Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/a2jzinwWrfYLO4p0GnROTiMbPB4.roa
File: a2jzinwWrfYLO4p0GnROTiMbPB4.roa (raw, json)
Hash identifier: eWZ6ooxtr6ThoAO6hSZsq4K6fyALXKHruMsVttX4/sc=
Subject key identifier: 6B:68:F3:8A:7C:16:AD:F6:0B:3B:8A:74:1A:74:4E:4E:23:1B:3C:1E
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018DF49B337CFF66E98CC0E634ABF5EC8581
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/a2jzinwWrfYLO4p0GnROTiMbPB4.roa
Signing time: Thu 29 Feb 2024 11:23:48 +0000
ROA not before: Thu 29 Feb 2024 11:23:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212219
IP address blocks: 45.136.6.0/24 maxlen: 24
45.141.151.0/24 maxlen: 24
45.147.46.0/24 maxlen: 24
45.147.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f4:9b:33:7c:ff:66:e9:8c:c0:e6:34:ab:f5:ec:85:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Feb 29 11:23:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b68f38a7c16adf60b3b8a741a744e4e231b3c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:73:c3:4c:98:1e:25:e7:6b:0a:17:3a:f4:
00:78:b2:3d:b8:5d:ba:16:1f:26:34:87:37:00:10:
23:24:f7:d2:16:da:d9:89:b4:de:0c:ef:5a:ce:01:
db:01:90:11:1d:5d:89:c5:e4:84:9d:b1:1f:29:a6:
cd:5a:92:38:4a:16:b4:ba:ac:22:c3:7e:f4:ec:ac:
2d:2d:d8:43:4d:47:65:b7:c3:ec:fc:4f:d5:ca:5b:
bd:63:f7:70:95:dc:5e:aa:85:fa:17:2f:b2:1f:8e:
fb:8a:9c:5b:81:8d:31:bc:84:77:81:9c:7e:f4:7b:
eb:cb:b7:9f:0f:40:25:ec:ed:f4:f2:4c:d3:b2:10:
d4:13:5f:de:34:ed:b0:d7:09:aa:e2:35:42:aa:cf:
63:5f:9b:c4:c0:fd:2e:17:e2:7e:5f:20:54:2f:06:
7f:90:44:f4:a8:a1:f7:4c:c9:9c:68:a3:a1:45:b9:
2a:e5:25:be:6a:2b:d7:e3:55:fe:e7:7d:82:47:61:
b7:2b:25:8f:b4:b9:85:2b:d1:3d:8d:00:3d:3d:99:
97:ce:cc:9d:ad:e1:85:3e:82:c8:42:b7:db:89:0c:
84:6c:12:51:24:bf:fd:09:1c:50:f1:92:65:77:10:
df:b6:7c:3c:4e:4a:f0:74:44:af:e3:5f:66:d9:76:
02:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:68:F3:8A:7C:16:AD:F6:0B:3B:8A:74:1A:74:4E:4E:23:1B:3C:1E
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/a2jzinwWrfYLO4p0GnROTiMbPB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.6.0/24
45.141.151.0/24
45.147.46.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:e8:6b:81:9a:fc:fb:e3:2f:13:d2:64:ea:bb:75:5e:7c:32:
2f:32:8c:48:bd:df:f0:62:28:e9:86:f5:fa:ed:45:4f:69:c5:
6d:96:c9:62:00:c1:3a:34:ed:a2:45:8b:90:be:f6:72:63:2d:
5e:1b:10:1a:cb:39:82:ce:c7:3c:51:ff:b4:42:6c:70:e7:dc:
ea:d4:af:fa:92:2c:24:01:78:6a:6f:10:b6:c5:07:ab:b5:38:
82:72:ff:db:53:7a:fb:0e:e4:f8:32:3d:e1:98:57:12:c8:07:
f7:30:ce:59:67:d9:5e:84:c5:f2:34:44:d2:b3:e5:bd:e4:1c:
cd:6d:e4:ff:dd:df:16:f0:2f:4f:7f:d6:06:c3:f0:27:dc:56:
48:07:24:69:dd:63:85:d3:10:39:55:ac:57:cc:e9:a5:71:04:
27:9a:6a:25:38:bb:fa:92:77:e5:80:e7:58:65:fd:a5:98:ec:
e9:82:aa:b7:04:7b:c8:bb:0a:1b:f6:3f:f2:cc:5e:e4:b5:a4:
92:e0:88:d7:25:65:ce:7d:1e:8a:17:ab:8c:be:a1:48:3f:fe:
48:00:67:b4:3a:6b:73:25:ef:27:c9:c0:d2:b1:70:3a:9b:4a:
b3:41:89:31:f4:9d:1d:22:d4:e3:23:e3:e8:1c:ce:1a:42:9e:
12:d4:ac:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:04 2025 by rpki-client