Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/sdcv864WQrJBi5xKuVwuLH2j6Tk.roa
File: sdcv864WQrJBi5xKuVwuLH2j6Tk.roa (raw, json)
Hash identifier: eFYC5loUXzRtmrgy7poaf0InOUtNFCrHQGg1kdVt86Q=
Subject key identifier: B1:D7:2F:F3:AE:16:42:B2:41:8B:9C:4A:B9:5C:2E:2C:7D:A3:E9:39
Certificate issuer: /CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Certificate serial: 01942368F72205B85B5CFF7C74B150A2A767
Authority key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/sdcv864WQrJBi5xKuVwuLH2j6Tk.roa
Signing time: Wed 01 Jan 2025 19:47:49 +0000
ROA not before: Wed 01 Jan 2025 19:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208603
IP address blocks: 45.90.252.0/22 maxlen: 24
45.90.254.0/24 maxlen: 24
45.90.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:f7:22:05:b8:5b:5c:ff:7c:74:b1:50:a2:a7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Validity
Not Before: Jan 1 19:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1d72ff3ae1642b2418b9c4ab95c2e2c7da3e939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dc:2a:a7:b8:97:9f:7d:04:ae:70:55:4a:6a:
94:e5:a3:12:6b:0c:4a:89:96:fb:01:2a:25:c3:99:
25:84:74:50:14:df:32:b2:f1:22:a1:4e:84:a1:45:
45:3a:5b:ab:2e:f0:22:d0:91:79:37:40:be:0d:f4:
72:e5:db:eb:3b:0a:8f:3a:a7:9f:2c:57:b3:30:f7:
a1:35:04:ce:d9:a1:7f:0a:21:0c:ba:fa:8c:8f:ff:
c3:d8:ef:c3:92:c0:58:ba:55:43:53:f8:54:68:38:
f0:20:8b:31:b8:26:67:ee:fd:09:3d:85:77:78:e0:
bc:6b:3b:12:83:00:c4:d7:b8:77:47:97:5e:22:c4:
13:35:a5:1a:ea:b1:e7:ff:21:3e:b4:64:f5:55:de:
74:aa:36:6a:d4:18:70:f3:d4:12:90:77:1a:c6:5e:
82:a0:ef:6f:ab:36:7c:e6:40:12:04:ee:3a:df:65:
c0:e9:37:ee:1e:cf:a4:8b:ad:02:98:ae:3a:9c:43:
02:f6:88:d5:9a:42:69:86:71:39:f8:a0:d1:4b:61:
53:3e:7c:43:6d:7d:37:61:2b:03:5b:1e:be:3c:bb:
86:85:64:8d:56:0a:fd:a5:4f:4b:51:14:ec:71:fa:
86:52:52:7c:a5:3d:d6:fa:e5:fc:09:9a:5c:d2:81:
07:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D7:2F:F3:AE:16:42:B2:41:8B:9C:4A:B9:5C:2E:2C:7D:A3:E9:39
X509v3 Authority Key Identifier:
keyid:FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/sdcv864WQrJBi5xKuVwuLH2j6Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.252.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:8b:b6:e7:5e:d1:79:43:3b:67:63:70:32:ca:59:d1:b7:1a:
a9:e9:86:a4:e3:c0:f5:c7:5c:1e:1c:4d:8c:89:47:5d:92:90:
c2:48:d2:4b:61:ab:09:44:7c:45:12:f2:44:90:a5:4a:9a:4d:
c2:c1:b6:d8:cd:43:44:c1:10:26:cd:c8:db:b0:50:2b:99:36:
14:92:3e:56:7e:83:0e:f7:2b:fb:b7:75:a6:42:fe:76:00:b5:
f3:8f:51:0b:bc:94:2b:f0:ca:61:54:db:45:7a:7a:72:45:8b:
09:51:5b:b7:ae:df:d5:94:6e:f9:e2:61:34:57:6f:0a:b3:cd:
62:b5:19:9c:53:5b:6d:6c:a6:55:3b:78:8a:19:9c:93:f7:60:
e8:e5:c3:15:2b:c1:21:ce:86:24:15:77:bb:bf:7a:05:b8:ae:
40:e0:86:15:bd:40:5c:4a:56:e7:10:fb:32:87:a4:d6:6b:97:
9e:3f:5b:b7:37:64:54:7a:f9:7c:4d:03:21:35:12:7f:1f:97:
35:51:81:16:a9:d7:7b:64:42:77:d3:43:08:4e:da:a9:d5:01:
e0:4e:e4:e5:42:d3:0d:2a:dc:ec:ff:06:96:7e:97:3e:c5:f2:
fd:b0:e3:94:00:b4:48:f2:37:4b:ee:56:42:db:ba:bb:2d:14:
8d:fb:95:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net