Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/cmgXNMaAC5g-hi6_5ineFSX4mNo.roa
File: cmgXNMaAC5g-hi6_5ineFSX4mNo.roa (raw, json)
Hash identifier: tT0BFRcW7aTCxqYrpbIrMjQ3QMu6zsEXBG/3mWT8HAA=
Subject key identifier: 72:68:17:34:C6:80:0B:98:3E:86:2E:BF:E6:29:DE:15:25:F8:98:DA
Certificate issuer: /CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Certificate serial: 0194228DAF003F3014D9A9C17C5B315A63C2
Authority key identifier: F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/cmgXNMaAC5g-hi6_5ineFSX4mNo.roa
Signing time: Wed 01 Jan 2025 15:48:18 +0000
ROA not before: Wed 01 Jan 2025 15:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206150
IP address blocks: 45.89.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:af:00:3f:30:14:d9:a9:c1:7c:5b:31:5a:63:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Validity
Not Before: Jan 1 15:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72681734c6800b983e862ebfe629de1525f898da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8e:b2:f2:85:45:4f:94:17:6d:d4:c5:f5:17:
f2:b0:4e:d0:f6:d7:96:ae:9a:5f:2a:79:90:2a:44:
a9:74:0c:02:a4:04:cf:d1:2a:24:96:9f:cd:51:9b:
5b:c0:f1:c2:16:fb:25:e7:84:65:16:5a:b9:c6:18:
e5:9d:85:58:62:2d:2f:d2:0e:46:14:cb:fe:04:06:
3c:5e:5f:28:26:65:18:89:bf:2d:bb:29:b2:6a:c5:
18:4c:34:cf:60:f8:62:4b:14:53:f0:f2:ee:2e:de:
c2:27:7d:84:87:c0:7d:18:f1:d7:44:2a:f7:76:a3:
52:f8:eb:88:c4:c0:2d:d1:79:e2:8d:6e:b8:91:ac:
34:36:b6:b9:8a:91:aa:b6:1a:0a:c5:55:c9:f5:fa:
5f:41:4d:8a:47:e2:92:9c:29:e6:95:7d:8d:c9:90:
b7:2c:05:23:61:7b:40:67:51:cb:70:19:a2:2b:75:
22:43:50:9d:d7:d8:73:a5:85:1c:04:c4:1f:2a:dd:
ea:62:26:c6:cf:68:0e:3f:c9:7b:fb:31:9c:9a:4a:
e9:8c:c4:b7:91:25:d1:13:02:a9:c1:71:d0:cc:8d:
8d:76:f2:ef:6e:76:44:18:4d:18:15:61:dc:00:33:
97:30:43:fe:8e:1c:ae:11:4e:6a:7e:3c:cd:4a:19:
91:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:68:17:34:C6:80:0B:98:3E:86:2E:BF:E6:29:DE:15:25:F8:98:DA
X509v3 Authority Key Identifier:
keyid:F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/cmgXNMaAC5g-hi6_5ineFSX4mNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.21.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:81:fb:4d:27:f4:93:41:f1:f2:31:c7:e8:fb:40:6b:fe:29:
29:88:e3:63:b5:74:34:18:19:11:2f:c5:a3:4b:26:69:02:3a:
e4:16:43:50:64:2f:25:c2:77:cc:28:2a:4c:b5:3b:c4:4f:b4:
93:68:db:7e:5d:a4:1e:3c:5e:5b:6b:3c:32:e9:9b:0b:de:82:
a8:98:44:a7:e2:5d:21:ab:03:99:1c:3e:1b:83:c4:42:c6:83:
be:ce:d2:3e:81:8c:41:cb:7c:91:c3:9e:21:b6:50:3f:ec:93:
9f:e2:ab:a9:03:0e:f4:02:a8:5d:d6:ba:d9:b8:a4:b2:74:6c:
73:1b:30:69:38:64:ee:86:38:81:41:6a:0b:03:40:0b:e8:32:
5c:4b:51:61:f2:a5:74:77:62:95:4c:26:4c:15:92:dc:56:34:
a0:d0:89:12:ef:2b:62:2b:26:00:d8:bf:57:6d:f1:cb:e6:10:
40:66:d5:50:b3:d5:88:70:5d:84:ed:fd:6a:44:0e:af:c0:43:
82:0d:d5:7b:d0:5f:24:fa:ea:8f:d2:ee:7b:0b:d5:17:92:a7:
83:ca:23:e0:53:37:b9:de:ee:87:4e:bb:d5:ba:10:0a:cd:0d:
1e:4f:68:83:5d:eb:a0:6b:33:40:55:77:b8:d8:fd:53:64:43:
e9:a9:dc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net