Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/6iM0OIEt8VQyomXL_2ImqV9BeSo.roa
File: 6iM0OIEt8VQyomXL_2ImqV9BeSo.roa (raw, json)
Hash identifier: r/Z26tt4yBGoaqBiMwf9FX0zAOEkGFcL1sqSOxIJZp4=
Subject key identifier: EA:23:34:38:81:2D:F1:54:32:A2:65:CB:FF:62:26:A9:5F:41:79:2A
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018FE5507A7D36816D34FF6A5B67F67E72A1
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/6iM0OIEt8VQyomXL_2ImqV9BeSo.roa
Signing time: Tue 04 Jun 2024 22:13:27 +0000
ROA not before: Tue 04 Jun 2024 22:13:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e5:50:7a:7d:36:81:6d:34:ff:6a:5b:67:f6:7e:72:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 4 22:13:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea233438812df15432a265cbff6226a95f41792a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4f:70:f8:b9:b8:62:89:71:aa:c6:20:79:11:
43:fc:3e:fb:bb:68:af:25:f1:45:f1:71:3a:17:e3:
8f:a9:c8:1d:78:02:06:22:05:c4:b6:d5:40:2b:7d:
a3:ac:82:e1:f7:c2:3f:81:23:36:e7:ba:c6:2d:2b:
9c:f0:36:20:2e:5f:7c:74:62:c9:4d:55:3c:32:ee:
52:3e:d0:06:8c:10:02:de:41:c3:96:82:42:ab:3f:
5f:91:bb:75:b5:96:bd:42:72:68:7d:96:ff:6e:b0:
9e:b2:2f:cb:fd:55:29:93:cc:c6:a0:77:1a:e5:43:
58:1e:51:ee:69:3b:f4:bd:15:a4:e1:f6:47:f1:36:
c9:95:4a:6d:9f:30:09:c4:f7:c1:2a:e8:e9:f1:d2:
70:4f:59:fc:21:42:47:64:35:1b:20:db:00:5c:9f:
07:a9:d9:03:ca:32:48:39:4e:20:aa:8e:c3:c6:61:
33:48:40:33:39:98:4c:fc:90:54:e9:9f:92:9c:c3:
8c:f9:7c:5b:62:45:02:66:42:34:1a:01:fb:a4:b5:
49:77:ec:5b:85:11:8b:42:91:44:34:33:25:e8:25:
41:91:a2:db:0b:14:de:5e:ad:26:af:1c:b6:05:d4:
2c:49:23:7b:71:ab:0e:58:74:f2:84:fb:5a:c5:3b:
6d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:23:34:38:81:2D:F1:54:32:A2:65:CB:FF:62:26:A9:5F:41:79:2A
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/6iM0OIEt8VQyomXL_2ImqV9BeSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.205.0/24
Signature Algorithm: sha256WithRSAEncryption
05:c9:06:b3:25:d6:8c:c1:44:41:7d:fb:03:7c:ac:2e:10:9a:
4e:b4:d6:73:40:01:24:01:d7:9d:58:ce:46:a3:a3:9d:60:ff:
57:3f:e0:c4:ff:1d:2d:9f:46:a8:8c:10:e4:2e:5b:3b:fb:91:
24:6d:eb:79:4d:66:46:ea:04:24:35:4d:17:84:0f:71:e4:39:
b4:c6:97:b1:ce:04:d4:7c:4e:18:57:86:d2:69:b1:cd:0b:05:
f1:73:53:94:65:a6:e2:c1:ee:60:71:62:17:5c:27:9c:99:6e:
75:d6:f4:d7:6c:76:02:7d:f9:75:08:2b:2b:88:9b:52:23:bc:
88:26:ab:61:ed:52:c0:7b:75:72:24:8e:68:3a:69:47:d9:d8:
55:a1:86:85:c5:f7:13:81:5a:08:d3:59:51:d1:d2:50:d7:d5:
cf:e4:cb:53:2b:53:04:59:ce:7d:37:28:f2:94:e8:ee:8c:4e:
4c:16:78:96:72:47:b2:83:f4:a1:01:d0:68:7c:15:99:04:2d:
9a:c0:e1:fb:cf:d4:33:f9:77:ff:ac:93:5f:c9:55:f3:e5:e9:
6d:b6:8e:aa:f3:96:b8:49:6b:6b:b4:81:dc:4f:72:ba:89:d3:
0c:0a:b8:22:10:cf:11:bd:7a:be:0b:b8:58:5d:6f:37:e3:6b:
c8:51:19:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:10:29 2025 by rpki-client