Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/ItkPtexNahvw3tDr3_bT8GEZfr8.roa
File: ItkPtexNahvw3tDr3_bT8GEZfr8.roa (raw, json)
Hash identifier: SJn0U88NMdBnAS7glQzEzO/4h8XGSEZsIoQuSFWE8lQ=
Subject key identifier: 22:D9:0F:B5:EC:4D:6A:1B:F0:DE:D0:EB:DF:F6:D3:F0:61:19:7E:BF
Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial: 019425FD9EE422BCED62796FB0C24CE2F8A2
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/ItkPtexNahvw3tDr3_bT8GEZfr8.roa
Signing time: Thu 02 Jan 2025 07:49:25 +0000
ROA not before: Thu 02 Jan 2025 07:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40065
IP address blocks: 45.142.156.0/24 maxlen: 32
45.142.157.0/24 maxlen: 32
45.142.158.0/23 maxlen: 32
45.145.72.0/23 maxlen: 32
45.150.226.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:9e:e4:22:bc:ed:62:79:6f:b0:c2:4c:e2:f8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Validity
Not Before: Jan 2 07:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22d90fb5ec4d6a1bf0ded0ebdff6d3f061197ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ca:29:0a:99:d3:e3:7b:5d:94:1f:29:82:15:
fe:b1:0f:e6:51:62:29:2c:17:cb:93:8d:a0:aa:15:
8f:89:10:73:c9:64:9e:ca:5b:e7:dc:10:05:62:6e:
82:ca:2f:cc:e5:f5:c5:07:a7:e7:6c:41:bc:00:c1:
d1:4c:fa:af:2c:37:fe:2d:6c:cd:1e:c9:95:0f:db:
cb:1f:1b:46:86:14:9b:b3:c5:e3:c9:a7:b6:b9:fa:
e8:1f:cf:65:5f:4a:b3:99:4b:65:97:57:69:e7:7b:
93:8e:0d:91:54:7c:bc:4d:e9:31:1d:c6:80:42:d9:
4c:ef:ce:79:33:81:41:c2:3f:ad:f1:3a:f7:d4:52:
6b:a4:59:df:cf:b8:28:4e:27:8d:25:28:0d:20:7c:
f0:69:80:3f:57:4f:9d:d0:1f:36:0d:24:1a:de:3d:
aa:ad:cf:ff:54:bc:8b:5d:a8:0f:24:0b:51:e4:78:
90:a6:aa:e8:08:4a:a2:70:7a:5f:6f:9e:47:76:cd:
21:b1:28:19:a9:e9:fe:d2:08:a5:93:87:94:81:6c:
ac:07:ca:cb:c0:c4:29:7e:27:9b:92:77:60:3a:7d:
35:a0:22:47:fa:ad:fc:cc:94:48:16:c1:19:41:99:
2c:db:a0:c2:95:2f:22:da:88:5d:62:13:a3:a8:10:
5d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D9:0F:B5:EC:4D:6A:1B:F0:DE:D0:EB:DF:F6:D3:F0:61:19:7E:BF
X509v3 Authority Key Identifier:
keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/ItkPtexNahvw3tDr3_bT8GEZfr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.156.0/22
45.145.72.0/23
45.150.226.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:e0:1f:53:ea:7a:6c:13:71:4a:10:2f:24:8a:3b:7b:f6:0a:
8f:b1:6e:ef:b3:41:1d:ca:26:dc:c8:e8:a5:9d:4e:e3:b9:c9:
68:59:3c:97:5b:90:1c:cf:bf:b4:1c:fa:56:58:f0:66:2d:20:
44:70:33:ff:36:56:9c:0f:55:9c:bd:24:af:25:89:04:ed:05:
fc:17:1f:2c:64:49:6d:79:a2:cf:ef:d7:62:eb:3e:14:9d:df:
e7:55:92:1b:17:3d:e9:eb:ba:a1:fd:1c:c9:18:c3:50:15:48:
bd:ad:72:55:68:ca:60:be:be:8c:71:33:e4:1b:3e:98:3e:9b:
4d:f3:a6:07:47:28:db:f2:c9:18:17:b0:df:7b:f9:0a:af:a0:
ef:8f:73:ab:3e:04:1a:17:40:9e:d4:de:5b:bd:d0:2d:fa:c9:
0e:41:d6:da:ae:fc:58:57:bf:c5:a5:85:cb:92:94:e2:19:5a:
bd:4c:47:7b:fe:f4:00:42:91:12:f8:79:f2:e3:ab:c5:68:5f:
4e:03:d5:82:82:cc:5d:87:dc:dc:19:0c:39:06:07:4a:56:15:
03:b6:af:07:52:c6:fa:bc:bd:bd:25:65:81:07:f3:1d:76:21:
99:66:ca:5c:1e:fc:7c:0a:35:90:7c:33:fd:c7:dd:45:f4:46:
a1:6d:18:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:13:55 2025 by rpki-client