Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/q7eHPIE3tsn2KE2xYAlRHjWE-VM.roa
File: q7eHPIE3tsn2KE2xYAlRHjWE-VM.roa (raw, json)
Hash identifier: b9vc/Tnq40WhNSaPvW6nwFRkAP3a/QEuchVnpRCObEA=
Subject key identifier: AB:B7:87:3C:81:37:B6:C9:F6:28:4D:B1:60:09:51:1E:35:84:F9:53
Certificate issuer: /CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Certificate serial: 0186547E12723D0FE1B3B7EDE8BC1BEE6772
Authority key identifier: 9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/q7eHPIE3tsn2KE2xYAlRHjWE-VM.roa
Signing time: Wed 15 Feb 2023 09:53:13 +0000
ROA not before: Wed 15 Feb 2023 09:53:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207326
IP address blocks: 45.85.92.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:54:7e:12:72:3d:0f:e1:b3:b7:ed:e8:bc:1b:ee:67:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Validity
Not Before: Feb 15 09:53:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abb7873c8137b6c9f6284db16009511e3584f953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ad:94:23:ac:69:4e:05:76:d4:aa:dd:e2:b1:
22:e0:59:c3:e5:1f:f0:d2:e6:14:62:43:ca:60:2d:
1d:b9:26:6e:4f:d2:c3:c2:85:be:76:e3:1d:a8:1c:
4e:a6:8a:0a:24:5d:05:d7:60:f7:08:5a:17:6d:22:
c3:26:c7:98:41:3b:42:a6:15:4d:34:97:ff:1f:91:
78:81:da:b3:c6:54:2a:64:02:c2:54:8f:c7:3a:c8:
52:da:ce:2d:10:49:30:27:bb:e5:53:76:fb:b7:71:
c5:04:04:78:f6:96:c8:f6:33:e4:3c:f8:89:7d:66:
a8:b7:fb:5c:24:ec:88:2e:e3:c5:4a:42:21:37:ae:
bd:0a:81:17:92:8a:e6:67:32:1a:e6:a2:b5:bc:a3:
1b:4f:c2:5c:41:9c:1f:4a:f8:d6:37:39:c1:a5:c7:
3a:7b:9f:c6:af:df:89:a5:b1:5d:9b:97:10:3d:b3:
e7:c7:0d:56:43:ad:39:ae:c7:51:02:38:14:b5:11:
a2:60:80:d2:44:c1:4a:c5:d7:45:1e:0b:9d:88:59:
7c:6a:5c:6d:03:c8:1b:51:3e:85:40:1e:ac:86:23:
2f:5b:7c:cb:df:7c:b7:2a:0a:c6:21:76:7e:d8:b0:
32:0d:b1:3a:47:49:8e:f5:64:56:3f:e4:2a:f3:f8:
ce:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B7:87:3C:81:37:B6:C9:F6:28:4D:B1:60:09:51:1E:35:84:F9:53
X509v3 Authority Key Identifier:
keyid:9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/q7eHPIE3tsn2KE2xYAlRHjWE-VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/n2YrPPqLkFkGjCnUa5kmO6LeUME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.92.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:d9:e2:9d:7d:06:bf:ac:1e:89:dc:25:17:20:9e:0f:c8:72:
2d:bf:97:89:ef:51:9f:71:8a:13:c0:91:68:e9:dc:cc:6b:14:
d1:60:b8:ab:a7:b7:34:41:2b:03:96:a6:2e:3b:9d:02:c3:b9:
94:ce:77:8c:4b:ba:b8:d1:0c:fd:9b:d8:0b:3d:63:2a:b8:09:
91:57:f1:ef:3d:8e:ed:8e:ff:5b:28:4e:b5:b8:57:34:06:7c:
20:64:34:59:f3:c0:29:28:2f:b5:b0:91:dd:60:60:54:eb:4f:
34:f1:3d:d1:63:3b:ca:ae:e4:c4:f4:40:b7:57:54:65:16:a6:
51:7a:8b:50:9d:5b:88:c5:9d:f8:02:a7:19:59:47:0c:09:a5:
0b:ba:6a:f0:5e:96:a7:cd:88:38:0e:62:a6:57:9b:83:e6:a0:
23:7f:40:5f:ae:6a:1d:04:be:0d:18:1a:b7:2b:77:13:b9:79:
79:65:09:5e:bd:82:45:c0:9a:88:2e:f1:cb:5d:e7:df:34:70:
82:65:2f:54:fc:80:50:58:c6:93:5e:08:91:8a:a0:97:00:e9:
d9:b1:ff:55:ab:91:f8:d6:5d:78:08:8d:9f:69:15:66:e8:bf:
bd:cc:ce:e5:0e:07:fd:70:66:40:88:b9:11:d5:73:85:f6:a5:
a1:30:b1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:54 2025 by rpki-client