Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/bRExEoq6AZ5rHIMVsV4GfJ10rcU.roa
File: bRExEoq6AZ5rHIMVsV4GfJ10rcU.roa (raw, json)
Hash identifier: CYGIK7KvoAnIIXqAQFMxwpkIsLNOXXwRLcfsIwViZMg=
Subject key identifier: 6D:11:31:12:8A:BA:01:9E:6B:1C:83:15:B1:5E:06:7C:9D:74:AD:C5
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 01960F87432CD03FA1D796C4BCA587AF8840
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/bRExEoq6AZ5rHIMVsV4GfJ10rcU.roa
Signing time: Mon 07 Apr 2025 09:14:04 +0000
ROA not before: Mon 07 Apr 2025 09:14:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30937
IP address blocks: 45.141.124.0/22 maxlen: 23
45.157.200.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:87:43:2c:d0:3f:a1:d7:96:c4:bc:a5:87:af:88:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Apr 7 09:14:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d1131128aba019e6b1c8315b15e067c9d74adc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2f:e0:3d:a9:88:89:ab:73:2d:41:91:ca:20:
18:2d:ca:24:87:ae:b5:d0:65:0e:3c:a1:25:9b:7d:
e4:80:c6:40:4d:43:e3:05:6a:83:c4:d7:8d:86:7e:
24:48:4d:05:d9:9a:86:87:82:55:27:84:9f:d3:9a:
4d:77:c9:96:49:03:12:bd:1a:99:df:a6:ba:3a:96:
ce:5a:33:d9:d3:4e:13:d3:46:50:1e:a5:94:01:a0:
c8:98:dd:b4:9b:af:73:8b:4b:dd:9e:2c:0d:92:a6:
8e:c3:04:35:ba:05:0e:d9:52:9a:05:67:9a:7c:67:
b5:99:90:90:e2:c0:72:30:ee:bd:a1:0c:73:60:5f:
77:fa:88:34:75:f5:97:af:40:62:dd:2b:47:bd:8d:
13:ab:00:b6:cf:60:40:db:5b:92:62:9b:45:18:f3:
d6:76:0b:8d:67:9e:1a:5c:51:be:9b:be:e0:23:46:
19:3e:71:8d:69:d4:74:52:67:5d:86:18:87:c5:e4:
94:22:f1:70:fe:34:c6:82:c6:da:17:6a:ee:4d:bf:
48:e2:fa:61:95:25:89:d1:45:e4:8f:4a:64:aa:17:
e5:db:37:2e:2c:ab:34:08:4d:f1:5f:ab:7f:38:02:
3a:0c:ac:e5:74:5f:e6:b9:0f:77:0f:ba:68:4b:40:
c0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:11:31:12:8A:BA:01:9E:6B:1C:83:15:B1:5E:06:7C:9D:74:AD:C5
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/bRExEoq6AZ5rHIMVsV4GfJ10rcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.124.0/22
45.157.200.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:6b:0a:0a:e7:e7:f1:d1:d8:2d:a4:8d:0f:52:0e:7a:4d:ed:
33:2b:35:dd:09:46:5f:67:8a:81:d3:65:ff:5e:f0:57:18:40:
0b:49:98:4f:2f:ef:e5:7a:70:91:ef:e7:d6:9c:49:9f:e5:d7:
76:00:88:10:6a:94:fe:9b:85:3e:1f:b4:20:c6:75:50:3e:53:
d4:87:b0:ec:7c:80:8a:c8:b6:7d:f7:ea:5a:0d:bb:44:a1:76:
57:25:0b:4a:03:85:5f:8a:e4:2f:3f:c8:2b:10:28:c9:ea:64:
90:f0:7a:95:d9:c1:e8:20:ed:8e:ac:34:89:98:1f:d5:b4:05:
bc:f0:b4:b2:c1:7a:69:9d:84:8e:a4:11:e9:77:a0:5f:60:8c:
34:f5:47:df:bd:38:8f:a6:ad:15:36:58:9a:ae:78:9a:03:2c:
d9:e2:03:da:53:a5:63:4f:61:c6:c7:6a:1e:e3:59:f0:fd:e0:
fb:25:f5:a1:8a:f2:ab:22:cf:65:d0:e5:59:3c:04:ec:83:80:
32:43:99:28:7b:e8:5e:1a:2f:70:26:95:04:f0:66:6e:96:c1:
8b:0c:99:05:2b:a8:34:bb:b5:3a:b5:72:d5:34:b6:bb:20:8a:
a1:dc:ee:2b:26:f4:a6:86:39:c5:c9:ca:b9:2f:4c:8d:1b:c9:
44:8d:62:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net