Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/RXltaGeVSLLvEtVhuI8kryyqAEY.roa
File: RXltaGeVSLLvEtVhuI8kryyqAEY.roa (raw, json)
Hash identifier: Sq4O0eAJlnMKv+pxipVDsrh+Q6PzS4fGsNzZeo0CJmQ=
Subject key identifier: 45:79:6D:68:67:95:48:B2:EF:12:D5:61:B8:8F:24:AF:2C:AA:00:46
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 01954C9B96700AF6D21C4578C5EB57EC788A
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/RXltaGeVSLLvEtVhuI8kryyqAEY.roa
Signing time: Fri 28 Feb 2025 12:50:19 +0000
ROA not before: Fri 28 Feb 2025 12:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 145.69.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:9b:96:70:0a:f6:d2:1c:45:78:c5:eb:57:ec:78:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Feb 28 12:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45796d68679548b2ef12d561b88f24af2caa0046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:49:65:ee:cb:96:61:ee:91:e9:db:50:92:0b:
21:fd:c9:e3:76:82:d2:4e:f8:8e:be:22:f4:0e:9f:
a6:de:ee:fe:e2:9c:2d:45:ea:6c:c7:d1:61:38:05:
b8:f1:22:6f:7f:d9:c3:5e:53:09:65:bb:90:19:a2:
94:61:a3:cd:51:4c:77:e8:d2:d1:bc:0f:4d:cf:67:
2a:03:5a:f1:02:cf:46:fc:b1:7d:f0:a5:1a:fe:da:
d1:d2:ba:37:8b:52:fb:06:37:2e:68:45:31:ce:90:
f9:f4:f3:2e:0f:58:54:f8:67:bd:f5:cf:ff:60:05:
c3:e6:be:f4:a1:e6:91:27:4e:dd:24:1c:d7:02:02:
74:b7:95:f3:0f:16:f7:28:e5:c3:e2:99:aa:0c:2a:
aa:fc:cd:e3:08:df:fe:1e:48:c8:19:75:a1:00:2a:
2b:7f:40:f3:27:68:c9:7c:83:94:ff:e3:f8:fc:f9:
2c:96:51:b3:bb:52:cb:82:71:40:a3:cd:10:42:62:
f6:54:87:a6:57:c4:96:8f:f3:41:46:5b:da:f9:e7:
4e:5d:32:93:a6:61:49:a0:e6:55:c9:eb:d6:6b:e8:
47:4c:81:52:7c:bc:2e:38:20:90:82:b3:e3:50:f3:
7f:ec:29:9f:d6:84:41:8c:63:ec:47:bd:01:aa:d6:
eb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:79:6D:68:67:95:48:B2:EF:12:D5:61:B8:8F:24:AF:2C:AA:00:46
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/RXltaGeVSLLvEtVhuI8kryyqAEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.69.80.0/21
Signature Algorithm: sha256WithRSAEncryption
45:68:a0:17:df:59:e6:74:0c:d0:fc:8e:48:2b:7b:e4:c5:09:
42:27:69:a7:98:2d:3e:aa:07:c6:39:95:61:25:38:61:24:29:
eb:cc:11:3b:7c:91:8b:53:5f:b7:fc:92:d1:1e:5d:aa:b3:cf:
ee:52:c6:3a:40:34:69:0c:5e:73:7e:31:57:9c:fb:48:9c:28:
d9:46:c2:a6:e0:d2:ac:6d:9a:67:c3:82:3f:21:a1:cb:4f:13:
58:dd:38:d6:3b:e5:91:0d:7a:29:19:09:96:92:8f:01:3c:57:
54:be:98:7d:95:15:fe:aa:64:58:86:ff:59:f1:fe:8f:a1:50:
c8:83:ce:cb:a8:f2:2f:77:97:42:3a:6b:9d:0c:75:51:47:76:
02:e6:9e:0d:ba:2e:16:43:8a:46:49:2e:68:a1:a9:e7:98:8d:
80:a8:5a:1e:bc:34:86:22:b9:58:47:c0:7f:96:04:39:cc:cb:
b9:a3:6a:14:fd:ac:72:33:b7:cd:24:50:0a:ae:52:96:17:f8:
0e:4d:f7:62:a0:4a:4a:22:96:10:37:96:33:c7:b6:11:da:a7:
24:f1:c7:a5:47:fe:a4:d1:18:df:a6:8c:f2:ad:90:22:05:c2:
ea:82:29:82:79:1a:07:63:c8:e5:eb:b8:f8:59:7a:40:1e:f1:
92:a1:03:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:53:20 2025 by rpki-client