Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SYCeLplbgBXRZ7cDrLOslsWIgJw.roa
File: SYCeLplbgBXRZ7cDrLOslsWIgJw.roa (raw, json)
Hash identifier: YPSXexr0QXjCyeW0KzUrybZP51o4eVuOPl/tuVM+P74=
Subject key identifier: 49:80:9E:2E:99:5B:80:15:D1:67:B7:03:AC:B3:AC:96:C5:88:80:9C
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018B81F0AE86B795E6F50D020FE720548FFF
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SYCeLplbgBXRZ7cDrLOslsWIgJw.roa
Signing time: Mon 30 Oct 2023 18:55:15 +0000
ROA not before: Mon 30 Oct 2023 18:55:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.147.46.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
45.136.7.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:81:f0:ae:86:b7:95:e6:f5:0d:02:0f:e7:20:54:8f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 30 18:55:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49809e2e995b8015d167b703acb3ac96c588809c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:07:c9:df:fd:04:a3:64:c9:91:f9:e0:71:2c:
db:49:cc:3c:4d:8e:08:17:b3:da:14:09:d7:d9:6d:
cc:d8:85:8a:66:25:05:f0:da:de:0a:83:b4:12:9e:
7f:07:4f:4e:57:35:39:8d:76:6a:b9:00:5e:77:66:
3e:c6:af:16:40:c9:22:c8:76:75:56:bb:42:8e:d6:
eb:4e:2d:e8:f6:1d:cc:02:f7:63:1b:12:03:91:21:
6e:64:ca:52:af:bc:f0:01:aa:03:60:c8:e8:9b:2e:
d4:d9:7c:8b:57:8b:fb:16:d8:d2:6c:1c:9c:6a:be:
04:e2:6c:23:a2:bf:be:ed:24:5c:b7:6b:bc:8c:c4:
10:d2:c9:2b:12:b8:63:d0:c6:73:bf:aa:78:30:b1:
60:5f:6c:61:77:c1:e6:53:d8:60:6f:9a:28:73:d5:
68:c9:82:a8:ed:bb:f3:be:8d:13:13:d5:7f:60:c0:
74:65:f2:af:5d:f1:98:2a:85:fc:c7:eb:66:f8:42:
cf:fb:10:1b:3c:70:70:70:33:e3:ed:e7:f8:1c:6f:
2d:a4:49:91:f3:ea:0b:82:63:0f:a1:58:04:a2:05:
b1:db:54:d3:83:b5:40:6f:34:00:91:e9:4a:0d:bf:
6e:84:52:58:e4:5b:cb:ac:40:4c:3c:ec:d9:7f:88:
f7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:80:9E:2E:99:5B:80:15:D1:67:B7:03:AC:B3:AC:96:C5:88:80:9C
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SYCeLplbgBXRZ7cDrLOslsWIgJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.3.0/24
45.136.7.0/24
45.147.46.0/24
77.83.201.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ea:91:4a:a2:1d:f9:0e:c1:0b:f6:eb:61:8e:80:71:92:11:
c5:80:84:95:04:d2:af:85:db:fd:71:4c:aa:8a:a6:9a:27:e1:
67:82:cc:7f:13:21:d6:bd:5e:02:56:ef:31:0f:48:63:12:5c:
17:5a:34:be:d3:82:4e:76:b1:47:6c:18:1f:4c:24:5f:63:a1:
95:aa:79:2c:bc:c9:14:1f:2f:ab:74:e0:12:54:15:fa:4a:9f:
39:bb:39:9b:52:dc:4f:5f:5d:80:53:bd:db:b5:48:38:5b:ed:
6a:48:22:9d:91:ca:ed:5f:28:9f:72:2c:eb:97:19:e5:e6:7a:
41:96:f9:f6:ce:9c:a6:4e:b4:39:bd:84:57:66:f9:7f:ff:89:
48:4d:20:57:d6:b9:eb:73:17:36:0b:a2:b8:5a:5e:37:77:88:
7c:47:ce:67:38:ca:5e:69:97:d3:e2:f3:60:ec:eb:7b:1a:85:
e1:27:55:ee:37:a1:fc:a0:03:9d:1e:aa:65:75:8b:67:c8:9c:
f9:b0:09:70:84:b5:09:9f:46:11:95:96:fa:18:dc:01:95:f3:
65:29:50:eb:12:a4:5e:f9:3f:0f:be:01:dc:52:7b:54:10:c6:
fc:46:08:29:32:bb:73:07:6d:12:8e:76:aa:89:ea:fc:05:a2:
7d:79:34:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:53 2025 by rpki-client