Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/lz0Mge6X4UtoVLvOY5bPu-VJz1s.roa
File: lz0Mge6X4UtoVLvOY5bPu-VJz1s.roa (raw, json)
Hash identifier: vrI8oU9ydLKI06LqSj500Wx8huqyYTWBPnqHIemYRso=
Subject key identifier: 97:3D:0C:81:EE:97:E1:4B:68:54:BB:CE:63:96:CF:BB:E5:49:CF:5B
Certificate issuer: /CN=6b6b9a8241f08fff86c06e5c0ef1ecced643fef3
Certificate serial: 018E8657CD680F675F0D3452FE091CEC3FD8
Authority key identifier: 6B:6B:9A:82:41:F0:8F:FF:86:C0:6E:5C:0E:F1:EC:CE:D6:43:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2uagkHwj_-GwG5cDvHsztZD_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/lz0Mge6X4UtoVLvOY5bPu-VJz1s.roa
Signing time: Thu 28 Mar 2024 18:34:44 +0000
ROA not before: Thu 28 Mar 2024 18:34:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.92.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:86:57:cd:68:0f:67:5f:0d:34:52:fe:09:1c:ec:3f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6b9a8241f08fff86c06e5c0ef1ecced643fef3
Validity
Not Before: Mar 28 18:34:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=973d0c81ee97e14b6854bbce6396cfbbe549cf5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:a3:cc:da:e2:06:65:8f:5d:87:25:31:fa:
37:60:74:07:92:51:51:64:ba:0a:3d:b2:2b:1d:79:
92:22:23:8d:54:39:23:1e:58:e9:cc:60:1b:71:5c:
c4:7f:12:5e:7c:02:fa:4b:32:fa:30:c9:42:fa:b7:
64:36:20:84:61:38:d0:22:bc:94:cd:9d:27:f9:16:
0b:73:50:d6:6e:40:d7:49:3a:a4:ee:db:f7:83:48:
cf:ee:0b:70:e4:19:49:a4:c1:bd:8e:56:f8:f9:25:
85:a6:fd:3a:49:fe:78:4b:d3:cb:65:94:7d:7f:6b:
88:2f:ae:d5:81:1e:ac:95:65:aa:54:c3:de:70:dd:
7f:88:29:48:64:e7:5a:35:49:93:5b:36:90:7d:4d:
85:ea:c8:6f:d7:61:d3:b6:7e:e3:17:f7:96:5c:67:
d7:dd:99:dd:88:76:2b:ba:1a:db:b7:e5:c4:df:7f:
16:39:11:99:0e:af:48:b9:c8:1e:d6:e1:8b:97:63:
30:32:cc:96:82:81:0d:87:f6:96:c0:6d:9b:51:9c:
b6:59:69:c8:71:30:f8:d9:5e:b8:2b:83:43:05:6e:
ce:88:15:af:13:cb:1b:4f:0e:24:57:24:66:cf:10:
21:ac:b6:cf:26:00:bb:7c:5d:35:aa:c0:45:48:3f:
9f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3D:0C:81:EE:97:E1:4B:68:54:BB:CE:63:96:CF:BB:E5:49:CF:5B
X509v3 Authority Key Identifier:
keyid:6B:6B:9A:82:41:F0:8F:FF:86:C0:6E:5C:0E:F1:EC:CE:D6:43:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2uagkHwj_-GwG5cDvHsztZD_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/lz0Mge6X4UtoVLvOY5bPu-VJz1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/a2uagkHwj_-GwG5cDvHsztZD_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.77.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:12:c6:53:ca:f2:81:7a:12:b0:9b:1b:36:54:64:de:0a:2d:
2b:f1:a7:ae:d5:6f:32:e0:91:60:24:48:75:28:1a:81:8a:28:
c3:17:fc:94:10:5d:7e:06:d3:b7:1a:d4:f2:27:c8:af:2f:59:
b3:ab:2a:a4:69:3f:f5:50:b4:32:70:76:f0:b2:4f:96:a2:30:
f2:32:d0:0f:fc:70:33:b5:6a:0e:66:9e:5b:bb:51:14:8e:82:
86:77:04:28:e0:4a:d5:db:ce:73:90:fc:14:5c:24:99:ae:e9:
06:d8:2c:f8:6a:c3:e9:dd:aa:b4:29:0f:54:af:0c:e5:25:07:
03:52:26:3e:77:3e:b5:d3:d9:55:55:41:26:12:c0:d6:d1:3f:
79:0c:42:f1:94:4f:8c:ab:58:22:d6:2a:6e:e8:d9:89:2d:19:
d6:26:47:7a:b7:62:c4:4f:1e:25:15:7e:38:9b:8c:7a:e5:30:
c2:cb:5c:92:fb:f3:da:65:4f:ab:43:58:91:f2:c6:70:f3:ca:
ec:1c:2b:53:41:90:65:a7:16:da:df:92:d8:d9:02:29:b7:2f:
25:fb:e9:a9:15:82:dd:58:aa:08:bd:71:38:09:f2:6b:72:cc:
14:41:34:50:8b:72:e0:cc:8f:38:ca:4a:f2:8d:38:04:2b:2c:
b6:a1:3d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:01:37 2025 by rpki-client