Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/BAmkTv5yy9jn_MALV1qaC_ScZtw.roa
File: BAmkTv5yy9jn_MALV1qaC_ScZtw.roa (raw, json)
Hash identifier: ykQ29x0l1bmcBqa9BZyn5j8XNoV8TLYOn7EJDS4fZWI=
Subject key identifier: 04:09:A4:4E:FE:72:CB:D8:E7:FC:C0:0B:57:5A:9A:0B:F4:9C:66:DC
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018322996D69D9CE1BF05CA06E97B1915735
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/BAmkTv5yy9jn_MALV1qaC_ScZtw.roa
Signing time: Fri 09 Sep 2022 14:13:43 +0000
ROA not before: Fri 09 Sep 2022 14:13:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212219
IP address blocks: 45.147.46.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.141.151.0/24 maxlen: 24
5.180.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:22:99:6d:69:d9:ce:1b:f0:5c:a0:6e:97:b1:91:57:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Sep 9 14:13:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0409a44efe72cbd8e7fcc00b575a9a0bf49c66dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:27:e2:ac:77:62:8a:82:eb:57:c7:61:c1:2a:
62:cb:67:06:99:39:62:c2:50:6a:61:9a:1f:bc:5a:
0f:54:cb:02:68:ac:47:2d:1f:40:b3:72:88:bc:f2:
93:30:92:cc:f8:2f:c7:c4:ea:d2:cf:ac:4f:dd:19:
d1:6f:fd:0a:46:7e:3a:c6:aa:d4:80:5f:26:a7:18:
6a:79:b0:25:5e:49:8d:07:28:72:37:eb:b8:29:3f:
4a:c2:23:ee:35:03:36:35:9b:f4:4d:9e:d8:48:b8:
75:41:32:0b:6d:51:33:44:d8:0d:da:ec:26:f4:23:
32:3e:dc:2e:c4:7f:38:69:d5:a1:de:3e:cf:1e:18:
a5:24:2d:53:5b:c0:21:bc:a4:c5:28:26:64:29:74:
d4:ea:b3:42:45:ce:b5:5e:c8:ab:b8:43:b4:35:5a:
7f:3f:b6:ce:1c:8a:bb:0f:e7:c6:b6:74:08:03:c7:
be:20:17:17:75:f2:6a:d2:51:ec:17:a2:85:e1:57:
cc:16:f8:7a:e0:95:2e:b5:92:c8:69:cc:64:3c:a8:
83:ab:e6:f9:71:23:32:95:2d:8d:17:6c:bc:01:38:
30:e6:c0:4c:6b:51:e5:30:53:55:e9:f0:4f:69:a3:
23:b0:56:53:ce:f1:92:66:c4:e1:14:13:c3:32:8e:
0c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:09:A4:4E:FE:72:CB:D8:E7:FC:C0:0B:57:5A:9A:0B:F4:9C:66:DC
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/BAmkTv5yy9jn_MALV1qaC_ScZtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0/24
45.136.4.0/24
45.141.151.0/24
45.147.46.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:43:06:08:c8:b1:8a:bd:a1:27:28:18:c9:54:6b:30:3c:f7:
59:66:94:89:2f:9e:a5:96:a6:77:e7:4b:8b:e7:61:d7:61:ae:
ad:e8:6d:37:d0:5c:e1:b0:e9:95:8a:49:5a:c4:53:db:b3:d0:
08:2a:20:bc:23:99:b4:b8:c3:39:48:30:9c:9e:94:98:bc:13:
29:21:d4:51:0a:d7:5d:e2:eb:84:f4:00:73:38:b7:ad:2b:38:
a9:68:94:41:d0:4d:91:94:29:aa:1e:42:06:33:9e:b5:c5:63:
a5:c5:86:3d:7e:f0:3f:bb:dd:88:35:68:b1:20:1b:f6:3c:53:
7a:1c:ba:98:7f:27:61:68:65:d7:0a:46:ba:42:01:93:8e:94:
65:9a:52:09:2f:3d:ff:73:23:17:d2:42:8f:b6:58:d7:8b:e2:
b2:17:bd:26:2c:04:e7:89:d9:49:b2:ae:45:31:f3:0b:8e:5c:
92:35:b2:9f:95:31:13:75:95:b8:ba:b3:90:a9:a5:b4:d3:6e:
24:c4:be:44:81:43:1a:81:fa:aa:82:e9:6c:76:2a:9d:ae:1c:
32:99:18:c4:51:1d:b8:32:3d:7c:47:37:27:40:4a:2f:4b:57:
af:e3:3f:8a:22:f4:87:83:59:f3:1a:53:06:fb:b5:7e:96:37:
02:76:98:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:42 2025 by rpki-client