Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/M_PuTLErPj8kaXkeBy5OmHYauuI.roa
File: M_PuTLErPj8kaXkeBy5OmHYauuI.roa (raw, json)
Hash identifier: uCFRQj0T8LOt3CixbitxMiJ5LrW2V3WIxaXqvYOfbSU=
Subject key identifier: 33:F3:EE:4C:B1:2B:3E:3F:24:69:79:1E:07:2E:4E:98:76:1A:BA:E2
Certificate issuer: /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial: 01942144306E5F404A4F8E850D1FCAF906C4
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/M_PuTLErPj8kaXkeBy5OmHYauuI.roa
Signing time: Wed 01 Jan 2025 09:48:24 +0000
ROA not before: Wed 01 Jan 2025 09:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214122
IP address blocks: 45.157.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:30:6e:5f:40:4a:4f:8e:85:0d:1f:ca:f9:06:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Validity
Not Before: Jan 1 09:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33f3ee4cb12b3e3f2469791e072e4e98761abae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:40:7e:58:97:21:17:10:c8:4e:c2:95:b6:
46:eb:07:e5:8b:a4:da:7f:b1:12:25:97:f9:18:8a:
f4:b2:82:f4:6e:e6:a9:93:60:ba:81:e4:a5:0e:c7:
a7:10:80:9f:83:4d:84:57:a3:ba:4f:75:43:37:fb:
b6:24:7e:c3:2c:16:94:b7:61:7e:e3:58:1f:8b:f0:
80:8d:dc:f6:b1:f0:43:c9:0b:31:89:3f:53:e7:4a:
67:52:47:72:b0:76:6f:a4:4e:f7:0c:f5:2f:6f:f4:
6f:07:80:c6:d6:2a:e1:44:5d:ef:6b:cf:f4:c3:fd:
fe:34:95:86:a3:6b:52:33:00:0d:c6:51:e1:7a:56:
d5:54:ef:dd:f0:1b:f0:00:51:7f:84:b9:41:b3:c0:
ac:de:0e:5c:4a:1a:c0:35:ce:f6:a6:39:b3:78:55:
1d:73:22:69:42:db:72:2a:e6:b6:e9:03:f1:51:8c:
c4:d9:27:15:b1:eb:c9:ac:af:c3:64:a6:53:9b:02:
5a:1e:86:e3:8f:29:ce:f4:4a:2f:cb:3a:c0:be:57:
4b:06:56:50:45:0a:37:d2:b0:2b:1a:7f:26:c1:bd:
32:0f:ad:71:87:3b:05:44:51:4b:19:5c:bb:36:46:
81:24:45:c8:4f:86:83:0f:31:60:d3:db:cb:d6:63:
6c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F3:EE:4C:B1:2B:3E:3F:24:69:79:1E:07:2E:4E:98:76:1A:BA:E2
X509v3 Authority Key Identifier:
keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/M_PuTLErPj8kaXkeBy5OmHYauuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.3.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:84:91:33:bc:d4:d5:99:d2:37:12:d5:a1:eb:9d:17:d2:cc:
b8:bf:f9:2d:fe:77:46:12:4a:4b:37:84:3c:51:6e:96:cf:37:
be:52:f7:5a:a4:34:c0:3d:d3:35:e9:17:39:a7:02:1a:5a:96:
81:94:33:75:26:09:71:f1:4e:90:95:79:7a:ad:6f:86:ca:1a:
2d:b3:da:01:fd:44:ca:01:62:a6:c3:97:eb:5c:e4:d4:fa:02:
c2:d4:dd:63:fc:25:0c:d7:60:10:e3:bd:01:1b:e6:51:a1:4f:
06:07:78:c9:74:f8:9d:f9:31:15:74:94:0e:b7:1f:b6:3a:2d:
2a:f9:48:44:1e:68:fb:5d:a2:f2:ed:a2:58:9d:02:db:0f:f0:
7b:f9:d2:72:5b:88:8a:c1:25:43:39:79:80:88:8b:f1:67:e8:
79:40:4d:16:9d:2a:db:98:a7:56:e9:0c:64:4c:99:85:f1:e5:
15:6a:30:b3:ee:99:20:ad:a5:bc:8e:ca:31:50:2e:8d:8a:8f:
c9:9f:69:46:2b:10:5d:67:5a:90:f6:b4:a7:83:04:3e:4f:8c:
f7:d7:2f:ae:24:db:02:78:57:37:81:ec:1b:85:45:c5:3d:c8:
5b:da:89:ba:65:73:5f:2a:66:88:c6:66:d4:6e:58:2e:bb:d2:
59:8b:05:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:55 2025 by rpki-client on console.sobornost.net