Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d8112a-788f-4805-b1e7-b722684c6a22/1/It7dFF_tjMw908VvvPlzqY9k1EA.roa
File: It7dFF_tjMw908VvvPlzqY9k1EA.roa (raw, json)
Hash identifier: 4EpSxaBLlLshC71g1Mor1MLDjP2IXohHN7CajWk1xvE=
Subject key identifier: 22:DE:DD:14:5F:ED:8C:CC:3D:D3:C5:6F:BC:F9:73:A9:8F:64:D4:40
Certificate issuer: /CN=cbc07a8aae53c641e4c5b82449dd390b08c1cd9e
Certificate serial: 01857102F7BB6AB8B0508A2505AC18FC84F8
Authority key identifier: CB:C0:7A:8A:AE:53:C6:41:E4:C5:B8:24:49:DD:39:0B:08:C1:CD:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8B6iq5TxkHkxbgkSd05CwjBzZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/d8112a-788f-4805-b1e7-b722684c6a22/1/It7dFF_tjMw908VvvPlzqY9k1EA.roa
Signing time: Mon 02 Jan 2023 05:44:57 +0000
ROA not before: Mon 02 Jan 2023 05:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199783
IP address blocks: 185.45.252.0/25 maxlen: 25
185.45.253.0/24 maxlen: 24
185.45.252.128/25 maxlen: 25
2a01:81e0::/48 maxlen: 48
2a01:81e0:1::/48 maxlen: 48
2a01:81e0:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:f7:bb:6a:b8:b0:50:8a:25:05:ac:18:fc:84:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc07a8aae53c641e4c5b82449dd390b08c1cd9e
Validity
Not Before: Jan 2 05:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22dedd145fed8ccc3dd3c56fbcf973a98f64d440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:60:7f:7c:03:44:9d:0c:de:82:c8:87:cd:01:
2d:07:e2:10:aa:0d:4b:e1:7c:f0:a3:32:0c:ea:b2:
40:5d:ba:21:e2:de:00:2e:a6:0b:a6:dc:c4:0a:be:
51:a1:93:fc:8e:92:8f:a3:6d:75:d8:fb:00:8e:c4:
5b:fc:ab:d9:6b:14:9b:64:ac:eb:df:91:f9:9d:5f:
51:af:3d:b7:eb:e7:2a:64:24:b7:f5:88:f2:43:3f:
42:9d:40:ab:c7:ed:01:ef:43:e0:36:13:be:53:6b:
6a:6e:73:51:4e:23:71:64:cd:ea:d5:33:62:64:aa:
b0:f1:21:d4:a0:4a:8b:49:da:f7:c8:9f:2e:86:0c:
ef:d8:fa:02:15:5e:01:4b:83:df:49:b5:3d:39:b9:
a3:9b:8f:3b:fe:69:e2:40:a7:39:be:02:54:a4:f4:
ab:6c:dc:58:b0:04:b1:54:be:f8:4d:37:04:5c:47:
cd:a7:e6:fb:11:5e:7f:c4:ec:d7:6e:2f:29:c0:33:
62:5a:6c:ed:a0:0d:48:34:bd:26:99:e1:03:50:9d:
ba:38:8a:26:b3:c4:a3:b6:0b:06:a6:31:9b:77:7c:
5b:f9:cf:d0:42:ab:15:24:97:95:ec:6b:71:37:30:
01:77:cd:0d:87:cc:c6:9f:f9:b7:52:f5:bb:da:5a:
4e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DE:DD:14:5F:ED:8C:CC:3D:D3:C5:6F:BC:F9:73:A9:8F:64:D4:40
X509v3 Authority Key Identifier:
keyid:CB:C0:7A:8A:AE:53:C6:41:E4:C5:B8:24:49:DD:39:0B:08:C1:CD:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8B6iq5TxkHkxbgkSd05CwjBzZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d8112a-788f-4805-b1e7-b722684c6a22/1/It7dFF_tjMw908VvvPlzqY9k1EA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d8112a-788f-4805-b1e7-b722684c6a22/1/y8B6iq5TxkHkxbgkSd05CwjBzZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.252.0/23
IPv6:
2a01:81e0::-2a01:81e0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0d:96:4b:8f:04:23:a6:20:5a:be:fe:9f:85:fd:40:54:f1:1e:
f8:b1:cf:3f:de:25:d1:d4:a4:1d:6b:40:e7:50:bb:a8:b7:c7:
90:86:7e:46:2e:78:df:f3:d4:64:7c:45:cb:c2:16:08:b0:f0:
01:0d:e4:7f:0e:b5:03:b9:12:71:6d:67:44:53:bd:9a:8c:71:
18:76:0e:a9:39:51:44:73:20:1f:e4:02:e6:ed:6c:48:e9:ae:
98:d3:82:83:77:80:78:30:21:88:2d:a0:06:10:44:d1:a9:bc:
44:01:d6:23:c9:59:af:9c:c6:51:60:b1:04:09:dc:fd:0b:c4:
4a:51:9a:0e:ff:74:ef:06:40:cd:90:d0:f9:fa:3e:b1:e8:c6:
5b:34:e6:e4:75:ee:c3:31:67:d1:9d:57:49:bb:4b:e1:a6:3e:
b8:2e:97:7d:91:97:b9:4f:49:cd:19:9e:04:f5:f1:e7:c9:2a:
17:17:30:7b:c8:97:76:20:76:6d:4f:6b:02:e3:4f:4f:03:94:
3e:e9:81:d2:ae:33:52:ab:5e:bc:88:25:1c:99:1c:5f:a3:65:
4b:80:0f:11:ce:0b:ef:94:37:b3:47:f9:c2:90:5a:63:64:a0:
9e:84:8c:ab:16:c2:a8:a0:e7:41:c5:8a:66:e8:67:1a:18:62:
e7:8b:67:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:20:16 2025 by rpki-client