Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/AVQz8sHW23ixrQTRE03QG3YvTuU.roa
File: AVQz8sHW23ixrQTRE03QG3YvTuU.roa (raw, json)
Hash identifier: SrjP+GRC/1VbpeKx6pNwtWpLK3oTGv/QT5J47D5iwOs=
Subject key identifier: 01:54:33:F2:C1:D6:DB:78:B1:AD:04:D1:13:4D:D0:1B:76:2F:4E:E5
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 019427B59F2424AD5ECB8C670A944C5BC3E4
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/AVQz8sHW23ixrQTRE03QG3YvTuU.roa
Signing time: Thu 02 Jan 2025 15:50:01 +0000
ROA not before: Thu 02 Jan 2025 15:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 145.69.64.0/22 maxlen: 22
145.69.68.0/22 maxlen: 22
145.69.72.0/22 maxlen: 22
145.69.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:9f:24:24:ad:5e:cb:8c:67:0a:94:4c:5b:c3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Jan 2 15:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=015433f2c1d6db78b1ad04d1134dd01b762f4ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:27:b3:5c:ee:08:e1:5a:e2:d4:d7:8d:f9:76:
8d:e8:e2:4b:84:4e:70:c2:33:98:5e:97:f0:33:3b:
e8:70:d1:1c:46:e9:72:f9:5d:c0:60:7c:3c:b1:25:
27:ef:fe:7f:e8:2d:c9:37:04:43:19:74:ba:6a:6b:
6f:2d:72:7c:52:68:ef:a7:8c:a5:80:54:70:64:53:
04:b1:9e:87:1e:78:b5:a9:e8:65:63:12:bf:2f:73:
d4:2a:a7:97:30:f2:09:de:83:ea:f1:69:49:c9:e0:
dd:3e:f6:28:c9:77:68:23:f9:ce:c6:8b:e4:33:14:
54:fc:07:88:cb:21:30:f2:7d:c5:d7:8a:e4:db:27:
eb:a1:ba:e5:96:58:94:02:0e:e7:fc:e3:fd:15:e7:
84:9e:2c:d8:d6:99:72:5c:ec:a0:d8:d8:7d:25:cb:
18:b2:e9:fd:15:32:6c:a7:1d:67:b1:83:59:21:0c:
ed:b3:31:0a:f2:a0:74:39:1b:8b:b1:78:e7:eb:b9:
5d:79:07:76:63:27:68:2f:39:d0:2f:73:c0:f9:cf:
39:7a:cb:16:74:db:3d:78:52:7a:b1:3c:55:3e:75:
bb:62:bb:f0:f6:7c:f3:72:98:91:4c:41:74:e2:c3:
9c:fd:5b:4d:85:1e:9a:03:a0:76:19:8d:3c:59:a1:
39:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:54:33:F2:C1:D6:DB:78:B1:AD:04:D1:13:4D:D0:1B:76:2F:4E:E5
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/AVQz8sHW23ixrQTRE03QG3YvTuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.69.64.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:c7:00:3a:93:83:25:6f:09:8f:fc:82:31:06:86:2f:ed:fd:
6e:de:8f:f2:dc:61:fc:c3:8f:92:03:8f:6e:ea:e8:b2:aa:14:
37:3c:d2:3e:d9:1b:10:42:d1:fe:f5:d3:9e:fa:59:91:75:26:
d8:06:4c:a5:ae:cb:2c:18:85:aa:59:d5:2a:c7:c0:07:14:a4:
71:1f:b2:86:12:4f:73:8d:8e:41:eb:cc:35:23:18:47:b6:d4:
49:5d:0c:71:5d:74:cf:62:0d:5a:1e:06:f3:95:28:3f:24:b4:
c2:a3:b8:93:94:99:c9:75:d0:1e:a9:f1:78:c3:be:62:5f:72:
c1:f6:a6:5b:74:b4:2b:28:91:25:d1:24:12:e1:17:cd:1e:12:
3b:88:34:75:6f:b0:02:a1:2a:40:e3:49:2b:f0:b9:8d:b3:25:
0a:6c:c8:e8:ef:8b:09:1d:77:56:ae:03:5a:99:0c:7b:78:de:
8c:51:15:fc:4e:9f:64:57:da:1b:69:51:c7:aa:d5:9c:3d:7f:
bd:bd:81:24:58:ac:05:27:33:16:2b:bc:10:96:90:fd:9c:ee:
6a:eb:27:df:6f:ab:11:7c:b8:66:84:44:28:a8:da:72:d9:dc:
02:ac:f9:f0:d8:5c:2c:f0:b7:93:5c:0e:d0:9b:0f:ff:ed:79:
dd:25:9c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:25:50 2025 by rpki-client