Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/s9a8ENLs5q1seNY6ASHD0pzkMco.roa
File: s9a8ENLs5q1seNY6ASHD0pzkMco.roa (raw, json)
Hash identifier: kb8YLjZxqXQKy5ezUGhWndlkKF9j+8NuWi1FYUi/Mz4=
Subject key identifier: B3:D6:BC:10:D2:EC:E6:AD:6C:78:D6:3A:01:21:C3:D2:9C:E4:31:CA
Certificate issuer: /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Certificate serial: 0194228D35D08C3B16B5B30251A850023AE2
Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/s9a8ENLs5q1seNY6ASHD0pzkMco.roa
Signing time: Wed 01 Jan 2025 15:47:47 +0000
ROA not before: Wed 01 Jan 2025 15:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208486
IP address blocks: 45.149.180.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:35:d0:8c:3b:16:b5:b3:02:51:a8:50:02:3a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Validity
Not Before: Jan 1 15:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3d6bc10d2ece6ad6c78d63a0121c3d29ce431ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bf:c9:c8:78:50:6d:6d:0f:2e:99:c4:c2:4d:
44:12:13:7e:84:04:0f:55:b2:8d:25:5e:61:ad:24:
c9:45:a4:ce:b0:88:f7:9b:e2:37:86:15:3d:da:cb:
6e:8b:34:dc:cc:4d:a7:e3:e5:6f:94:95:74:bd:fe:
19:c9:e4:dd:c5:65:89:0c:5c:02:0d:28:30:55:53:
67:7c:ad:4c:1d:68:7b:83:cb:98:a1:35:2c:48:d6:
20:d9:87:5f:e4:9e:1d:4f:64:31:c0:be:be:6b:a6:
cb:40:c7:93:1a:34:4c:c5:b3:fb:51:fc:f0:ef:74:
ae:ab:fc:aa:c0:15:72:cb:24:74:8b:76:04:64:f2:
a7:0b:a5:04:bd:e9:97:9b:08:bc:93:8e:67:b5:9c:
3f:69:74:f3:ff:ac:39:93:c1:76:d6:51:72:7f:6d:
48:6b:61:19:e6:66:b7:7c:35:dd:20:10:4c:0c:38:
92:c3:e9:b2:cb:e7:94:7d:0c:16:5b:3b:8c:19:ec:
4b:09:21:1e:95:a4:9b:ed:ac:c7:48:8a:eb:1e:81:
18:10:2f:bb:79:85:63:ed:cc:46:59:86:f0:68:fb:
23:6d:c2:12:37:61:22:41:b2:16:55:f3:c3:37:75:
aa:00:45:eb:11:fb:4b:a9:01:c8:58:f5:1e:c7:77:
42:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D6:BC:10:D2:EC:E6:AD:6C:78:D6:3A:01:21:C3:D2:9C:E4:31:CA
X509v3 Authority Key Identifier:
keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/s9a8ENLs5q1seNY6ASHD0pzkMco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.180.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:d5:ee:3b:56:39:dc:99:8a:0a:d4:ec:f1:40:3f:97:c1:0d:
21:97:63:89:35:dc:9c:40:41:fc:7a:30:f9:c7:9e:15:5e:e5:
90:85:21:72:54:bb:44:d8:62:1e:48:54:af:43:da:83:34:07:
ed:5f:74:81:9e:6b:38:45:2d:59:af:e1:9e:e4:38:f9:08:07:
f2:dc:de:ee:fe:ae:a5:ce:ec:1a:26:a3:d9:25:eb:6c:7a:d6:
98:dd:c5:df:76:3f:92:26:2a:86:eb:ae:6f:b8:5d:3e:92:08:
b9:19:bf:98:86:41:ec:80:55:fd:61:8d:2a:78:c6:64:38:f8:
31:80:70:e5:f6:6a:10:82:e0:07:e0:b5:19:09:89:2d:58:ae:
66:5a:86:35:0f:76:64:e8:c0:79:0c:53:e9:ab:4f:d0:f1:b0:
8d:9a:c7:a3:e9:28:4c:f9:5f:9d:21:9c:e7:44:36:4e:4b:e6:
58:d3:8c:89:36:a2:91:d4:5a:d0:f1:7d:52:2f:21:19:7f:4a:
4d:0c:6b:75:59:15:85:b5:04:cd:27:86:ff:c0:22:5a:18:74:
e6:30:50:8c:1c:56:a5:0c:a9:a8:c3:88:48:95:53:2d:ad:00:
74:e4:97:92:84:8c:71:ec:b0:ea:59:88:da:5c:5c:fe:99:11:
3f:fe:05:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:58:29 2025 by rpki-client