Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/tBvdEHK96-8IqXDimpyAd6-FvfI.roa
File: tBvdEHK96-8IqXDimpyAd6-FvfI.roa (raw, json)
Hash identifier: kV3wVJLyHXbFkaWXeqnUNYEgcOQg7ySmIasAR3i9gU0=
Subject key identifier: B4:1B:DD:10:72:BD:EB:EF:08:A9:70:E2:9A:9C:80:77:AF:85:BD:F2
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 019422FBE67CADA4ED745B42CD64F69D0301
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/tBvdEHK96-8IqXDimpyAd6-FvfI.roa
Signing time: Wed 01 Jan 2025 17:48:41 +0000
ROA not before: Wed 01 Jan 2025 17:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6762
IP address blocks: 45.149.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e6:7c:ad:a4:ed:74:5b:42:cd:64:f6:9d:03:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jan 1 17:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b41bdd1072bdebef08a970e29a9c8077af85bdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a4:c3:a0:6f:94:4b:ad:27:82:60:1f:1e:cc:
c6:22:4e:df:f6:9c:88:8a:cb:76:c3:68:11:08:48:
c0:02:8c:eb:59:05:0d:64:2c:55:61:39:d1:ea:bd:
1a:72:ae:9f:f8:ec:96:b2:2b:f8:df:7d:e6:e0:d0:
66:1c:22:35:e0:09:31:66:18:39:b8:14:85:cc:26:
9c:84:0c:b0:cc:e1:4a:54:a6:75:e2:f5:14:92:6a:
0f:5a:af:c9:1a:cc:76:9c:90:fc:86:05:2f:c2:ad:
a3:f5:2e:41:b7:91:e8:2c:67:d2:29:b1:d6:bc:84:
5e:f8:11:03:fe:eb:3b:4a:f7:44:8c:10:b8:5c:fd:
67:b0:70:3f:89:8f:9d:58:55:12:fd:63:28:a2:d2:
bb:32:c8:5b:e0:c6:88:c1:9c:40:0c:b6:6e:d5:e7:
2d:dd:8c:0e:82:80:6b:2b:f1:81:aa:9d:c9:6b:71:
af:08:71:41:ec:04:27:18:a9:80:fb:60:3e:e6:6a:
16:39:05:7a:44:67:ee:89:3d:27:70:30:0b:03:3d:
77:2d:34:ed:98:21:4a:43:4e:e8:40:3e:b5:60:68:
4c:5d:e8:08:4a:c6:2b:06:a2:5f:6b:a8:3d:9b:66:
b0:e2:be:22:ef:75:87:bb:0c:f5:dd:ee:ba:3f:71:
41:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1B:DD:10:72:BD:EB:EF:08:A9:70:E2:9A:9C:80:77:AF:85:BD:F2
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/tBvdEHK96-8IqXDimpyAd6-FvfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.7.0/24
Signature Algorithm: sha256WithRSAEncryption
80:96:43:a9:1d:e4:dd:c1:c8:67:c8:94:4f:54:82:9a:ec:f1:
4d:f9:79:a8:4e:99:e0:85:32:00:a2:20:cf:f4:47:2c:56:a7:
5d:e5:8d:e5:46:ce:ba:57:bc:a5:6e:65:33:c6:7b:1d:fb:4b:
06:32:a2:42:a1:49:dc:82:71:9f:af:4f:bf:aa:16:07:ed:a5:
4f:7e:f8:18:ea:de:46:de:cb:88:0b:34:98:f9:3f:8f:8b:98:
d8:8e:d8:ef:75:2c:71:82:08:53:93:57:70:f2:f5:b1:22:da:
aa:e8:9e:71:13:f1:53:22:4c:1d:b2:5b:b6:e8:eb:38:7d:65:
72:eb:3f:e2:41:2a:b3:17:0b:ef:0a:54:57:c6:8a:9d:d5:ec:
bf:60:f9:54:09:fa:74:a6:f4:a7:e6:c7:d4:32:ba:3e:2e:4a:
79:f6:53:81:f6:1e:19:44:e3:03:57:75:0a:f2:7a:56:98:e4:
7b:f0:43:96:44:d2:97:c5:00:0a:c5:e6:b2:69:1b:6b:97:cb:
0a:18:30:65:69:9c:b5:73:4c:bc:ec:24:3a:56:80:5e:ee:80:
30:72:4a:de:f4:ca:fc:b4:b3:aa:ee:a3:2c:64:7e:f3:13:4c:
04:9d:f8:63:e2:94:8f:3c:7f:13:2b:05:d0:0c:26:c8:dc:e9:
02:b5:ab:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:43:18 2025 by rpki-client