Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/cTaGve-wnDaltBEs9qFQAwYTz8U.roa
File: cTaGve-wnDaltBEs9qFQAwYTz8U.roa (raw, json)
Hash identifier: rlM1/6AbnA4fK5wLfwUhG8TrmRRJMo7RVzb50qFuPgE=
Subject key identifier: 71:36:86:BD:EF:B0:9C:36:A5:B4:11:2C:F6:A1:50:03:06:13:CF:C5
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 0A64ADE7
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/cTaGve-wnDaltBEs9qFQAwYTz8U.roa
Signing time: Wed 01 Jun 2022 17:49:20 +0000
ROA not before: Wed 01 Jun 2022 17:49:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 85.209.16.0/22 maxlen: 24
45.8.172.0/22 maxlen: 22
45.66.148.0/22 maxlen: 24
45.13.149.0/24 maxlen: 24
212.102.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174370279 (0xa64ade7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Jun 1 17:49:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=713686bdefb09c36a5b4112cf6a150030613cfc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:84:0d:5b:ea:5e:cc:03:ff:e0:b1:5a:46:
37:0b:90:fc:0f:8c:05:eb:30:f0:26:9e:0a:80:93:
56:6e:c2:5b:77:e7:b2:e8:ac:6d:ab:42:ac:0a:06:
c7:2c:5f:b8:68:4b:18:01:28:7a:44:37:3b:d2:8b:
1d:e1:83:08:8a:93:73:39:eb:83:60:fe:72:e5:8d:
d1:e6:d6:88:6b:89:d6:7d:fe:f7:0a:c0:27:5e:a5:
81:11:20:ad:76:09:80:70:94:06:68:2f:17:1d:5d:
d4:5f:a5:86:ce:da:f5:a3:1b:71:fd:c1:52:3d:09:
77:77:3b:6c:08:42:16:ec:9a:7a:d9:b0:4e:1d:1b:
ce:f4:b1:13:5b:a8:5a:94:fd:34:60:a5:4f:4b:43:
cf:21:b3:5b:ab:dd:84:97:55:db:b7:e3:4a:3f:0e:
4d:96:0c:ac:04:de:61:cb:1b:bf:9a:ef:74:54:40:
97:9d:d9:ea:88:b3:12:ab:14:6a:dd:93:5b:79:67:
7d:6e:1e:f9:cd:66:54:a4:4d:50:64:7b:4c:54:b1:
58:70:99:43:a4:89:d2:4f:eb:c9:f8:e7:3f:1f:1a:
ff:34:ca:8a:af:1e:c9:be:8f:96:6c:79:86:ba:cc:
51:93:a4:46:52:af:35:e7:13:fc:d2:76:1e:7b:fb:
a5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:36:86:BD:EF:B0:9C:36:A5:B4:11:2C:F6:A1:50:03:06:13:CF:C5
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/cTaGve-wnDaltBEs9qFQAwYTz8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.172.0/22
45.13.149.0/24
45.66.148.0/22
85.209.16.0/22
212.102.114.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:0e:36:80:ce:31:a9:47:62:a7:d1:d7:ea:dc:1c:c3:2c:5a:
2e:26:5a:1d:2e:e3:15:c1:d7:99:dd:ca:43:be:65:f5:ad:26:
34:c3:f0:89:b3:05:da:b4:3f:43:de:14:c8:b5:51:5c:73:7b:
f6:11:20:c1:4f:07:f2:1e:68:0d:80:f3:83:9f:17:87:5f:0d:
e6:30:2f:a1:a1:5a:7a:ef:68:d8:d8:42:c7:e8:04:46:5b:a4:
14:56:6b:ab:4e:f8:d3:21:24:7f:91:4a:16:8f:42:1c:7f:ed:
53:15:a9:26:9e:c4:fe:d8:97:01:c4:f6:03:eb:c9:37:36:2d:
76:eb:a2:47:3e:ce:df:89:2b:03:a8:70:f5:37:c4:5c:05:8f:
44:6c:03:0c:ac:08:64:c6:77:11:ce:28:ed:84:5e:3d:7a:9c:
16:39:7c:ae:90:9f:51:f2:a1:7a:7f:b8:7b:7c:e0:fa:a0:f5:
b1:4d:f4:fe:2b:3a:89:4c:2b:27:e0:9f:45:ca:9d:fa:13:56:
ff:51:2e:d3:8b:ff:a6:12:2c:ba:47:79:35:78:3c:80:66:cc:
72:e3:58:a8:6f:1b:09:ea:20:e9:c1:73:71:28:8e:56:16:48:
84:ba:d9:dd:70:15:78:6f:64:0a:59:86:2c:a1:a2:cc:d8:30:
f0:9c:4b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:42 2025 by rpki-client