Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/8mZwMLWHiI8E6STHAfMeIjVRHrc.roa
File: 8mZwMLWHiI8E6STHAfMeIjVRHrc.roa (raw, json)
Hash identifier: IbESHeabPQpU96zG0rGYvX6m5QrJMWo9FAUGM554AMQ=
Subject key identifier: F2:66:70:30:B5:87:88:8F:04:E9:24:C7:01:F3:1E:22:35:51:1E:B7
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 12414871
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/8mZwMLWHiI8E6STHAfMeIjVRHrc.roa
Signing time: Sat 01 Jan 2022 04:01:50 +0000
ROA not before: Sat 01 Jan 2022 04:01:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205404
IP address blocks: 145.14.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306268273 (0x12414871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jan 1 04:01:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2667030b587888f04e924c701f31e2235511eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d2:74:3a:0d:99:c9:58:8c:b4:52:ef:de:64:
b6:55:46:7c:9d:ec:db:ba:57:d6:3f:8c:f2:d4:2e:
71:0a:0c:59:5d:8f:7a:cb:49:58:bf:12:48:7e:9c:
84:c2:75:a8:d3:e4:bb:bf:8e:4e:8c:ec:8c:77:b7:
6c:52:09:33:1c:04:db:55:1c:92:52:4e:b2:c2:73:
35:a9:e8:7e:0e:e7:ff:a8:d5:50:d8:2a:93:a3:93:
ee:b1:11:f1:69:2a:4f:e9:f7:be:b6:2c:f0:f0:ae:
f7:2e:39:e5:c7:9a:0b:b0:4e:3c:8a:15:74:a2:f3:
9f:69:49:42:ff:89:c7:ad:dc:5b:35:6c:62:9c:f0:
fa:92:44:34:2a:6f:40:cb:fd:ed:f2:55:9e:28:07:
ac:90:2b:4c:e8:f3:a3:94:bd:f7:c9:32:df:ba:3a:
17:42:7f:82:8d:e1:d5:12:68:2d:82:14:d7:0e:43:
fd:80:59:0d:6b:8b:41:c5:d9:6c:8f:13:db:7d:e5:
1e:42:d4:30:66:b0:20:e9:17:a0:e9:04:aa:1a:23:
8a:dc:33:f8:d6:ff:b6:45:11:99:f3:6c:cd:b9:3d:
74:b4:54:cf:65:28:06:33:e6:ef:5f:bd:6f:2f:e2:
16:08:d7:ed:27:c7:96:ea:27:48:92:08:6e:7c:4b:
b8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:66:70:30:B5:87:88:8F:04:E9:24:C7:01:F3:1E:22:35:51:1E:B7
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/8mZwMLWHiI8E6STHAfMeIjVRHrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.14.5.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ef:b0:2c:94:04:a7:15:c7:bb:d5:c2:62:94:79:ad:f9:84:
06:e1:bd:35:0c:39:74:93:25:5d:a7:91:7e:a7:16:07:87:89:
30:aa:e3:ef:74:3d:63:bd:0b:89:53:7e:80:aa:02:fd:47:a3:
2f:d7:5f:34:06:aa:f3:de:50:7d:5f:da:de:e1:e1:98:a2:2c:
12:63:37:04:75:ad:4e:c9:4c:89:44:65:6b:4d:fe:ec:bd:44:
a1:0f:3a:ef:1d:89:10:bf:b8:a9:21:55:ab:24:f2:92:f1:f0:
2b:86:5e:29:81:1f:eb:f4:2c:83:2e:75:bb:7b:f7:d8:f3:26:
85:24:c9:6b:33:bd:db:27:b6:ed:11:d5:f4:ab:b9:df:88:41:
c6:e5:18:11:5a:36:98:dd:61:c3:a8:c6:78:f2:9a:e0:3f:67:
d5:13:5f:b4:74:9d:74:25:1e:07:8b:fb:ed:e6:bb:ce:9b:65:
f4:97:75:3b:8f:ad:e8:c9:8f:6c:88:49:bb:7f:ed:0e:f5:39:
48:b2:b0:79:a9:ca:92:46:e8:5d:4f:fe:3c:21:7e:46:ad:03:
bd:56:27:83:59:3b:f9:ea:26:8b:e0:ea:b3:ad:5c:21:a6:79:
d6:cb:98:af:0a:28:21:83:e6:b6:f2:ae:09:aa:ff:e8:d2:65:
d2:a6:e5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:39:07 2025 by rpki-client