Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/GSYjq6iczyoVzYDlz3HGUFSrIQ4.roa
File: GSYjq6iczyoVzYDlz3HGUFSrIQ4.roa (raw, json)
Hash identifier: XbCa3j6XTEyeRnElswqHZbpKZmfxYHeYOgSyLa4zvQM=
Subject key identifier: 19:26:23:AB:A8:9C:CF:2A:15:CD:80:E5:CF:71:C6:50:54:AB:21:0E
Certificate issuer: /CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Certificate serial: 019423D7EBB8D0CF874BA1DB80B788571608
Authority key identifier: A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/GSYjq6iczyoVzYDlz3HGUFSrIQ4.roa
Signing time: Wed 01 Jan 2025 21:49:00 +0000
ROA not before: Wed 01 Jan 2025 21:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208734
IP address blocks: 45.84.116.0/24 maxlen: 24
45.84.117.0/24 maxlen: 24
45.84.118.0/24 maxlen: 24
45.84.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:eb:b8:d0:cf:87:4b:a1:db:80:b7:88:57:16:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Validity
Not Before: Jan 1 21:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=192623aba89ccf2a15cd80e5cf71c65054ab210e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7a:cc:a6:a9:9a:e3:4e:6f:c9:83:91:7a:aa:
3e:8f:93:8e:37:1b:2d:c5:50:a2:ff:0f:f5:c5:16:
da:a7:ae:62:71:93:f5:0e:b8:b2:0b:a8:5b:c5:3e:
cc:55:57:42:fb:68:3f:c7:52:59:ca:c1:6f:59:5b:
1a:78:88:01:32:0b:8d:4d:12:ce:24:00:eb:2f:32:
5a:72:9e:af:be:c5:53:f5:da:52:9b:cc:90:7a:7e:
c8:fe:b2:39:3e:a3:68:02:98:86:12:48:aa:a6:7c:
3d:d2:cd:0f:a8:b9:4e:c7:8c:8a:0f:85:fb:1c:1d:
96:9d:a8:c2:3a:e3:46:10:61:11:de:06:40:fa:00:
87:0a:b2:26:ff:4d:49:2b:53:12:78:9e:41:59:13:
ef:a2:23:7f:01:0b:17:95:68:f4:cb:47:8c:93:f4:
3e:ac:5a:11:54:cf:e0:d7:9a:cd:f4:d7:ac:77:20:
f0:69:25:ee:7d:61:f0:50:45:ee:86:b9:09:9f:9e:
b4:23:25:fc:81:46:e0:b6:ef:f6:e6:fb:b6:54:ed:
aa:13:4f:20:d8:2b:2e:d3:4c:30:6d:4a:36:67:dc:
b8:4c:fc:40:12:9c:0e:47:79:4e:fc:16:ba:e4:ae:
a3:c6:06:f0:ee:80:ee:e6:78:b1:49:be:4d:cc:df:
34:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:26:23:AB:A8:9C:CF:2A:15:CD:80:E5:CF:71:C6:50:54:AB:21:0E
X509v3 Authority Key Identifier:
keyid:A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/GSYjq6iczyoVzYDlz3HGUFSrIQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:90:a9:8c:97:80:3d:77:fb:cb:8c:52:ef:59:61:bb:a4:7a:
dc:5d:df:32:dc:7c:41:b2:f5:70:df:ef:e4:09:d4:82:02:9e:
ab:43:69:d7:72:d7:bb:0e:09:45:01:b6:15:08:b2:cb:cc:5b:
ab:75:e5:cc:f3:b8:52:dd:d3:f0:de:89:31:78:1f:7e:c1:ae:
84:da:8c:af:69:03:c6:5f:2a:b1:5b:0c:c1:ac:0c:cc:cb:36:
e0:53:cf:e6:99:59:c0:a1:d4:99:a3:41:86:e6:62:93:1b:f0:
68:07:c0:58:6b:01:82:ae:27:29:38:9f:12:8a:d2:f8:45:19:
e4:0b:d6:a3:8c:fe:b5:cf:c8:d1:e4:46:0c:12:df:3e:07:9b:
83:82:8a:cc:cc:66:6c:37:a2:17:29:8d:27:2b:50:6d:84:ce:
14:4e:b1:ef:10:b6:66:d9:1f:ec:69:9a:b0:22:3b:7e:24:fc:
cf:b8:80:ae:26:33:2d:91:f8:5c:c7:05:c8:fe:b2:08:01:3a:
60:cd:36:34:6c:a5:56:a9:60:96:d5:21:4b:4b:a5:87:ee:ba:
0d:d0:9f:67:4a:5c:67:6d:bf:54:ca:e1:79:a4:fb:32:36:98:
13:7a:00:75:c0:4e:e0:32:4e:38:4e:b2:e1:c2:71:db:20:c0:
28:bc:59:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net