Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/DoVCsxFiaqgfY5-5C6UBbn8K08s.roa
File: DoVCsxFiaqgfY5-5C6UBbn8K08s.roa (raw, json)
Hash identifier: /kesa21goVfg5+gk9GRyT9KRN98uofJtKC9WMVhfiFI=
Subject key identifier: 0E:85:42:B3:11:62:6A:A8:1F:63:9F:B9:0B:A5:01:6E:7F:0A:D3:CB
Certificate issuer: /CN=6b6b9a8241f08fff86c06e5c0ef1ecced643fef3
Certificate serial: 01857B92476F10794EF18F3D6467EEE9A161
Authority key identifier: 6B:6B:9A:82:41:F0:8F:FF:86:C0:6E:5C:0E:F1:EC:CE:D6:43:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2uagkHwj_-GwG5cDvHsztZD_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/DoVCsxFiaqgfY5-5C6UBbn8K08s.roa
Signing time: Wed 04 Jan 2023 06:57:42 +0000
ROA not before: Wed 04 Jan 2023 06:57:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147293
IP address blocks: 45.92.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7b:92:47:6f:10:79:4e:f1:8f:3d:64:67:ee:e9:a1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6b9a8241f08fff86c06e5c0ef1ecced643fef3
Validity
Not Before: Jan 4 06:57:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e8542b311626aa81f639fb90ba5016e7f0ad3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:29:4f:aa:0a:dc:5e:58:53:c6:30:88:1e:d5:
f4:40:33:a1:fe:ce:ae:61:ff:c6:4a:48:6c:5a:20:
02:0f:22:fc:34:a4:a7:f7:44:52:56:d3:d7:72:19:
57:5b:a9:72:be:c7:25:25:a4:74:64:1d:08:63:c3:
ca:16:0f:fd:62:0c:83:e0:0f:66:12:f8:33:1e:2d:
d6:eb:7f:b3:8f:dd:71:a9:73:50:0f:bf:c2:4e:7e:
d0:ab:08:29:c6:76:5c:38:c3:b3:0e:03:cb:0a:81:
d8:27:00:20:a9:65:40:18:61:6a:d8:95:06:ab:c4:
2d:eb:07:e5:10:f0:4c:fd:2d:71:61:e6:d7:c1:e1:
09:46:af:76:f1:f5:80:fe:22:46:67:17:1c:46:2c:
fd:96:e9:fe:23:f7:48:ff:66:ae:8c:fc:78:46:84:
c0:0b:d7:e5:92:a9:0d:20:ee:e4:5d:35:3d:e5:15:
b4:63:b1:84:b3:f0:9e:9d:43:3b:b4:86:27:ec:b7:
47:18:ef:68:3e:54:05:78:5d:a3:45:59:cb:38:81:
fa:9e:06:af:1f:d2:6e:b0:cd:ab:67:95:3f:d8:a9:
59:5e:af:dd:72:ce:7e:ad:0f:cf:ca:09:86:4b:0a:
27:e2:d1:ef:22:63:b9:41:99:0c:88:62:32:6e:2d:
2c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:85:42:B3:11:62:6A:A8:1F:63:9F:B9:0B:A5:01:6E:7F:0A:D3:CB
X509v3 Authority Key Identifier:
keyid:6B:6B:9A:82:41:F0:8F:FF:86:C0:6E:5C:0E:F1:EC:CE:D6:43:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2uagkHwj_-GwG5cDvHsztZD_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/DoVCsxFiaqgfY5-5C6UBbn8K08s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/a2uagkHwj_-GwG5cDvHsztZD_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.77.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:28:9b:33:e8:f1:d6:3d:b8:26:bf:fc:b1:2e:39:57:32:22:
0c:c7:e9:d6:dd:e4:d6:9c:a9:51:75:d9:da:3b:81:f5:ab:a2:
f4:1e:e7:a5:75:fc:30:9d:31:1c:a8:0d:d2:81:67:6b:8c:54:
39:6f:8e:b7:17:d6:38:42:91:66:2a:60:43:8e:82:90:72:e4:
51:7d:07:c9:72:39:22:d1:48:1e:4a:88:5c:6c:a2:89:30:81:
02:c7:07:95:51:af:ee:2c:4a:44:a1:8c:28:a1:5e:b3:a9:94:
27:12:94:4d:6a:21:42:c8:cc:ef:40:ca:15:07:98:e3:16:03:
f5:49:6a:3b:22:bd:47:5d:d2:ba:8c:eb:8a:2b:e2:d9:6b:b0:
f7:b6:25:d4:6f:c0:31:88:3c:77:06:36:2b:93:ae:ac:c4:ef:
43:66:44:11:6f:ee:27:cf:ba:c6:4a:bc:91:34:1c:0d:8f:48:
38:5b:70:da:71:47:99:bd:89:25:45:a6:35:d0:06:37:4c:c7:
c2:06:25:b5:52:fa:e2:ae:aa:93:f7:8b:47:09:4a:62:bf:46:
4c:b5:9e:56:91:d4:91:c1:52:00:7c:4d:10:44:dc:c2:b7:e0:
33:82:bf:4f:13:e4:88:08:41:7d:64:9b:c5:fe:9c:99:20:b7:
f6:e3:00:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:56:08 2025 by rpki-client