Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/GtQYewNtSUKXGlHomVaTA8AnPg0.roa
File: GtQYewNtSUKXGlHomVaTA8AnPg0.roa (raw, json)
Hash identifier: U5wowpu2tyITwQfxA5NQR+vfjNJ6NeujnBx+Rq3ooQQ=
Subject key identifier: 1A:D4:18:7B:03:6D:49:42:97:1A:51:E8:99:56:93:03:C0:27:3E:0D
Certificate issuer: /CN=6b6b9a8241f08fff86c06e5c0ef1ecced643fef3
Certificate serial: 01856D5CEF031C55D379C099570931B811EE
Authority key identifier: 6B:6B:9A:82:41:F0:8F:FF:86:C0:6E:5C:0E:F1:EC:CE:D6:43:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2uagkHwj_-GwG5cDvHsztZD_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/GtQYewNtSUKXGlHomVaTA8AnPg0.roa
Signing time: Sun 01 Jan 2023 12:44:44 +0000
ROA not before: Sun 01 Jan 2023 12:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.92.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5c:ef:03:1c:55:d3:79:c0:99:57:09:31:b8:11:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6b9a8241f08fff86c06e5c0ef1ecced643fef3
Validity
Not Before: Jan 1 12:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ad4187b036d4942971a51e899569303c0273e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:92:6b:c6:7f:f7:22:10:e5:67:1c:c5:45:39:
dd:f1:9f:64:fb:04:5c:1a:d4:b6:b2:3b:46:cf:ed:
7f:18:35:51:e3:e0:6e:0a:56:61:f0:f3:84:36:a3:
b1:84:88:c3:c7:d1:c4:eb:1a:68:c5:16:7c:e6:28:
f5:8d:ca:0e:bb:5f:ef:3a:b0:68:58:20:55:2d:7d:
1c:e0:c2:d6:ab:30:01:20:1b:27:92:83:c6:95:07:
1b:16:5a:b5:74:ba:f3:6a:bf:59:89:8f:24:62:52:
47:f8:b6:ac:54:66:76:61:97:53:a0:ab:27:b3:fc:
39:17:67:70:e8:d2:cb:ec:b2:d6:8c:5c:97:95:0c:
95:06:3f:ab:50:c7:65:bf:30:f7:a5:87:eb:d0:33:
8b:26:95:9c:6a:be:30:a3:81:24:b9:21:32:f1:88:
bb:13:db:1e:59:91:45:00:92:10:67:35:fb:f1:4b:
5a:f9:fa:53:c1:1d:b6:73:1d:d7:27:c6:85:74:ea:
20:59:8e:b3:6b:42:39:6c:cd:be:fa:4c:6a:ea:81:
76:0d:38:8a:42:97:05:99:83:cd:79:ed:f0:f1:eb:
c8:60:3f:96:c6:a3:c3:88:86:a3:1c:78:ee:11:a3:
16:6f:20:04:d4:f9:c2:f0:81:ff:75:31:5b:cd:86:
b6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D4:18:7B:03:6D:49:42:97:1A:51:E8:99:56:93:03:C0:27:3E:0D
X509v3 Authority Key Identifier:
keyid:6B:6B:9A:82:41:F0:8F:FF:86:C0:6E:5C:0E:F1:EC:CE:D6:43:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2uagkHwj_-GwG5cDvHsztZD_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/GtQYewNtSUKXGlHomVaTA8AnPg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/a2uagkHwj_-GwG5cDvHsztZD_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.77.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:e7:45:14:4a:ce:78:dd:7c:cf:30:e9:6e:7a:4f:fa:98:cc:
01:cf:98:f6:df:14:af:8c:73:d4:ec:39:6a:1e:de:fb:89:6c:
e2:cd:00:61:6e:cd:ad:d0:60:77:df:aa:3e:2a:72:c5:47:ea:
b8:5b:6f:06:86:5d:1b:9a:ae:65:a0:6d:b4:9c:86:e2:7b:9a:
a9:3c:9d:9a:59:91:52:76:25:87:2d:17:9a:bd:7f:9e:4d:46:
46:0b:87:d5:32:f6:b1:fe:cb:3f:45:5f:a9:2c:f3:e8:26:c6:
c0:27:2e:03:ff:55:7d:3e:2f:52:ff:7f:b3:e2:8c:26:bd:cb:
fc:45:7b:4c:86:dc:b0:1b:f2:52:a5:fd:bc:0e:da:e1:5a:f5:
78:28:92:34:1e:80:39:46:f6:13:19:07:c7:f0:39:58:52:26:
a8:10:c8:96:c7:12:4d:c5:24:b1:91:78:5f:1a:70:9a:99:25:
8b:9f:ae:ac:83:56:4f:9f:a3:aa:f2:0f:6a:16:90:26:21:9a:
2a:f0:d5:a0:f3:57:53:86:bb:0e:ce:d7:36:b4:dc:72:1e:a6:
c4:fa:a6:5b:a2:8e:a9:65:10:68:2a:ec:cc:87:a7:45:91:c5:
18:ca:46:a8:54:62:a7:a4:80:82:f5:c6:94:b9:6e:36:bb:41:
0b:22:51:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:48:05 2025 by rpki-client