Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b8badc-b15d-4558-b58e-c6e68c8e8e3e/1/sneK3LQiz2FpfZbKkd5LOqk0DAs.roa
File: sneK3LQiz2FpfZbKkd5LOqk0DAs.roa (raw, json)
Hash identifier: NnUZ39TCz1Fdjs9rZpOHmCpaEszUjLKDuG2Z50ygzZ4=
Subject key identifier: B2:77:8A:DC:B4:22:CF:61:69:7D:96:CA:91:DE:4B:3A:A9:34:0C:0B
Certificate issuer: /CN=49324f3d95d1b9b96d0faf0df92dafa849ad4796
Certificate serial: 0186C5D40B9811ADCA65027D54B319B8505F
Authority key identifier: 49:32:4F:3D:95:D1:B9:B9:6D:0F:AF:0D:F9:2D:AF:A8:49:AD:47:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STJPPZXRubltD68N-S2vqEmtR5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b8badc-b15d-4558-b58e-c6e68c8e8e3e/1/sneK3LQiz2FpfZbKkd5LOqk0DAs.roa
Signing time: Thu 09 Mar 2023 10:04:13 +0000
ROA not before: Thu 09 Mar 2023 10:04:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40065
IP address blocks: 45.149.16.0/24 maxlen: 24
45.149.17.0/24 maxlen: 24
45.149.19.0/24 maxlen: 24
45.149.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:d4:0b:98:11:ad:ca:65:02:7d:54:b3:19:b8:50:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49324f3d95d1b9b96d0faf0df92dafa849ad4796
Validity
Not Before: Mar 9 10:04:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2778adcb422cf61697d96ca91de4b3aa9340c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:97:28:60:47:2e:2b:a1:e2:87:d2:50:4b:e2:
66:09:81:e5:f9:91:e4:9e:cd:91:af:f9:61:63:ae:
b4:42:aa:ab:a6:6c:e5:88:2f:86:75:10:de:e7:02:
61:4f:43:4f:a4:19:c2:67:6d:d8:20:6c:12:e5:92:
ff:b5:9f:99:62:23:59:14:1c:62:37:b1:39:82:74:
5a:35:2f:05:12:20:18:88:e5:e4:d4:7b:87:fb:f3:
4b:41:76:9f:d1:1f:17:52:16:9e:58:3d:f2:be:f6:
2f:79:29:51:3a:db:44:a6:1b:7a:99:ad:28:b0:12:
63:d2:7d:6d:b4:32:09:54:73:ae:11:77:f5:7e:91:
62:59:b9:04:2b:11:c5:85:c6:68:1c:1a:45:d8:3b:
72:bb:b9:a3:12:41:4f:e8:67:35:6e:4e:6e:c1:7c:
50:23:23:5a:94:d9:de:78:31:0a:6f:9b:79:d2:b5:
be:04:ba:e1:eb:76:86:7d:90:f8:38:65:e8:ea:ab:
e3:32:94:5f:d4:5f:f7:79:f8:23:25:1d:57:52:8f:
1a:d7:4d:8f:9b:fb:d4:95:84:eb:6b:8f:86:aa:da:
ea:c3:c0:6f:67:31:cd:f0:15:6f:e0:4c:85:2b:48:
a3:9d:de:cd:85:4b:e6:05:30:8c:3d:fc:28:9c:c9:
5e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:77:8A:DC:B4:22:CF:61:69:7D:96:CA:91:DE:4B:3A:A9:34:0C:0B
X509v3 Authority Key Identifier:
keyid:49:32:4F:3D:95:D1:B9:B9:6D:0F:AF:0D:F9:2D:AF:A8:49:AD:47:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STJPPZXRubltD68N-S2vqEmtR5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b8badc-b15d-4558-b58e-c6e68c8e8e3e/1/sneK3LQiz2FpfZbKkd5LOqk0DAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b8badc-b15d-4558-b58e-c6e68c8e8e3e/1/STJPPZXRubltD68N-S2vqEmtR5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.16.0/22
Signature Algorithm: sha256WithRSAEncryption
12:ed:aa:35:15:03:eb:ca:82:8c:1d:c3:3f:d9:48:5f:8f:53:
97:39:ba:32:ac:73:36:38:9e:79:c1:1f:a1:c4:9d:a8:fe:83:
50:ab:54:a2:02:4e:bd:7a:22:bb:45:42:a2:0e:26:41:2c:1a:
a1:3f:49:1d:e7:fb:f5:28:5b:15:37:ba:c8:57:4f:a7:bd:87:
91:e6:cb:00:59:bd:a4:3c:e7:bf:c5:0e:aa:e4:af:d2:55:69:
0e:59:39:64:22:ac:bb:b6:cc:b2:3c:4a:3a:ba:bc:b9:23:59:
30:32:c5:02:ff:54:7a:79:2d:f9:89:7e:6b:df:54:03:09:4e:
64:a4:1c:63:e8:b8:dd:88:00:de:bc:70:c0:7e:b7:a9:b1:50:
24:3d:57:13:15:44:a4:da:78:c9:a3:52:16:eb:b0:0d:80:65:
ae:c4:14:8e:ce:ed:c9:e3:b8:46:70:e0:6b:c5:29:72:e0:28:
a0:f9:7a:5e:88:a8:c8:c9:b5:c3:42:11:83:ef:0c:8a:f3:a7:
d6:b5:db:50:c3:1f:5e:db:ef:42:e9:eb:f2:2a:40:2b:59:b5:
73:d8:ac:9d:c8:3f:6e:e9:a3:81:59:d4:97:b4:5f:e2:25:d1:
7e:b1:9a:40:1c:85:1a:87:78:74:75:b8:52:b0:b0:46:5e:f7:
a8:25:77:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:40:40 2025 by rpki-client