Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/PoBO5x_Ygu-AT9DvSuiJTf_ttjA.roa
File: PoBO5x_Ygu-AT9DvSuiJTf_ttjA.roa (raw, json)
Hash identifier: qtTisIWpOzmReY6w2mAnrMMzLySXI6rOsYAaJcyqeeo=
Subject key identifier: 3E:80:4E:E7:1F:D8:82:EF:80:4F:D0:EF:4A:E8:89:4D:FF:ED:B6:30
Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial: 019423D72B3D81BFF7490B579C7EB427F4F7
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/PoBO5x_Ygu-AT9DvSuiJTf_ttjA.roa
Signing time: Wed 01 Jan 2025 21:48:11 +0000
ROA not before: Wed 01 Jan 2025 21:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208634
IP address blocks: 45.92.40.0/22 maxlen: 24
2a0e:1cc0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:2b:3d:81:bf:f7:49:0b:57:9c:7e:b4:27:f4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
Validity
Not Before: Jan 1 21:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e804ee71fd882ef804fd0ef4ae8894dffedb630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:57:5c:07:bf:49:09:2e:a1:2b:ad:76:c1:
5a:8d:fc:ee:ef:25:a1:d6:17:2f:64:69:25:0c:89:
f2:10:e6:d9:7c:34:14:9b:15:75:e3:0c:ff:c7:b9:
54:bf:e4:a6:d2:3f:86:74:47:ea:d8:7a:b9:3f:c2:
22:37:f5:e0:8f:ca:e4:6f:cf:0d:6d:bb:17:48:42:
23:b1:6c:a1:f1:cc:52:83:90:3f:dd:e2:35:bd:89:
2a:3a:82:14:93:b7:e4:e2:62:1b:78:62:3e:7e:d3:
80:39:cf:27:11:2e:25:94:e8:d5:20:20:62:59:c8:
0b:53:b1:37:ee:a6:75:6e:33:5e:ab:12:c6:04:d8:
e0:8c:f5:2f:ca:fc:88:50:88:ba:e0:1f:b4:37:5a:
b2:4f:67:77:8e:b7:4f:62:d7:f3:a9:c6:e3:08:b2:
62:51:a5:7b:f0:09:65:3f:13:0d:07:9d:8d:a5:a9:
cf:08:cb:a2:db:65:ae:8a:53:a2:f9:47:a1:06:f4:
52:b0:de:83:72:2f:00:8b:b6:cd:86:bc:d7:7d:71:
9d:44:ec:cd:ce:ed:18:24:22:11:84:1c:f3:27:57:
97:66:a4:6f:26:67:f3:0c:82:72:d1:e7:b9:1e:51:
3c:26:15:08:fe:d7:a0:17:76:62:42:80:78:1d:d5:
6e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:80:4E:E7:1F:D8:82:EF:80:4F:D0:EF:4A:E8:89:4D:FF:ED:B6:30
X509v3 Authority Key Identifier:
keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/PoBO5x_Ygu-AT9DvSuiJTf_ttjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.40.0/22
IPv6:
2a0e:1cc0::/29
Signature Algorithm: sha256WithRSAEncryption
7c:4a:9b:dd:b4:f9:e8:07:a9:11:a3:ff:4d:e0:93:0a:8f:92:
eb:88:9c:a6:a3:35:99:46:8b:f4:ae:08:f1:d0:12:33:0e:31:
cd:22:20:0e:2c:33:14:3d:eb:fa:8a:9d:70:5d:ef:64:25:26:
bb:14:bc:ce:dc:36:3d:8f:b2:bf:17:ea:95:0e:90:6f:0e:e6:
8e:7a:0e:23:d1:ce:46:f9:89:04:50:a0:7f:ac:ac:18:58:27:
49:59:7d:42:4f:0a:39:72:01:bf:bf:22:e9:81:15:89:8f:4e:
48:ca:c2:00:02:d1:0a:69:ab:5c:d5:a0:f2:45:f2:16:31:80:
ec:c4:b3:f9:90:b6:00:1c:e1:aa:63:26:5e:a8:38:c4:93:8c:
24:d3:37:16:b4:cc:cd:30:e3:24:06:13:7a:9b:32:d3:a8:9a:
5a:12:97:6a:fe:86:e2:9e:69:11:57:2a:42:9a:7d:53:44:1a:
d4:02:75:c1:27:e3:32:d8:1d:b9:1c:70:2c:78:62:ea:0d:e8:
09:3a:c4:06:78:96:03:bc:4f:06:d2:67:ff:fb:eb:70:83:f6:
06:90:3f:5b:68:50:4d:89:5c:1e:5f:32:da:e7:a6:64:6f:b4:
99:10:d3:2c:2f:aa:5b:59:72:f3:88:25:98:8c:5c:2c:e0:cf:
8c:7d:fa:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:19:57 2025 by rpki-client