Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gHPWHyifWHwygl6RXc-S_BViAv0.roa
File: gHPWHyifWHwygl6RXc-S_BViAv0.roa (raw, json)
Hash identifier: z+ENnJP8gUh9QOydmc0fMConfO5crb4XF9elye+KrnQ=
Subject key identifier: 80:73:D6:1F:28:9F:58:7C:32:82:5E:91:5D:CF:92:FC:15:62:02:FD
Certificate issuer: /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Certificate serial: 019421442A2E2B3E93CB821287E191707DF6
Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gHPWHyifWHwygl6RXc-S_BViAv0.roa
Signing time: Wed 01 Jan 2025 09:48:22 +0000
ROA not before: Wed 01 Jan 2025 09:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204582
IP address blocks: 45.89.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2a:2e:2b:3e:93:cb:82:12:87:e1:91:70:7d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Validity
Not Before: Jan 1 09:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8073d61f289f587c32825e915dcf92fc156202fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:cd:ae:c0:41:b4:74:96:08:ea:08:12:c6:
ba:9f:c9:53:1c:e0:1e:8f:ae:77:4b:9b:13:a0:80:
64:a7:bb:a6:45:43:b6:b9:ef:05:17:85:ad:6e:47:
de:cf:94:48:35:77:d2:df:48:dd:0a:d0:9a:84:61:
d3:36:f7:b9:d8:76:94:d0:bf:85:24:5b:8e:36:ba:
19:fc:b0:72:7a:66:19:ab:89:ed:1e:9f:8d:94:a5:
1f:5e:1b:af:d4:0e:a4:56:5c:20:38:51:f5:85:4e:
8e:4d:e6:ee:4b:d7:86:91:cb:e5:1d:cf:db:49:df:
f9:79:67:bc:ea:3b:e8:f5:40:42:25:cd:78:8c:49:
75:c4:99:e9:88:f6:bc:70:e0:f3:5d:ce:db:8c:49:
1a:b2:00:ea:13:35:35:81:4a:25:66:20:0b:19:63:
4e:6f:d9:9a:99:8d:84:d1:58:8d:b4:5c:8f:b9:84:
a3:40:fa:7c:c1:e0:49:02:ab:ce:88:6e:f2:0b:8d:
52:88:98:4b:76:6b:e1:c9:fd:21:cd:74:0b:56:0b:
18:27:14:c1:dd:8a:ef:a3:05:ff:ba:12:2c:44:11:
09:67:3c:02:6a:03:ef:e8:33:65:31:96:11:6d:e8:
09:38:bd:7c:a5:94:c3:4d:07:39:e9:5b:ed:42:56:
66:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:73:D6:1F:28:9F:58:7C:32:82:5E:91:5D:CF:92:FC:15:62:02:FD
X509v3 Authority Key Identifier:
keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gHPWHyifWHwygl6RXc-S_BViAv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.22.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:2b:fb:e2:b4:ee:7f:87:08:c5:b2:a8:ba:f2:e0:2b:f4:d0:
28:59:c5:b9:19:f0:af:84:aa:05:d6:04:cf:2d:4d:47:3e:01:
3e:42:a7:b6:55:a1:0e:89:74:04:ad:9d:d5:f2:88:18:8a:b2:
3a:27:10:ef:4d:80:4d:ed:9d:78:20:a4:59:b4:11:c4:28:e3:
0d:bb:f7:7c:2a:07:c0:c8:62:44:61:69:16:8a:32:41:d1:1f:
ae:d4:37:e5:80:de:48:a4:ed:aa:b6:47:05:b7:1d:f1:a8:5b:
90:9c:f9:e4:5f:c0:78:e3:a2:30:a1:6b:e3:80:ad:b0:40:5a:
9a:1f:0a:41:ce:b6:44:10:ba:e1:25:ed:0c:4f:bb:98:da:3c:
0d:df:19:8b:37:2d:c8:fe:ab:53:2b:ce:8d:b7:a8:01:ac:5a:
c1:7b:13:17:15:88:54:50:4b:e9:c0:6d:5b:16:71:fb:73:e9:
1f:cb:1f:99:e4:3a:89:f0:bc:86:4f:de:62:27:b1:a9:f1:6e:
19:cd:3d:c1:c4:65:cb:0b:01:a1:14:90:33:41:27:d2:b7:8c:
fd:72:d0:d6:70:e0:85:79:d6:fd:c9:1d:c9:b8:95:6b:01:36:
7e:c2:0f:db:48:36:53:b9:96:bf:7e:d8:26:ac:9e:cd:52:2d:
09:c0:34:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:16 2025 by rpki-client on console.sobornost.net