Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/bvDGj9WSuQp_7uU21aInIgb2nA8.roa
File: bvDGj9WSuQp_7uU21aInIgb2nA8.roa (raw, json)
Hash identifier: s6fwEIUWRA+jm5GFMF7s3vuNdogex+ZaeGEmgZLmXTs=
Subject key identifier: 6E:F0:C6:8F:D5:92:B9:0A:7F:EE:E5:36:D5:A2:27:22:06:F6:9C:0F
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0194258F25B63573E2C9C222A108B8EBD75E
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/bvDGj9WSuQp_7uU21aInIgb2nA8.roa
Signing time: Thu 02 Jan 2025 05:48:45 +0000
ROA not before: Thu 02 Jan 2025 05:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207459
IP address blocks: 45.136.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:25:b6:35:73:e2:c9:c2:22:a1:08:b8:eb:d7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 05:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ef0c68fd592b90a7feee536d5a2272206f69c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2f:a6:36:57:d9:af:34:8e:55:94:13:fd:d6:
d9:e0:bc:7e:99:d0:d6:b7:78:7f:52:b7:f8:2e:8f:
a8:37:6a:eb:95:6a:df:31:7c:af:0f:9b:fd:79:c8:
b5:4c:da:ec:bf:00:01:93:83:76:67:28:8d:67:65:
c8:77:30:13:4e:99:fc:32:08:51:a9:ba:87:0f:57:
96:41:15:b6:77:6d:0e:b5:9a:b7:a1:b6:86:80:7d:
ff:f7:00:9a:a0:4c:75:5e:98:77:46:41:c8:5d:55:
7a:1b:dc:6e:6f:d2:78:57:8c:97:7e:59:44:c3:1a:
1f:05:c5:f7:97:4b:a7:87:68:ba:80:6f:20:5e:2b:
e0:6e:c6:9a:cf:51:ab:0a:90:ec:06:f1:03:dc:c2:
14:ee:2a:2d:35:68:df:f6:8f:24:e2:66:c8:46:a3:
2a:00:cc:6a:8d:17:58:38:49:c4:4a:81:5f:a0:24:
cc:5c:0e:12:0d:6d:00:1c:a2:4c:2b:24:06:05:3e:
ce:6c:66:a4:99:e5:2d:2d:d6:1d:f2:13:d1:48:cc:
b5:c0:11:73:f3:e6:5d:70:62:09:76:2d:7b:fb:4d:
1c:7b:09:f1:cf:ad:06:ca:fc:ac:26:9b:27:9f:bc:
65:84:88:c4:10:30:81:9f:c4:08:f1:99:95:da:5e:
9a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F0:C6:8F:D5:92:B9:0A:7F:EE:E5:36:D5:A2:27:22:06:F6:9C:0F
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/bvDGj9WSuQp_7uU21aInIgb2nA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.7.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:17:e8:8b:d8:d0:99:e8:81:8b:84:83:d6:f0:ce:22:37:c2:
7e:db:9c:16:28:6f:e3:ea:ed:a3:6c:34:5a:a1:77:07:e4:56:
70:ed:a6:f4:d8:ff:5d:16:0f:b6:9a:a5:28:d3:3d:5c:20:33:
5b:5c:74:4d:e6:5e:dd:37:68:60:2f:96:bb:62:8b:4f:9c:89:
d1:57:20:ac:cd:90:51:9e:4d:90:86:3f:db:da:f7:2b:88:df:
02:91:d7:5e:6d:df:48:fd:d3:1d:51:e1:fe:5f:01:6d:16:b9:
a3:d8:c5:b3:57:04:4f:4d:ed:67:71:c3:7f:c6:06:87:b8:24:
c4:fc:96:40:0b:68:40:0e:bb:b8:d9:35:50:ea:60:30:93:19:
e8:02:38:a1:91:6a:47:2f:e9:ca:cf:fa:3f:cf:ef:cf:b2:79:
84:18:77:50:bc:41:df:81:37:33:c1:b5:43:f9:1c:7a:a5:1b:
e6:ce:17:a1:8d:5f:f5:53:65:7e:cc:79:1c:b9:51:4d:5e:52:
85:4d:d5:d3:5b:83:85:41:a1:65:be:5c:68:d9:ff:71:ce:a7:
ea:04:63:54:fc:bc:cb:d1:29:84:24:41:bb:a5:a2:d7:0b:7c:
4a:eb:cb:7a:f5:db:39:c9:e9:73:3a:91:1f:48:7c:4e:63:eb:
10:62:f5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:15 2025 by rpki-client