Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ZEhyRiQUbuokd1gx-jw7VpFVLmo.roa
File: ZEhyRiQUbuokd1gx-jw7VpFVLmo.roa (raw, json)
Hash identifier: 3FyyWC0hLmrQtmBhdHIvyWC9Cp9M9ovGDMlK0OD/FoM=
Subject key identifier: 64:48:72:46:24:14:6E:EA:24:77:58:31:FA:3C:3B:56:91:55:2E:6A
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018CAB2724CDBC040C38929814C8F5798E1F
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ZEhyRiQUbuokd1gx-jw7VpFVLmo.roa
Signing time: Wed 27 Dec 2023 12:01:58 +0000
ROA not before: Wed 27 Dec 2023 12:01:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.83.201.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ab:27:24:cd:bc:04:0c:38:92:98:14:c8:f5:79:8e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Dec 27 12:01:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6448724624146eea24775831fa3c3b5691552e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:64:58:90:b4:80:ac:f6:a2:f2:a6:fa:e5:
e2:80:8f:78:a4:bc:2b:3d:e4:a3:9d:5c:5e:82:c0:
be:ed:e3:08:78:79:82:cf:07:7d:c4:46:27:a6:69:
d2:ff:5f:ff:1e:f3:9f:14:72:23:43:3d:fe:49:0a:
4e:57:0e:90:02:30:9f:26:66:4e:28:17:10:37:81:
bf:89:46:c9:a3:59:92:fe:aa:26:2c:26:4e:c9:dd:
0f:35:3e:63:24:9b:1e:a4:bb:78:14:95:59:e8:5e:
8a:03:08:f7:03:b2:56:1a:a9:64:34:55:d5:34:31:
dc:c0:9d:a1:1c:2e:1d:13:3e:1a:6d:01:6d:29:7a:
a9:4a:fe:25:1a:f5:b1:a4:1b:d2:ea:97:e1:31:f2:
43:6c:6e:48:7f:52:dc:b8:66:bb:ff:d5:6c:52:94:
3c:84:a2:b9:36:1b:37:b4:37:e6:af:94:3c:5b:af:
a6:b7:31:ff:ea:08:b1:92:f0:00:b8:0b:29:2a:ec:
a2:74:1e:a6:27:24:4a:58:0b:5e:6e:c0:ed:4c:fd:
f2:e5:95:1b:d0:71:5d:de:5b:d8:27:b0:f4:0d:20:
33:33:1e:09:7e:ba:9a:ff:b8:90:3e:b8:68:ee:13:
a3:d4:da:14:05:3d:a5:23:0a:3d:2c:31:f7:9f:b0:
b0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:48:72:46:24:14:6E:EA:24:77:58:31:FA:3C:3B:56:91:55:2E:6A
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ZEhyRiQUbuokd1gx-jw7VpFVLmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.3.0/24
45.141.150.0/24
77.83.201.0/24
Signature Algorithm: sha256WithRSAEncryption
44:77:8b:dc:69:6d:c7:00:90:2a:cc:77:39:0c:e5:36:5e:79:
7d:71:07:a6:59:88:af:90:1e:2f:dc:de:cd:b2:8d:12:fd:08:
d0:bf:f1:9a:c9:91:ba:e8:59:c7:86:01:1a:b2:cf:1c:1b:f6:
35:e6:c5:26:55:a5:87:ec:5d:94:9e:66:d4:b0:2f:28:05:0d:
81:0f:83:55:de:93:eb:69:29:49:be:28:00:ac:0a:88:17:71:
3c:40:6d:aa:98:b3:af:2e:32:8c:e1:b7:9f:0a:36:e0:79:0b:
fe:da:61:d2:58:36:e5:21:dd:47:31:a3:7d:67:b0:d5:f4:86:
ac:69:e1:ad:50:43:07:be:dd:55:8d:7c:c0:85:00:b4:ea:b1:
86:b6:e3:5d:25:7c:2b:16:4e:00:01:44:fc:e0:f8:77:1f:f1:
41:14:61:0e:33:e7:47:ca:5c:d8:71:f1:62:d6:28:42:ab:77:
5a:7e:2c:b0:6f:bf:67:3c:bc:d3:e2:65:62:eb:d3:33:c4:10:
9f:c6:70:74:6f:19:da:96:85:64:2a:74:79:ab:db:7a:d1:45:
d4:f2:f5:ab:d2:18:3b:56:ee:fa:2e:66:f7:84:95:4b:4e:41:
fd:11:31:31:33:b2:f5:44:ee:c5:a3:97:f3:00:9f:e5:dd:06:
8b:e7:a5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:04 2025 by rpki-client