Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/v71mfSr57ZG9AOQrK9WJpZ-wifg.roa
File: v71mfSr57ZG9AOQrK9WJpZ-wifg.roa (raw, json)
Hash identifier: BHRoCXp4VN2CKjYUk0rh0O8jMv/AeV/+9IvFt4a85UI=
Subject key identifier: BF:BD:66:7D:2A:F9:ED:91:BD:00:E4:2B:2B:D5:89:A5:9F:B0:89:F8
Certificate issuer: /CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Certificate serial: 018A750368C3EAB425D7A51BE3F30D3B38B2
Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/v71mfSr57ZG9AOQrK9WJpZ-wifg.roa
Signing time: Fri 08 Sep 2023 13:37:52 +0000
ROA not before: Fri 08 Sep 2023 13:37:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197555
IP address blocks: 45.139.210.0/24 maxlen: 24
45.139.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:75:03:68:c3:ea:b4:25:d7:a5:1b:e3:f3:0d:3b:38:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Validity
Not Before: Sep 8 13:37:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfbd667d2af9ed91bd00e42b2bd589a59fb089f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:4e:e1:93:c9:17:1a:6d:8f:42:8b:04:57:
14:d7:05:ed:b1:16:ee:6b:3e:f7:04:05:a4:8a:09:
4c:a3:3f:64:6f:26:08:f2:fd:5e:16:95:9b:37:86:
18:4b:d5:0c:77:2d:d4:7d:03:ad:22:68:09:99:77:
ff:65:ff:d9:60:ad:18:2f:52:c0:14:bf:56:28:78:
2b:b2:92:b1:16:2a:55:ba:c5:b4:db:51:65:3a:c3:
42:94:eb:1a:05:08:e7:2b:c6:80:8d:38:7b:59:e1:
4c:65:15:03:c2:9e:5d:7a:bd:c3:e2:aa:8f:67:76:
29:d2:22:e3:44:e3:55:60:3a:03:de:fa:09:96:ba:
b6:93:a3:1f:87:0c:fc:c3:3a:2a:fb:8c:9a:75:05:
b9:07:b9:3f:d7:ef:7b:b5:31:ea:4e:61:96:d1:5f:
b2:b1:55:63:08:6b:6f:91:51:47:ac:2a:9a:0f:25:
4d:5b:83:dd:d1:c8:ed:f4:6e:cc:99:a8:16:fa:9a:
57:f7:49:1d:77:18:89:d5:72:96:18:ca:d3:0a:5a:
b0:c7:8d:84:39:5d:ba:e8:cc:ad:cb:bc:60:8c:32:
88:5b:8e:92:62:a1:e4:58:19:13:cf:7b:65:67:5c:
07:59:06:44:5d:30:22:b7:7c:83:b9:8c:2d:3b:a6:
33:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BD:66:7D:2A:F9:ED:91:BD:00:E4:2B:2B:D5:89:A5:9F:B0:89:F8
X509v3 Authority Key Identifier:
keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/v71mfSr57ZG9AOQrK9WJpZ-wifg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.210.0/23
Signature Algorithm: sha256WithRSAEncryption
95:ef:30:c4:29:d5:80:4e:cf:32:f7:98:6e:c7:86:c3:05:11:
dd:18:f8:45:81:98:5e:1b:1b:9a:21:26:5d:4d:91:cb:f2:f7:
49:53:19:9d:f1:6e:70:54:a4:77:fe:9e:e6:81:7e:73:c8:6f:
21:1b:e7:4d:21:88:d8:1b:60:85:98:6a:ea:0e:fa:0e:68:6e:
c7:50:5c:47:90:d4:b1:e0:f4:7b:9e:71:70:3e:bf:97:ce:87:
61:2a:6b:37:cf:58:61:7b:2f:79:3e:ab:f6:db:09:c5:ca:1c:
23:f1:d1:26:76:6a:d3:8b:da:27:a4:61:b9:e4:25:e7:53:f2:
c7:77:e2:56:91:f4:b6:9e:cd:70:bb:4b:84:d0:2f:89:6b:21:
27:a2:0f:2b:a1:42:f6:ad:4f:33:1a:6d:e0:24:bc:50:33:49:
4a:42:3f:b9:66:c1:aa:56:4b:5e:bd:13:74:fb:41:89:54:cc:
0e:e3:93:eb:f3:43:7f:e7:65:a8:1e:23:6a:a8:0a:6b:e1:1a:
46:59:11:5e:fb:fe:5c:96:9a:eb:40:83:78:cd:e8:76:20:55:
2f:9f:9a:56:48:36:aa:cf:b9:92:3c:f4:12:83:f0:f7:77:bf:
90:b3:71:2a:ce:bc:fa:3b:c2:e0:1e:a8:ab:0d:01:47:4a:9a:
ef:d2:7a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:07:45 2025 by rpki-client