Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/PpLMyuWEi7GW-Zo7FScOzQEDqmw.roa
File: PpLMyuWEi7GW-Zo7FScOzQEDqmw.roa (raw, json)
Hash identifier: tpDYLlf85669UfO2WjK12JWkdre1n2ZIYLt0uyeHU34=
Subject key identifier: 3E:92:CC:CA:E5:84:8B:B1:96:F9:9A:3B:15:27:0E:CD:01:03:AA:6C
Certificate issuer: /CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Certificate serial: 019427B5CB6F1378D6262FEA913850D72DAB
Authority key identifier: 06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/PpLMyuWEi7GW-Zo7FScOzQEDqmw.roa
Signing time: Thu 02 Jan 2025 15:50:12 +0000
ROA not before: Thu 02 Jan 2025 15:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208702
IP address blocks: 45.154.92.0/24 maxlen: 24
45.154.93.0/24 maxlen: 24
45.154.94.0/24 maxlen: 24
45.154.95.0/24 maxlen: 24
2001:678:a98::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:cb:6f:13:78:d6:26:2f:ea:91:38:50:d7:2d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Validity
Not Before: Jan 2 15:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e92cccae5848bb196f99a3b15270ecd0103aa6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a4:91:a8:3c:2b:27:37:5d:e6:d4:f0:37:7a:
b7:87:c0:44:d5:eb:f9:82:1c:8b:36:13:c1:3a:77:
ab:7f:80:ed:94:5a:00:2a:58:a0:08:d5:69:47:ed:
66:0a:e1:99:23:8a:0f:b6:f4:b2:2d:a6:2c:5d:15:
63:87:0f:1b:1e:47:70:b3:a4:4e:21:93:be:ae:5e:
4d:eb:dc:38:63:e4:26:b5:0a:41:9f:ae:76:10:6d:
41:e1:74:0f:d3:20:7b:0e:f1:cc:86:91:9e:2d:a5:
3c:45:58:c1:15:b4:87:86:7f:ac:d0:c4:44:7d:f5:
d8:32:3c:c7:e8:2d:6b:95:6d:05:93:a9:db:1a:f5:
b3:b9:9e:a3:34:02:68:55:ee:de:57:28:5e:22:66:
f4:ab:aa:09:c2:80:d3:a3:49:7f:69:c0:22:e7:d3:
d4:48:42:1b:5b:20:45:87:f4:67:fc:cb:30:fd:26:
be:38:9c:dd:50:5b:cb:f4:15:04:de:8d:21:8b:2f:
9f:2b:b8:27:db:9c:0e:d6:31:e3:fe:12:a9:1e:38:
c6:90:28:65:8e:af:1f:de:36:72:f3:f3:8b:72:4e:
ff:46:cd:1e:96:d9:cc:6e:83:f7:b9:52:60:3a:d6:
6c:fb:a3:a3:27:be:73:98:04:f4:40:e4:8b:28:f9:
1a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:92:CC:CA:E5:84:8B:B1:96:F9:9A:3B:15:27:0E:CD:01:03:AA:6C
X509v3 Authority Key Identifier:
keyid:06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/PpLMyuWEi7GW-Zo7FScOzQEDqmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.92.0/22
IPv6:
2001:678:a98::/48
Signature Algorithm: sha256WithRSAEncryption
76:06:bb:f8:d6:05:85:d1:30:9a:11:cf:41:27:2e:29:49:76:
51:3d:d0:3a:c9:42:d2:90:54:ed:31:10:e4:42:54:ad:98:84:
13:41:cf:d1:11:6e:95:db:cc:01:d8:fc:c6:66:7f:48:ab:e9:
05:6f:64:a1:6a:e8:c0:f0:80:dd:b0:40:4d:17:d7:b9:1f:fb:
c3:72:4c:12:7a:cf:f3:e0:43:7f:80:6b:c6:23:0d:cd:c3:61:
10:e6:34:ea:91:9c:ee:62:64:8a:2f:45:3a:c0:ec:90:88:dd:
86:56:3c:fe:67:ca:75:9c:06:60:95:90:55:3f:7a:a6:99:a5:
e1:f8:84:9f:50:31:56:ca:03:b6:fb:7e:d5:6c:dc:cd:72:49:
dc:e5:2e:80:70:57:ff:61:be:32:c0:12:2f:2d:a6:2d:f4:10:
79:63:6e:29:a4:bd:92:db:c4:69:40:be:b1:76:5d:72:e8:ae:
fb:f2:a3:4e:3a:66:9a:ed:52:fd:c0:3a:35:29:26:b6:8a:bd:
04:ad:99:bb:f0:d3:4e:9f:c0:46:05:0a:37:46:c7:2e:c1:89:
e0:6f:e3:44:cb:78:71:70:34:dd:c8:c9:61:44:cd:3f:52:95:
13:d2:d5:e7:d1:8d:7d:64:67:97:05:1a:20:21:be:ba:8e:0b:
09:40:a0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:41:35 2025 by rpki-client