Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/abnpRrQNumMyrPPKyKuBPXEx8Gs.roa
File: abnpRrQNumMyrPPKyKuBPXEx8Gs.roa (raw, json)
Hash identifier: liJ8kBBvuwfDpx+5nS7vLr+WdM/mkLiU1WOE2CBaRXw=
Subject key identifier: 69:B9:E9:46:B4:0D:BA:63:32:AC:F3:CA:C8:AB:81:3D:71:31:F0:6B
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01828BBA0BA2FE9F9EDF294548D837EEBA65
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/abnpRrQNumMyrPPKyKuBPXEx8Gs.roa
Signing time: Thu 11 Aug 2022 07:06:41 +0000
ROA not before: Thu 11 Aug 2022 07:06:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212219
IP address blocks: 45.136.4.0/24 maxlen: 24
45.141.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8b:ba:0b:a2:fe:9f:9e:df:29:45:48:d8:37:ee:ba:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Aug 11 07:06:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69b9e946b40dba6332acf3cac8ab813d7131f06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:9e:52:c9:6b:95:1b:03:f0:46:23:af:6a:
1d:9d:35:36:59:0c:5c:c8:12:10:20:7c:03:59:44:
04:69:09:9f:39:fd:86:8d:42:c8:9d:be:53:d5:38:
29:6d:ac:df:b8:11:c3:17:a2:78:bc:ed:57:0c:42:
d0:c1:c3:72:3c:3e:13:c7:5c:52:4d:2c:7b:d2:56:
b4:b4:74:a8:bc:72:59:06:e6:f5:7b:aa:0c:bc:39:
c1:f5:cb:e2:cc:d0:d4:53:94:2d:a7:43:52:d3:01:
80:9e:94:bb:69:30:05:f7:3c:48:c3:fa:92:ff:e1:
63:b6:8e:25:9f:07:c2:16:cf:ec:91:c1:e4:56:c3:
45:05:f9:f4:61:9a:41:d0:84:8e:53:82:de:f4:ef:
ac:68:d9:10:ff:30:53:a4:bd:c8:39:9d:d2:a1:81:
36:0c:3f:1a:95:39:a5:fa:d9:5d:78:f4:0e:f7:14:
9b:df:09:94:81:a4:bb:3d:41:3d:35:56:86:f9:19:
76:80:1a:03:df:26:f3:c8:7b:24:71:9c:44:2e:9a:
87:ef:97:fd:13:cd:dd:83:7e:23:dd:92:c2:1d:c0:
51:27:c8:53:2a:c3:07:84:4b:d4:ee:e0:2a:25:90:
20:1c:b9:92:3c:82:bf:ab:90:76:d8:18:bb:d7:52:
24:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B9:E9:46:B4:0D:BA:63:32:AC:F3:CA:C8:AB:81:3D:71:31:F0:6B
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/abnpRrQNumMyrPPKyKuBPXEx8Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.4.0/24
45.141.151.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:e7:cd:e4:d8:28:7f:2a:c2:c8:5b:17:52:5b:23:91:09:55:
de:4f:dc:9f:33:31:45:eb:7e:8d:ba:c5:72:31:c4:b6:bf:c0:
48:32:45:f2:b2:6c:ce:8b:e7:76:0a:fa:ea:ee:2e:6c:ed:23:
0d:89:14:35:76:30:29:9c:a3:81:78:60:0f:3c:53:60:97:b0:
d4:e5:0c:b5:ca:1d:9d:72:5b:36:c8:83:6a:b5:bd:79:8b:ac:
f3:90:0f:99:6a:d5:64:29:7e:74:66:c9:15:3a:0d:78:5c:ed:
11:61:94:6a:e7:06:ce:1d:25:30:4e:4f:45:d7:fc:3e:c3:bf:
82:cc:e5:27:a0:5b:39:06:8a:6a:fc:06:d5:b1:87:91:54:eb:
4d:0b:24:52:a0:99:dc:6b:4f:be:99:ab:23:20:a8:c5:b2:bd:
da:3f:b6:9f:53:80:70:ba:14:a2:ca:4f:b4:2a:9f:a2:4e:b3:
9d:00:76:20:36:76:ac:b3:71:18:27:24:6f:e9:c7:41:12:2d:
19:8c:b5:34:89:1e:d9:bd:5b:3d:4d:81:47:8d:79:10:64:a2:
d9:d6:8f:03:29:d4:18:d2:ae:38:66:fa:9d:58:fd:73:65:c3:
66:be:3d:fa:69:33:dd:85:48:9d:d1:28:e4:be:15:45:a7:c4:
b8:3b:08:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:24 2025 by rpki-client