5a:7b:ca:ff:87:c6:64:3c:5e:9c:47:0f:ed:
99:2d:4a:73:e9:14:ff:a4:7d:04:74:44:84:85:36:c7:ac:96:
69:d7:7b:1c:2e:c5:e3:1a:1b:c8:58:12:93:b3:6f:bc:67:ae:
f9:af:9b:4b:cb:c0:7b:05:2b:ef:58:86:0c:ce:73:6b:b6:0d:
2b:a4:8e:bd:a4:5c:a9:38:3c:c1:49:6e:67:69:92:43:df:d2:
5d:32:dc:48:22:c6:ee:2c:ce:92:e2:c1:29:a8:45:89:64:6b:
6e:85:51:1a:a9:db:ed:9d:5b:ad:01:4a:4d:54:84:6a:8c:4a:
88:b5:21:1e:98:70:1d:08:7e:34:90:0b:3e:26:22:31:e0:65:
a5:4c:bd:3e:ce:4f:5d:2f:0a:9b:5a:51:d0:9d:35:29:06:55:
ce:c6:3c:26:50:ea:f0:83:fa:ca:76:d8:3a:58:4e:7c:4b:43:
ae:d0:c9:0e:ca:8c:f4:cf:95:92:24:61:43:fd:a4:34:6b:04:
12:54:62:34:a2:ae:8b:71:55:9a:91:64:29:45:65:f9:39:67:
46:c5:6f:c1:6c:10:19:85:fc:e6:be:9c:26:fe:61:3a:94:b7:
b1:4e:96:8d:59:f5:fc:72:ab:81:28:b5:7a:1b:3a:02:04:9e:
1e:6b:c9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:15 2025 by rpki-client