Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b8badc-b15d-4558-b58e-c6e68c8e8e3e/1/KV2Yn1hbMLp6b5j4AfZL8bqnGa8.roa
File: KV2Yn1hbMLp6b5j4AfZL8bqnGa8.roa (raw, json)
Hash identifier: IHZ4aqCnlu2l1DSbgMgczEnbxbOnA1A6eoCJSYcVxWM=
Subject key identifier: 29:5D:98:9F:58:5B:30:BA:7A:6F:98:F8:01:F6:4B:F1:BA:A7:19:AF
Certificate issuer: /CN=49324f3d95d1b9b96d0faf0df92dafa849ad4796
Certificate serial: 0186CAE1ACE2F0C39A61FDF7DC5039FEDC78
Authority key identifier: 49:32:4F:3D:95:D1:B9:B9:6D:0F:AF:0D:F9:2D:AF:A8:49:AD:47:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STJPPZXRubltD68N-S2vqEmtR5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b8badc-b15d-4558-b58e-c6e68c8e8e3e/1/KV2Yn1hbMLp6b5j4AfZL8bqnGa8.roa
Signing time: Fri 10 Mar 2023 09:37:12 +0000
ROA not before: Fri 10 Mar 2023 09:37:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40065
IP address blocks: 45.149.16.0/24 maxlen: 24
45.149.17.0/24 maxlen: 24
45.149.19.0/24 maxlen: 24
45.149.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ca:e1:ac:e2:f0:c3:9a:61:fd:f7:dc:50:39:fe:dc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49324f3d95d1b9b96d0faf0df92dafa849ad4796
Validity
Not Before: Mar 10 09:37:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=295d989f585b30ba7a6f98f801f64bf1baa719af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:32:ab:22:83:a2:87:9e:36:6b:81:bc:9a:
19:0d:f0:4e:e0:98:0a:32:e4:61:b1:5d:21:2d:ee:
fc:5e:a8:bc:e1:d5:c9:77:33:7b:51:2a:50:09:5f:
e2:69:99:7c:cb:4b:da:3b:94:20:f6:15:63:e1:04:
8a:bb:fb:30:72:eb:6a:73:78:57:a2:62:ef:d0:2e:
b4:12:b1:11:c4:98:ff:23:d9:d2:f6:ed:0a:cf:12:
0b:6a:91:33:99:e8:41:17:28:8c:d7:b5:e7:f3:85:
31:8b:ce:8d:2e:55:50:41:cc:60:51:4b:5d:0c:d4:
49:99:c9:8a:aa:80:21:1c:b0:45:62:0d:31:fc:63:
ed:a3:96:02:dd:96:e0:89:43:1f:a9:71:75:a5:c0:
94:17:44:2a:aa:5e:dd:65:76:63:5b:2d:7d:0a:a8:
8f:dd:14:f5:39:6d:b5:23:7d:4c:02:20:e1:96:3f:
aa:a4:aa:15:44:24:10:92:ae:99:1f:ae:f3:60:55:
d5:9b:06:85:de:5f:f0:e8:52:f9:18:d5:e5:34:01:
42:e8:66:0c:cb:17:df:75:51:c7:b8:66:b2:40:79:
90:7a:9e:cc:d8:55:47:17:f7:58:41:d3:bc:62:86:
bf:b6:d2:05:f5:31:f4:8f:13:94:75:5b:7f:f3:d9:
e0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5D:98:9F:58:5B:30:BA:7A:6F:98:F8:01:F6:4B:F1:BA:A7:19:AF
X509v3 Authority Key Identifier:
keyid:49:32:4F:3D:95:D1:B9:B9:6D:0F:AF:0D:F9:2D:AF:A8:49:AD:47:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STJPPZXRubltD68N-S2vqEmtR5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b8badc-b15d-4558-b58e-c6e68c8e8e3e/1/KV2Yn1hbMLp6b5j4AfZL8bqnGa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b8badc-b15d-4558-b58e-c6e68c8e8e3e/1/STJPPZXRubltD68N-S2vqEmtR5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.16.0/22
Signature Algorithm: sha256WithRSAEncryption
76:fc:a7:3c:8f:61:82:8a:75:cc:3b:b2:66:b5:d4:25:7d:b6:
45:22:a9:44:5e:67:c1:88:ab:47:56:a4:f6:9a:31:95:9a:0a:
6e:25:5b:f7:dd:87:5e:ed:79:02:de:f0:b5:e6:f2:fd:39:01:
a0:cd:11:89:c9:b8:f4:a2:1a:54:15:bf:7f:bd:04:98:e1:97:
04:b2:cb:72:b6:9e:b9:51:bb:40:c9:f7:9d:9f:d0:3b:b2:f3:
e7:df:0b:91:60:cc:b4:37:61:6d:22:6a:8e:17:b6:e0:4f:e2:
5f:35:2c:5a:b1:a8:88:ce:9e:3f:74:55:7b:77:3e:2a:0b:36:
71:fc:2a:53:b3:a3:f4:1a:6e:af:ca:98:b4:91:7d:5e:e7:a2:
ad:6d:14:97:ab:fb:56:e6:ed:fd:28:35:23:38:9f:5d:e8:44:
32:ad:b3:e7:b3:80:1c:1b:0d:38:cd:61:38:6a:57:f9:c8:d6:
20:38:d0:fc:c1:0a:c8:db:85:9c:8f:7c:01:c5:92:04:71:80:
b3:68:0c:9e:ed:4e:d5:54:13:3d:83:a3:f1:7b:95:8a:bc:e1:
61:7e:a1:94:8c:a3:75:1d:33:cb:9f:08:bd:ab:2a:67:d0:c7:
d7:69:03:a2:75:69:e9:dd:2c:a1:98:ab:33:bf:83:2a:c4:ea:
58:88:a8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:57:21 2025 by rpki-client