Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/A7QL9AX2fKQ1OQkddJbnXs85EKs.roa
File: A7QL9AX2fKQ1OQkddJbnXs85EKs.roa (raw, json)
Hash identifier: qVpd8Zpp6nztj6+GvI5BpqTJuxR+f+OPmjL8EQZwSMY=
Subject key identifier: 03:B4:0B:F4:05:F6:7C:A4:35:39:09:1D:74:96:E7:5E:CF:39:10:AB
Certificate issuer: /CN=6b6b9a8241f08fff86c06e5c0ef1ecced643fef3
Certificate serial: 01856D5CEF8AFC61A41FCF61311DA9CD2D7F
Authority key identifier: 6B:6B:9A:82:41:F0:8F:FF:86:C0:6E:5C:0E:F1:EC:CE:D6:43:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2uagkHwj_-GwG5cDvHsztZD_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/A7QL9AX2fKQ1OQkddJbnXs85EKs.roa
Signing time: Sun 01 Jan 2023 12:44:45 +0000
ROA not before: Sun 01 Jan 2023 12:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51847
IP address blocks: 45.92.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5c:ef:8a:fc:61:a4:1f:cf:61:31:1d:a9:cd:2d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6b9a8241f08fff86c06e5c0ef1ecced643fef3
Validity
Not Before: Jan 1 12:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03b40bf405f67ca43539091d7496e75ecf3910ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:d6:41:ab:61:49:df:cb:60:04:aa:78:4d:
fe:9a:31:9b:e8:06:94:a9:0f:c9:d6:8a:b7:5f:b4:
f6:02:b7:68:d2:fe:8d:d3:1e:f5:ed:87:ba:30:6c:
ee:1a:e0:5c:81:24:7d:2d:e3:72:11:67:a6:da:17:
6c:1e:8a:94:42:94:d8:42:04:32:9f:d3:17:7a:de:
bf:13:74:7c:30:74:cb:fc:f1:3a:e9:4e:27:4e:ea:
65:14:cb:2e:5c:8e:6d:97:23:00:b0:e3:68:73:45:
1c:b3:07:60:fe:5a:e8:59:bd:0c:d7:37:7f:05:12:
14:7f:c0:60:56:0e:3e:12:6b:a8:12:03:ad:cf:a9:
e7:26:ea:5c:e9:ce:77:41:0c:f4:45:da:35:35:02:
90:e8:44:2d:2c:d3:4c:90:c2:95:0f:8b:e8:fe:b5:
bb:25:a9:05:48:68:b4:d9:4c:60:aa:1d:d6:38:45:
05:07:de:a4:75:29:8a:64:2c:f6:00:b9:c5:8a:8d:
c7:ba:2e:41:fb:73:c4:49:29:0c:d8:a2:35:e7:7d:
00:ef:ae:01:3c:fa:73:90:a0:21:e0:e7:59:ca:dc:
03:59:66:e3:ed:aa:96:ed:73:07:9d:9f:fb:57:9b:
6a:79:28:ae:de:48:55:2f:91:ed:b1:1b:7c:9f:75:
a5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B4:0B:F4:05:F6:7C:A4:35:39:09:1D:74:96:E7:5E:CF:39:10:AB
X509v3 Authority Key Identifier:
keyid:6B:6B:9A:82:41:F0:8F:FF:86:C0:6E:5C:0E:F1:EC:CE:D6:43:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2uagkHwj_-GwG5cDvHsztZD_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/A7QL9AX2fKQ1OQkddJbnXs85EKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/a2uagkHwj_-GwG5cDvHsztZD_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.77.0/24
Signature Algorithm: sha256WithRSAEncryption
39:54:8e:6a:1b:71:46:03:93:9f:4d:c4:47:c2:8e:0b:f7:c1:
e3:db:84:10:be:23:ad:6f:7e:9f:2a:b0:6d:82:b0:e1:ac:ff:
89:41:35:dc:f8:66:9d:3a:af:04:e6:49:10:fe:74:09:ac:d6:
cd:35:ee:48:e0:21:1b:6d:b0:8f:6f:9e:dd:0c:0f:bc:47:8c:
e6:6c:2a:5c:65:58:16:03:35:37:ea:e7:39:b1:4f:eb:90:3d:
c2:b5:46:f5:48:6f:b1:af:5d:1f:b9:33:c6:d9:f4:b6:f1:37:
0a:01:b3:cf:28:5e:6b:5e:3e:25:53:88:2e:f7:da:dd:f0:9c:
83:c2:84:83:7e:08:6c:a9:9e:b1:aa:17:4b:09:ec:63:95:05:
cf:d8:6f:8b:ea:91:62:40:33:ec:fa:ef:29:23:91:42:53:6d:
29:cf:d0:61:56:e5:f1:c5:93:37:c4:4f:dc:c5:c7:28:5d:03:
9e:38:be:2f:5f:ab:5a:e3:f3:da:d9:ca:db:e7:9a:b6:c9:54:
15:b9:da:ed:59:2f:27:39:22:d3:71:27:61:a0:1f:9d:01:86:
ec:31:64:64:f6:ba:ce:a8:47:7d:86:48:74:2e:2f:25:8b:2c:
f5:8c:4d:02:86:c2:17:36:fd:c7:a5:12:10:69:9b:1c:24:5f:
ff:52:13:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:40 2025 by rpki-client