Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/uv22mTMk0LoSy-CXGbpeTi_cOpw.roa
File: uv22mTMk0LoSy-CXGbpeTi_cOpw.roa (raw, json)
Hash identifier: 2QrupXJ+8Kz2Vd606/D0/U753yg1bCscNq3qhZhPAaM=
Subject key identifier: BA:FD:B6:99:33:24:D0:BA:12:CB:E0:97:19:BA:5E:4E:2F:DC:3A:9C
Certificate issuer: /CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Certificate serial: 019420D637FCB081B840F4E2EC5B14833B69
Authority key identifier: D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/uv22mTMk0LoSy-CXGbpeTi_cOpw.roa
Signing time: Wed 01 Jan 2025 07:48:17 +0000
ROA not before: Wed 01 Jan 2025 07:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208859
IP address blocks: 45.81.144.0/22 maxlen: 22
45.81.144.0/24 maxlen: 24
45.81.145.0/24 maxlen: 24
45.81.146.0/24 maxlen: 24
45.81.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:37:fc:b0:81:b8:40:f4:e2:ec:5b:14:83:3b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Validity
Not Before: Jan 1 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bafdb6993324d0ba12cbe09719ba5e4e2fdc3a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bb:90:a9:67:1c:19:22:cd:57:9d:dd:94:0f:
04:1a:76:0b:4d:af:91:82:bc:26:ac:3d:4e:99:70:
b6:40:8d:c7:75:87:38:83:b9:4e:75:82:66:d2:44:
94:2e:ee:b3:a0:ce:48:1d:c3:1d:b9:e9:de:82:34:
2a:92:4c:e5:3d:1d:a9:72:a9:4c:e7:61:2e:bb:e5:
17:1b:51:fa:51:75:9c:a9:39:a5:74:c9:f3:75:1c:
bc:69:83:5c:0b:10:c5:de:1a:b8:47:b4:38:aa:9c:
1b:06:d2:52:d3:af:ec:42:54:25:f6:84:a3:e8:11:
b4:fb:be:a0:25:8d:59:f4:5a:83:a7:ed:21:36:54:
3e:69:0b:8c:e4:6f:68:4b:2e:c3:9d:62:56:5c:ff:
74:fb:bd:1a:cf:5b:bc:30:7a:7b:16:41:22:0d:0e:
38:ca:25:7a:65:39:a1:b6:0a:73:ae:e5:97:64:ab:
09:ce:68:f5:a2:ce:41:e7:41:a8:2a:c1:45:46:5c:
73:fb:61:e3:1b:1a:b1:58:25:c5:99:6c:d6:35:af:
37:66:02:08:ba:17:a6:de:30:71:f9:d8:ee:7d:f1:
68:af:ee:01:e7:7f:0f:b0:ef:b7:90:0d:d4:c7:b6:
f6:01:37:da:a6:bb:c6:77:d2:2d:1b:fb:72:06:3d:
57:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FD:B6:99:33:24:D0:BA:12:CB:E0:97:19:BA:5E:4E:2F:DC:3A:9C
X509v3 Authority Key Identifier:
keyid:D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/uv22mTMk0LoSy-CXGbpeTi_cOpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.144.0/22
Signature Algorithm: sha256WithRSAEncryption
24:2f:d2:8e:d8:f2:77:f9:e1:12:59:25:38:89:9e:4e:c3:4d:
96:2c:76:67:95:a8:09:00:47:32:d5:b6:93:a6:0b:6e:3a:3e:
f8:a6:fe:99:12:a5:a5:0f:fa:91:0f:a1:f9:8a:42:e2:92:f0:
2d:0d:84:61:e6:c9:f7:37:e2:53:77:26:c9:bc:d9:23:77:5a:
36:ab:de:45:42:18:00:f9:f4:d3:51:cc:91:e9:b1:96:a5:f6:
89:49:a8:c9:56:8b:64:d9:54:41:62:a0:8f:36:2b:e7:a9:61:
47:7a:c6:6c:9c:96:80:db:19:4d:c7:4e:82:49:46:16:a1:1e:
55:2c:ec:a7:d5:c6:9f:4b:23:b3:a9:a3:5b:50:5a:a5:4a:bf:
65:ad:da:f2:67:98:6c:33:d1:ea:d1:98:16:18:8a:4b:23:98:
80:db:36:9c:60:16:1b:a2:6f:f2:5a:1d:70:d8:96:c9:6e:77:
43:e3:e1:36:d6:b2:8b:c5:e0:79:3a:65:43:9f:a8:a6:d6:b3:
b5:f9:4a:31:61:a3:74:8a:9c:4a:08:22:3c:ed:83:52:81:20:
20:45:18:57:d9:93:f3:9f:f5:82:c2:86:cc:47:d9:3f:7d:b9:
ed:2e:f3:35:7a:78:35:fe:ed:b2:47:87:36:2f:24:9f:0e:65:
63:d0:f0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:53:42 2025 by rpki-client