Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/qoyM9NVtiBAMVPVESMOlNvSfmqY.roa
File: qoyM9NVtiBAMVPVESMOlNvSfmqY.roa (raw, json)
Hash identifier: ZpyQ7X2HHoyn6HXXITBiMJVUnTeyhQ3SwNrrfcDxHRw=
Subject key identifier: AA:8C:8C:F4:D5:6D:88:10:0C:54:F5:44:48:C3:A5:36:F4:9F:9A:A6
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01836E33BDFA927A8A52B407A571ADCA7967
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/qoyM9NVtiBAMVPVESMOlNvSfmqY.roa
Signing time: Sat 24 Sep 2022 06:33:48 +0000
ROA not before: Sat 24 Sep 2022 06:33:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.136.7.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6e:33:bd:fa:92:7a:8a:52:b4:07:a5:71:ad:ca:79:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Sep 24 06:33:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa8c8cf4d56d88100c54f54448c3a536f49f9aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:aa:6c:09:35:d4:3e:34:e7:ff:7b:c3:0c:
6d:20:5f:a6:b9:0b:b7:0a:a1:c3:b9:96:b0:10:5a:
3d:57:7d:a9:16:0d:41:c9:e5:d3:fb:af:76:dc:e4:
51:e7:0b:c3:a9:4f:a0:29:38:5e:f3:ae:62:83:87:
b2:92:42:fa:0c:63:53:1a:1f:54:88:48:5c:28:df:
0b:5e:ee:e7:bf:91:e9:04:d7:2f:d2:78:26:c3:03:
74:d6:ce:f8:69:4a:9e:66:56:98:ee:4c:a0:46:ea:
cc:9e:c1:0f:23:66:28:fa:07:60:eb:d2:72:3a:a4:
62:8d:ae:42:62:f3:64:fe:33:da:7f:4c:f8:bc:38:
07:2f:cc:a8:57:ee:7e:3c:c2:48:61:ea:f3:ad:46:
1b:e8:12:49:7b:f2:59:7a:d4:c9:01:ee:28:7b:e9:
82:7e:76:1e:ce:e5:e3:2c:5f:c0:bf:70:86:ca:ee:
3c:f4:6b:c6:96:d4:d7:d8:f1:b2:f7:15:29:69:e1:
ad:04:a3:45:08:96:c5:74:ae:b1:fd:39:e6:a1:ea:
9b:ea:36:cc:35:64:df:75:62:b2:8f:28:66:4b:34:
9b:e0:68:01:88:01:4a:3f:86:e1:0f:ed:17:9d:cb:
61:34:96:e1:8c:b4:5b:cd:67:01:d6:09:24:5a:b8:
a7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8C:8C:F4:D5:6D:88:10:0C:54:F5:44:48:C3:A5:36:F4:9F:9A:A6
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/qoyM9NVtiBAMVPVESMOlNvSfmqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.3.0/24
45.136.7.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ea:75:b1:f7:9a:2b:86:38:50:3d:a9:bb:cf:39:e3:68:49:
2d:ef:bb:6a:42:9e:ca:f9:bd:da:9a:f3:ea:c6:16:ef:5a:a5:
cc:14:16:43:59:90:d5:4f:d1:27:fb:19:38:41:b6:65:80:76:
46:94:41:66:a2:b9:c3:b7:36:f2:45:51:18:bf:64:db:53:c1:
19:0f:f2:fa:3f:2b:22:e8:3c:88:66:32:11:0a:f0:9b:28:f3:
10:e8:88:fb:40:d0:9f:1f:59:48:94:4a:04:6a:66:1c:46:44:
09:9b:18:d3:7f:d1:8e:45:2d:99:b8:94:01:1f:69:39:30:c2:
3c:f6:16:37:f7:47:4e:94:63:b1:b6:da:a0:fe:72:67:46:7b:
8b:f1:2f:0a:cd:5a:43:4f:9f:87:74:d6:a9:29:df:bd:1d:6b:
05:09:d3:67:20:27:df:7d:68:49:0d:92:60:a0:12:da:36:82:
f3:28:9b:08:b9:51:76:18:e9:df:eb:22:09:8b:b2:5f:b3:c5:
62:6d:a0:6b:a5:d9:df:c4:3a:c6:0d:e2:45:cd:ff:b9:e5:72:
0c:b2:da:90:34:24:8d:20:79:53:0d:61:f8:00:c0:d4:c8:fd:
f9:ed:68:4e:a6:c5:eb:fa:45:a5:df:f4:6a:96:02:62:a3:5e:
1e:f5:56:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:55 2025 by rpki-client