Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/t2IAGMSzk4-7dntYHVtGoSAvw3E.roa
File: t2IAGMSzk4-7dntYHVtGoSAvw3E.roa (raw, json)
Hash identifier: MFygbsGgjd41JH2HTdeF0MRaBb6hffk9LejkFMw08aY=
Subject key identifier: B7:62:00:18:C4:B3:93:8F:BB:76:7B:58:1D:5B:46:A1:20:2F:C3:71
Certificate issuer: /CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
Certificate serial: 0194228DF2AC105757F292A243F224194F8A
Authority key identifier: DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/t2IAGMSzk4-7dntYHVtGoSAvw3E.roa
Signing time: Wed 01 Jan 2025 15:48:35 +0000
ROA not before: Wed 01 Jan 2025 15:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57866
IP address blocks: 45.149.8.0/22 maxlen: 22
185.21.48.0/24 maxlen: 24
185.242.64.0/22 maxlen: 22
2a0c:c080::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f2:ac:10:57:57:f2:92:a2:43:f2:24:19:4f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
Validity
Not Before: Jan 1 15:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7620018c4b3938fbb767b581d5b46a1202fc371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:22:cb:5f:ab:0d:22:8e:ea:4a:63:d7:18:6d:
13:72:60:b6:64:8f:46:de:1a:db:e6:3e:40:7b:02:
5f:99:a4:85:52:09:e1:3f:9f:6a:44:aa:60:b4:b3:
f7:2a:9e:0c:c1:9c:a2:ff:f3:11:e6:16:cf:02:74:
11:d7:7e:63:82:bf:aa:86:51:28:97:70:45:be:ce:
9e:de:8d:f0:e3:bf:cf:23:ac:fb:df:33:73:bb:b7:
ec:4c:36:67:b0:4a:88:f9:1e:e7:f4:f6:59:44:62:
cf:29:c8:4c:87:02:03:d0:02:3b:78:21:39:bf:9c:
ee:35:85:93:a3:9f:81:05:52:97:41:ec:d4:e4:fb:
17:ac:54:e6:39:ef:d4:81:14:94:a3:89:b3:a5:24:
88:cc:70:d4:b5:fa:4a:3d:82:cb:60:a3:a3:5d:d1:
8d:d8:e4:2c:c2:ab:a3:23:93:ea:6f:a0:a4:46:c7:
e2:b9:a3:da:30:36:b3:b7:9d:60:26:a8:10:9b:b8:
72:c9:c3:0b:e0:2e:2d:e3:12:66:32:93:2f:42:6e:
6c:5c:db:15:16:18:52:9d:c5:4d:df:a9:3f:f6:33:
5a:b4:16:e1:1c:7b:b6:51:d7:0e:a4:b7:bc:09:c7:
11:99:8c:aa:d7:db:45:c2:e6:99:87:7f:b6:57:56:
22:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:62:00:18:C4:B3:93:8F:BB:76:7B:58:1D:5B:46:A1:20:2F:C3:71
X509v3 Authority Key Identifier:
keyid:DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/t2IAGMSzk4-7dntYHVtGoSAvw3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.8.0/22
185.21.48.0/24
185.242.64.0/22
IPv6:
2a0c:c080::/29
Signature Algorithm: sha256WithRSAEncryption
36:e8:7b:11:3d:46:0e:2a:9e:71:b0:6a:bb:b9:15:fe:f3:0a:
53:bf:25:9a:2b:80:ee:f3:f2:1a:0c:fc:98:ce:dc:22:77:37:
e3:33:f8:40:64:1f:13:85:8a:9d:39:16:b9:ad:c6:1a:5a:7a:
90:98:28:38:fc:3a:16:2b:a9:bb:70:62:14:37:b8:f9:f5:aa:
d6:93:22:66:d9:2e:aa:fb:09:d9:bf:f0:73:68:92:bd:5b:5c:
84:d6:c7:7f:30:50:04:b9:cb:02:72:dc:d8:f9:08:6f:a9:77:
3d:14:c5:48:62:04:57:6d:f6:23:52:56:50:cb:fb:10:67:67:
f2:99:c0:bc:ff:be:1a:5d:3f:0d:79:9a:f8:72:c8:5f:4d:ee:
45:cd:f2:15:1f:bc:1b:ea:7d:b7:4a:a3:6c:ac:c9:4c:3b:62:
a5:8d:1a:47:d2:4f:e4:e2:17:9d:e0:8a:9f:56:cb:62:70:e1:
bd:6e:07:06:31:96:b0:6f:78:f2:bf:bf:03:85:05:ac:e5:7f:
23:88:ae:b7:3f:15:b4:9f:99:4c:5a:65:d0:9f:d7:51:d7:e6:
80:a0:71:12:61:0a:13:39:65:46:00:c1:83:81:19:08:03:58:
34:e5:f3:68:71:25:86:fa:0f:fa:18:b6:81:bb:1e:58:e1:d0:
a0:9e:51:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net