Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/MTViMEQ4VGEZ2oZS0emAasRhUq8.roa
File: MTViMEQ4VGEZ2oZS0emAasRhUq8.roa (raw, json)
Hash identifier: Ej5l28LosFrmqiN08Jg24Mta0N1s2kpstTiVdo35kpk=
Subject key identifier: 31:35:62:30:44:38:54:61:19:DA:86:52:D1:E9:80:6A:C4:61:52:AF
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 018AAC5ED2D2638A021CBF34C1B55A2E8E2E
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/MTViMEQ4VGEZ2oZS0emAasRhUq8.roa
Signing time: Tue 19 Sep 2023 07:36:50 +0000
ROA not before: Tue 19 Sep 2023 07:36:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20668
IP address blocks: 45.145.19.0/24 maxlen: 24
45.135.224.0/24 maxlen: 24
45.139.68.0/24 maxlen: 24
45.91.4.0/24 maxlen: 24
45.91.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:5e:d2:d2:63:8a:02:1c:bf:34:c1:b5:5a:2e:8e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Sep 19 07:36:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=313562304438546119da8652d1e9806ac46152af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8c:9c:a4:78:24:bd:a4:cf:57:7f:ed:1c:6a:
62:b6:4d:99:53:f6:76:ef:34:5d:db:d4:3b:fb:33:
49:9c:f2:06:c4:66:f8:7b:63:79:32:19:3a:e2:33:
de:b2:53:a2:2e:98:ae:28:f7:70:30:cd:5b:98:15:
63:0e:45:06:91:7a:ff:00:6a:00:21:67:2d:2a:9b:
e2:1e:86:40:b9:62:05:1a:00:d9:8a:5c:fd:9b:b0:
98:b5:0c:a1:3e:45:ce:fb:a7:cb:66:a2:87:0b:c9:
89:96:9b:57:52:e2:b0:e5:59:5c:2e:7a:8f:40:cd:
a9:8c:eb:dd:af:a8:6e:37:5a:10:be:a2:e8:54:62:
b9:5b:68:51:11:5b:a9:90:f1:02:60:5a:fb:52:7d:
0f:bb:4f:a1:db:2d:3c:35:bd:46:1d:5e:01:2c:de:
9b:e6:87:22:07:1f:b8:9d:46:88:d4:c7:4a:77:54:
ab:5a:2d:59:c1:f4:90:85:bd:61:26:75:cc:b2:ad:
3b:b8:21:c5:18:bf:a4:47:0e:c5:d8:97:1b:7e:9f:
43:13:2d:d4:5b:e9:76:e7:b0:d3:87:68:2d:3f:6a:
b6:b6:2e:83:69:70:0c:fb:aa:1b:e8:4e:04:21:7c:
a9:9c:7d:e0:8d:1d:f1:2a:b6:e2:64:d4:5c:93:23:
36:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:35:62:30:44:38:54:61:19:DA:86:52:D1:E9:80:6A:C4:61:52:AF
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/MTViMEQ4VGEZ2oZS0emAasRhUq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.4.0/24
45.91.6.0/24
45.135.224.0/24
45.139.68.0/24
45.145.19.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d9:ad:33:88:55:9a:b6:a1:88:29:1d:99:ca:94:ec:31:8c:
c4:47:f4:84:69:85:16:b7:de:9c:89:1f:60:ac:83:da:a8:4f:
9a:11:84:2e:42:a6:8a:1b:88:bb:2f:43:48:f5:db:8b:6d:e5:
e5:74:f4:c1:35:77:fe:e0:1e:80:f2:fa:5a:31:ee:97:e8:87:
54:64:22:50:50:74:65:13:51:84:cb:51:ed:39:df:a2:d4:66:
9f:8e:d7:2e:bd:ed:39:6a:7e:7f:c8:d4:5f:f4:e6:da:22:7e:
45:c3:d1:ba:ac:fd:29:02:93:5c:29:d0:f8:46:d2:03:97:3b:
b1:38:92:47:1b:aa:25:d0:e8:e9:68:05:1c:69:b1:a9:e6:e6:
ab:7b:ae:5a:76:58:22:1b:4c:1b:2d:16:9e:2e:48:76:28:6e:
64:c2:3d:11:3a:09:a1:f3:74:e8:ed:8f:da:e0:62:83:19:e8:
30:80:1a:35:b5:4a:3a:67:26:30:5d:fd:08:0c:34:80:0d:c6:
1b:8c:6f:16:a1:5d:13:42:07:67:11:49:16:f3:13:4d:06:3c:
6f:70:75:78:12:3c:df:e5:76:83:7d:67:f8:67:85:b2:27:be:
72:2c:28:17:70:af:92:a6:a1:ad:af:5c:0d:e1:26:25:23:39:
f9:8e:6f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:50 2025 by rpki-client