Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/6pgC2WmbvOwKxQdYhXcqJyv8gLI.roa
File: 6pgC2WmbvOwKxQdYhXcqJyv8gLI.roa (raw, json)
Hash identifier: YzcBdSuJXmc3F8XHuHfPgYGMrEVDV50rG3CcR70Lp9E=
Subject key identifier: EA:98:02:D9:69:9B:BC:EC:0A:C5:07:58:85:77:2A:27:2B:FC:80:B2
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 0194266BCB69C23A05C881F5B97A7E0DB8C2
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/6pgC2WmbvOwKxQdYhXcqJyv8gLI.roa
Signing time: Thu 02 Jan 2025 09:49:46 +0000
ROA not before: Thu 02 Jan 2025 09:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214279
IP address blocks: 45.146.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:cb:69:c2:3a:05:c8:81:f5:b9:7a:7e:0d:b8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 2 09:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea9802d9699bbcec0ac5075885772a272bfc80b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:8c:a8:1c:d4:18:9c:03:3c:ff:60:89:2c:
64:3d:72:87:c6:03:97:65:03:7c:f5:ad:68:e1:45:
62:9b:b3:c1:17:25:b0:cb:2c:fb:59:9e:23:75:8a:
a9:0f:d4:dd:61:b0:c3:84:98:7a:0b:22:5c:29:e9:
60:a0:7b:bb:33:3c:23:bd:3c:c1:ab:a8:03:26:25:
00:ab:c1:55:92:e3:fd:a6:07:79:7d:a1:9b:06:df:
f3:d1:be:3c:5e:4a:b7:5e:cc:a3:35:70:bc:27:7f:
bf:c7:90:c4:96:99:a4:9c:7b:13:d6:d7:16:b1:c6:
07:45:60:4b:22:55:8b:b3:45:df:57:a8:a2:05:7c:
33:3a:44:61:72:b3:2e:c4:83:f6:b4:a1:d5:51:d5:
1b:48:61:a6:bb:9d:b9:e9:3e:3f:55:b3:ba:a3:5a:
10:e2:8d:11:05:0c:e0:d0:fa:c0:82:ed:41:94:b6:
ad:b3:af:14:f9:17:16:2a:16:eb:26:c3:ee:77:5d:
cf:26:fd:67:4a:3a:48:7e:cb:70:5e:50:68:e7:38:
cb:64:a3:cf:0c:a0:77:fc:71:a9:79:ee:6e:ef:a6:
91:39:e7:81:e5:0a:22:b0:6e:5c:37:88:66:1e:1e:
4a:e6:cd:38:cb:e0:d2:72:c6:1e:94:16:55:65:77:
6c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:98:02:D9:69:9B:BC:EC:0A:C5:07:58:85:77:2A:27:2B:FC:80:B2
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/6pgC2WmbvOwKxQdYhXcqJyv8gLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.202.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ee:6d:52:35:1a:52:6a:eb:a9:85:82:a0:6e:49:8e:41:b1:
87:f2:6f:d1:15:cd:7f:91:5b:ec:01:b3:49:80:88:78:d6:c7:
65:9a:19:8b:f2:7b:0f:24:7a:04:78:55:f5:38:ff:17:26:8d:
50:dd:6f:79:a8:09:48:8f:9e:4c:20:41:40:fd:c4:1b:23:58:
d0:f6:cb:e2:33:74:a6:2f:3e:19:5e:de:2b:9e:e9:bd:55:62:
12:df:e4:a9:86:45:2b:8b:3c:61:9a:85:e2:76:c3:a2:92:33:
c0:49:92:20:6b:8f:9c:62:c1:25:63:6c:73:26:a0:8e:f2:a0:
69:6f:46:74:53:26:2d:8f:d9:9f:71:b8:68:8d:50:11:e3:b1:
57:ef:86:0f:35:3c:f6:e7:e3:db:0f:d0:67:68:50:a1:d5:e7:
6b:53:b4:11:da:34:d0:95:5c:bf:7c:66:d9:8c:f6:9c:b4:2b:
06:39:44:1f:09:26:e4:39:b3:1a:4f:3a:f0:45:66:ec:02:9a:
85:d8:18:be:f1:d5:1d:d8:9e:dc:75:29:7f:13:31:d8:86:22:
bc:f4:d0:bf:95:7d:2c:95:f1:78:c3:75:34:6d:01:cb:c5:59:
1f:8a:04:ed:fc:2b:55:d5:1d:f8:51:96:4d:80:c9:7f:a1:26:
68:3c:0c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:55:12 2025 by rpki-client