Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/bSgqQQckpHNXMMPv-eMo6_bav6M.roa
File: bSgqQQckpHNXMMPv-eMo6_bav6M.roa (raw, json)
Hash identifier: ImKseQut48M2zuUf6O2jbdY+W3UmHVDt1Y3xoNTtc9E=
Subject key identifier: 6D:28:2A:41:07:24:A4:73:57:30:C3:EF:F9:E3:28:EB:F6:DA:BF:A3
Certificate issuer: /CN=d33e4bb69ef9189b9e4bbcb5fe896c84bbe02ed4
Certificate serial: 02A8D6C1
Authority key identifier: D3:3E:4B:B6:9E:F9:18:9B:9E:4B:BC:B5:FE:89:6C:84:BB:E0:2E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z5Ltp75GJueS7y1_olshLvgLtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/bSgqQQckpHNXMMPv-eMo6_bav6M.roa
Signing time: Tue 21 Jun 2022 07:58:44 +0000
ROA not before: Tue 21 Jun 2022 07:58:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 45.88.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44619457 (0x2a8d6c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e4bb69ef9189b9e4bbcb5fe896c84bbe02ed4
Validity
Not Before: Jun 21 07:58:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d282a410724a4735730c3eff9e328ebf6dabfa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:99:6f:e5:f7:27:94:10:9e:7c:59:da:05:73:
2f:6f:07:2d:d4:7d:e9:5b:56:ac:b9:c7:e2:20:4f:
d4:1f:59:42:6d:c2:f9:cd:74:0c:0d:23:cd:e1:8f:
95:ca:a7:44:a9:82:81:0a:4e:4b:6b:a5:dc:53:54:
35:25:76:ea:48:60:02:5d:3a:39:29:78:2f:32:c5:
e9:8f:48:5a:d6:30:1d:57:5b:f8:d0:01:72:ff:ce:
46:93:6e:1b:0b:cb:08:db:00:eb:de:bb:20:b0:da:
dc:77:8c:93:2c:5f:f5:4c:c9:bc:73:62:aa:e6:fc:
87:4c:6e:69:87:9b:1f:e5:49:b3:92:9d:5a:95:d4:
d1:f8:1c:d2:71:cc:5d:ef:75:4c:d2:ee:31:21:45:
94:3a:20:bc:99:f7:9b:51:86:04:54:da:f9:37:f1:
45:c8:70:0e:d4:64:20:d9:60:c2:b7:7a:c4:29:b6:
cd:cd:81:bd:dd:7b:4b:64:b7:44:58:67:14:10:fd:
09:e2:18:ed:18:26:10:e3:eb:75:89:bd:95:1e:d2:
20:de:d2:6d:bf:0e:0e:32:16:40:c2:26:04:3e:e2:
67:df:0e:e0:b9:c5:fb:de:e7:d8:e7:75:a9:bd:ab:
20:1b:5c:d1:d9:5e:c9:ca:ca:bf:b0:d9:71:7e:6f:
bd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:28:2A:41:07:24:A4:73:57:30:C3:EF:F9:E3:28:EB:F6:DA:BF:A3
X509v3 Authority Key Identifier:
keyid:D3:3E:4B:B6:9E:F9:18:9B:9E:4B:BC:B5:FE:89:6C:84:BB:E0:2E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z5Ltp75GJueS7y1_olshLvgLtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/bSgqQQckpHNXMMPv-eMo6_bav6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/0z5Ltp75GJueS7y1_olshLvgLtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:f1:71:8e:54:ba:fb:8d:c3:16:31:e2:af:c1:44:09:d3:b8:
e6:68:56:c9:16:aa:0a:ae:9d:d5:56:58:97:e0:fd:b8:c3:82:
0c:d6:df:ee:8a:1b:b6:35:27:ff:32:23:3e:90:10:f2:d7:8c:
ba:62:e0:bf:4c:83:0b:e2:ac:0c:63:5c:9a:a2:1a:3d:34:b6:
a4:74:65:76:d9:67:68:93:73:22:b0:1f:77:d1:56:24:0a:03:
de:0c:73:81:5f:ed:5e:f7:f9:e7:48:63:96:37:cc:07:3c:75:
91:19:55:18:0e:01:39:7a:10:50:42:17:f4:06:09:71:f3:9c:
70:c5:7c:3c:eb:15:f9:fd:8b:8f:d7:f7:f1:5b:13:6f:69:5d:
55:d7:c8:5f:6f:84:61:35:a8:e3:7a:5a:f5:d1:02:da:ac:b4:
38:f6:21:9d:e9:41:90:d8:a2:47:e2:b2:e1:d4:96:6b:de:21:
55:f5:8d:7c:6c:1a:f7:f2:87:fe:9c:36:f2:67:41:f0:35:83:
95:85:dd:07:83:cc:ec:ed:02:3c:2a:69:7a:05:fb:1f:69:30:
c2:49:a5:56:e0:a5:e2:b5:6b:ee:c6:37:fc:31:c2:a0:64:20:
06:9b:bd:c1:84:6c:86:ab:6a:b3:f0:54:02:56:6a:84:11:15:
84:f7:02:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:21 2025 by rpki-client