Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/csKYTHW-IAalJAdUTONwvVFClJI.roa
File: csKYTHW-IAalJAdUTONwvVFClJI.roa (raw, json)
Hash identifier: aT+d3HuxJ5DR1GitNGL43NGLNfwIJsnNTltHds1Rh2M=
Subject key identifier: 72:C2:98:4C:75:BE:20:06:A5:24:07:54:4C:E3:70:BD:51:42:94:92
Certificate issuer: /CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Certificate serial: 01856E38ACD8F321F4E0D6196C3C0488E456
Authority key identifier: 72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/csKYTHW-IAalJAdUTONwvVFClJI.roa
Signing time: Sun 01 Jan 2023 16:44:46 +0000
ROA not before: Sun 01 Jan 2023 16:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201211
IP address blocks: 45.94.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:ac:d8:f3:21:f4:e0:d6:19:6c:3c:04:88:e4:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Validity
Not Before: Jan 1 16:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72c2984c75be2006a52407544ce370bd51429492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:6e:72:15:5c:b6:f9:c2:ec:b8:45:c0:7c:
d1:7a:11:52:53:72:e8:aa:38:4d:00:87:78:d3:9e:
c9:04:bd:74:70:c3:4d:74:bc:43:ff:2b:cc:37:41:
81:3c:57:07:4c:59:ea:f8:2c:32:31:cb:43:cf:05:
05:89:b1:19:ee:09:06:30:0c:40:de:7a:8e:d3:fb:
d6:63:0a:17:53:72:26:d0:45:22:91:1f:d2:1a:84:
1f:6d:b2:4e:93:25:32:ef:c3:c8:21:f6:c3:76:7f:
2e:59:58:7a:d4:0d:04:b7:fe:20:a8:e4:ed:fe:d6:
a6:26:68:02:99:5e:bb:42:54:d4:c2:6d:a6:12:89:
c0:74:05:bd:d0:51:8c:62:96:2a:29:ff:50:93:f5:
d2:e7:e7:64:84:5e:9a:e5:fb:8c:af:7d:34:86:5b:
91:4e:5a:3f:f8:70:95:ff:5a:de:c8:fe:e1:c0:03:
c0:f6:10:e3:bc:31:32:09:af:7e:f2:0d:3c:00:b0:
d2:7b:12:c8:4f:cf:4a:aa:2e:23:9c:0a:15:fc:1e:
8d:27:ab:4f:0d:23:37:57:d4:f5:f7:2b:12:4f:a0:
80:c0:99:36:4f:41:00:f7:0b:de:e0:db:ba:39:3a:
50:c5:a7:d3:86:f5:95:02:8f:07:c8:21:76:94:09:
c0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C2:98:4C:75:BE:20:06:A5:24:07:54:4C:E3:70:BD:51:42:94:92
X509v3 Authority Key Identifier:
keyid:72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/csKYTHW-IAalJAdUTONwvVFClJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/cntIdqLREFjC5qd5_OrF8ECDtMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.21.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:1e:ba:37:58:9f:25:9f:70:be:23:a4:b6:aa:dd:ff:ff:d6:
68:77:d9:fa:a1:64:c9:34:fb:cb:08:ce:90:5a:03:a9:d6:1f:
74:04:98:84:ae:23:d7:d4:7a:9b:f4:99:f7:65:45:9a:63:3b:
1e:17:03:ca:72:d6:3e:aa:de:04:88:39:a9:23:cf:7c:55:6b:
a1:4c:44:b7:54:d1:e7:2c:3f:f8:bb:16:c6:57:95:1d:38:9c:
3c:50:fc:fb:fd:b3:7f:1b:f1:f7:1f:be:77:e4:72:db:1c:8b:
a0:c0:a6:21:c9:c0:41:05:dd:c5:6d:59:4d:75:57:02:28:2c:
25:ce:59:32:97:ed:af:58:8e:89:47:04:52:87:6b:36:57:af:
94:a4:1f:9a:45:14:8e:55:b9:9d:cb:f1:f1:b0:32:bb:e1:e6:
e5:c5:fb:7b:e9:63:4c:11:aa:51:9e:14:3e:6e:1b:10:8d:10:
ea:ca:16:e8:56:4f:7a:ce:d4:44:91:28:31:7f:b8:6f:ac:b4:
87:b4:4f:e0:9d:55:a2:10:01:b1:cb:67:1d:ed:b3:fe:f8:47:
ee:b9:e3:e7:b6:1e:e9:fa:70:85:c1:79:91:0b:cb:07:ae:0e:
77:79:1a:82:47:d6:12:d8:9a:48:e9:34:25:b5:72:5e:18:d9:
16:fd:ba:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:17:31 2025 by rpki-client