Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/An6YNgwh93187k654T-zbgMGRlg.roa
File: An6YNgwh93187k654T-zbgMGRlg.roa (raw, json)
Hash identifier: nmjx1IvTXJQBFo0I6BDxNzxZSqlRyAfA/ku4fVVGSzU=
Subject key identifier: 02:7E:98:36:0C:21:F7:7D:7C:EE:4E:B9:E1:3F:B3:6E:03:06:46:58
Certificate issuer: /CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Certificate serial: 01942669DDE7CF6B393697CDEFA6F112A620
Authority key identifier: 9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/An6YNgwh93187k654T-zbgMGRlg.roa
Signing time: Thu 02 Jan 2025 09:47:39 +0000
ROA not before: Thu 02 Jan 2025 09:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39074
IP address blocks: 45.15.200.0/24 maxlen: 24
45.15.201.0/24 maxlen: 24
45.15.202.0/24 maxlen: 24
45.15.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:69:dd:e7:cf:6b:39:36:97:cd:ef:a6:f1:12:a6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Validity
Not Before: Jan 2 09:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=027e98360c21f77d7cee4eb9e13fb36e03064658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7a:2a:4d:d0:cf:ab:87:8a:07:33:9f:d0:8f:
cd:b4:62:e0:4a:de:33:b7:c0:2e:87:9b:ac:ed:ea:
ff:79:da:84:c4:71:b3:cb:b7:fb:fb:62:22:c5:ae:
25:4e:39:61:4c:86:e7:f8:3f:d6:06:aa:bd:93:3c:
c8:c0:42:a1:17:d0:47:18:97:d0:c8:cb:45:9b:57:
05:44:d1:f3:78:bf:64:51:35:69:1c:78:8d:52:9b:
29:6d:e9:2d:be:0a:71:1b:5b:0a:f6:fa:ef:a5:ea:
60:a2:1a:5e:68:0a:5b:6e:fe:6e:b7:00:92:8c:4e:
25:89:10:d8:fb:bd:09:16:9a:30:16:1b:94:87:f1:
26:ec:b2:c5:53:43:e9:da:11:32:d8:ee:b5:b6:0c:
86:98:2c:fe:47:fe:e5:3f:86:7a:47:dc:5d:bd:5c:
4b:13:a4:3f:3d:96:80:52:f1:3c:4b:c7:67:04:b2:
c6:80:9c:2d:59:59:1f:b4:95:1c:5f:5c:bb:6e:c8:
92:4f:ae:e0:90:cc:54:7e:39:05:85:25:9f:dd:6d:
5f:89:7c:62:4f:ff:f3:f1:b8:6b:57:e5:d5:48:86:
72:f3:c9:1b:38:ff:da:00:5a:65:9a:bf:ba:a4:10:
73:a7:bb:13:05:a8:f0:83:bf:c9:cc:94:a1:35:50:
d7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7E:98:36:0C:21:F7:7D:7C:EE:4E:B9:E1:3F:B3:6E:03:06:46:58
X509v3 Authority Key Identifier:
keyid:9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/An6YNgwh93187k654T-zbgMGRlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.200.0/22
Signature Algorithm: sha256WithRSAEncryption
86:ae:2d:20:f2:83:62:33:c0:76:73:d3:95:68:9a:81:00:16:
01:1a:66:f5:9f:20:5c:b9:53:de:d9:be:67:23:2e:e5:fc:29:
12:e4:a9:5d:ec:26:5b:b0:9f:19:a8:07:c6:cb:f5:d2:de:58:
d4:db:dc:09:0f:31:a0:01:78:d5:46:19:20:0a:80:19:93:8f:
d4:e2:5e:60:bf:3f:87:e3:2b:02:07:7a:29:7e:1d:2f:ff:be:
28:19:a6:ce:72:f4:aa:33:35:87:e2:db:6e:be:34:95:4e:a0:
b9:d1:ed:53:5f:c6:0f:73:b4:89:be:94:c9:65:d4:50:18:35:
cc:8c:d7:b7:5f:dd:66:5f:17:63:79:f7:e1:84:7e:5c:29:29:
f3:a8:b6:66:a7:4f:4b:c3:c5:b6:14:80:2e:97:b3:0b:aa:87:
b4:dc:94:c9:66:54:9b:cc:fc:37:46:d1:a6:d1:ca:b0:c4:7f:
3c:21:84:bc:bf:c7:f1:41:9a:18:e0:f1:bf:ee:70:f3:83:5c:
3e:1d:1a:e7:b6:10:a9:0f:1e:09:b0:0a:82:a5:84:fd:7c:51:
21:6f:f1:fd:ef:41:4e:17:6b:32:47:12:98:87:92:8c:92:66:
7d:05:f8:9f:fc:30:0c:f6:49:92:be:4c:c4:9d:40:ce:3c:68:
3e:7a:1d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:32 2025 by rpki-client