Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/kTZLubP3uIMgWSDsm9Az1QT6zNY.roa
File: kTZLubP3uIMgWSDsm9Az1QT6zNY.roa (raw, json)
Hash identifier: yiA+hEtz+yYPNbTmlAVn0BvVrBCv5GJok+9HIZUqjnU=
Subject key identifier: 91:36:4B:B9:B3:F7:B8:83:20:59:20:EC:9B:D0:33:D5:04:FA:CC:D6
Certificate issuer: /CN=6b6b9a8241f08fff86c06e5c0ef1ecced643fef3
Certificate serial: 018CCA99920E00C8EA94B040DC949B1E104C
Authority key identifier: 6B:6B:9A:82:41:F0:8F:FF:86:C0:6E:5C:0E:F1:EC:CE:D6:43:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2uagkHwj_-GwG5cDvHsztZD_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/kTZLubP3uIMgWSDsm9Az1QT6zNY.roa
Signing time: Tue 02 Jan 2024 14:35:11 +0000
ROA not before: Tue 02 Jan 2024 14:35:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51847
IP address blocks: 45.92.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:92:0e:00:c8:ea:94:b0:40:dc:94:9b:1e:10:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6b9a8241f08fff86c06e5c0ef1ecced643fef3
Validity
Not Before: Jan 2 14:35:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91364bb9b3f7b883205920ec9bd033d504faccd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:18:00:a7:f6:ee:dd:a3:fe:b4:18:ca:e1:17:
ce:39:24:17:ad:9d:18:98:18:72:f1:40:e3:b3:8c:
f3:e8:aa:a5:4c:88:69:fa:67:80:54:45:8c:6c:31:
01:0f:d3:ef:88:57:cb:a7:46:5e:e9:d2:71:38:27:
a4:83:a1:81:f4:f9:d3:46:dd:4d:49:98:84:1e:05:
f6:cb:84:fb:a5:2c:21:4d:a5:2e:c1:a2:23:19:92:
e3:00:28:99:ac:e0:ad:69:37:64:6a:c3:f8:d2:c8:
b9:51:68:ab:29:c8:5f:91:af:48:3b:33:57:d7:35:
20:d6:47:c7:ea:d4:6a:19:b8:67:e7:5f:a4:9b:3d:
46:5b:94:50:27:17:57:22:fe:20:74:e9:25:db:fb:
ce:70:66:53:25:44:de:d1:f2:88:b3:36:01:bd:a9:
1c:fc:ec:ba:08:cb:7d:50:df:47:c4:d4:fe:19:75:
c1:48:e4:3d:a3:35:71:eb:36:1e:06:03:77:7d:3e:
4c:4e:68:34:45:10:b0:5b:26:fc:86:b3:df:2f:28:
02:da:26:82:9a:1a:ec:f4:af:06:ce:ae:70:06:57:
54:6c:71:ef:cd:14:99:ca:c3:f0:17:67:bd:1d:ab:
01:be:22:b9:ed:0c:5c:89:d8:ee:6f:b7:46:3c:3e:
d7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:36:4B:B9:B3:F7:B8:83:20:59:20:EC:9B:D0:33:D5:04:FA:CC:D6
X509v3 Authority Key Identifier:
keyid:6B:6B:9A:82:41:F0:8F:FF:86:C0:6E:5C:0E:F1:EC:CE:D6:43:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2uagkHwj_-GwG5cDvHsztZD_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/kTZLubP3uIMgWSDsm9Az1QT6zNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/a2uagkHwj_-GwG5cDvHsztZD_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.77.0/24
Signature Algorithm: sha256WithRSAEncryption
16:7d:6e:69:22:af:8a:a8:e2:40:ce:cd:41:5e:ab:aa:aa:67:
b5:9d:e9:32:3b:95:02:f1:dc:fb:d7:d3:bb:3c:3a:db:66:95:
27:3d:91:27:15:0f:bc:cb:21:50:f3:da:37:91:80:fa:25:42:
92:df:df:0c:2d:9d:dd:8d:1b:b4:46:b6:e3:f1:0e:f0:98:6f:
df:27:0e:45:3a:c4:7d:39:c8:a2:33:6a:b7:88:f5:fb:7a:59:
73:67:eb:3f:6a:4c:84:5b:bb:2e:9d:d3:74:48:bc:b8:dc:8b:
70:cf:ad:61:ab:7e:ca:13:88:37:06:f8:8b:16:67:d5:1e:b8:
f2:69:50:55:a4:4d:25:43:88:c5:9b:6b:b1:dc:e7:1d:7e:c2:
7a:3e:9b:f9:c0:23:15:d6:57:42:55:62:b1:89:80:33:62:fe:
44:db:11:ee:c2:5f:ca:2f:41:99:53:4d:15:b0:87:1e:ad:84:
3c:d8:ae:d5:23:3d:d1:87:89:f7:a7:e1:49:30:be:96:a7:6e:
92:ef:15:27:f3:e4:1a:00:b6:6a:dc:46:d0:db:17:75:0d:c8:
7f:21:24:e8:d2:5e:08:ee:87:6a:72:23:b7:ff:66:b2:c5:1f:
b3:53:14:b7:1d:5d:d7:97:d8:41:39:fd:8a:15:37:ca:3d:ef:
2f:b7:5c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:30:33 2025 by rpki-client