Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/ofNSflyIojYf145fkJSXh1VNVFc.roa
File: ofNSflyIojYf145fkJSXh1VNVFc.roa (raw, json)
Hash identifier: BWlruY1fjf9X2hY8PF23+7+qDgxO5lHVcSps1RGpBtM=
Subject key identifier: A1:F3:52:7E:5C:88:A2:36:1F:D7:8E:5F:90:94:97:87:55:4D:54:57
Certificate issuer: /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial: 01856F022289487564D08DC6A767AAFC91BF
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/ofNSflyIojYf145fkJSXh1VNVFc.roa
Signing time: Sun 01 Jan 2023 20:24:48 +0000
ROA not before: Sun 01 Jan 2023 20:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6220
IP address blocks: 213.198.48.0/24 maxlen: 24
213.198.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:22:89:48:75:64:d0:8d:c6:a7:67:aa:fc:91:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
Validity
Not Before: Jan 1 20:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1f3527e5c88a2361fd78e5f90949787554d5457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ce:a6:5d:e4:df:f6:73:22:21:bd:ab:fd:e8:
e4:5a:ba:64:f5:d9:ca:d5:f1:54:95:40:09:d8:16:
f5:9a:fd:b3:bf:a7:8b:b1:91:2b:f6:20:23:29:65:
ad:6d:90:19:8d:20:b8:16:d9:6d:e7:54:12:62:5c:
68:44:46:7a:bc:d4:3d:45:35:40:98:c8:78:d8:e1:
98:ac:ab:e0:83:ba:bb:8e:d3:e1:80:00:84:cb:be:
ed:9f:07:74:06:94:ad:ce:a2:04:df:44:e2:e1:db:
08:49:bd:65:a8:fc:9c:d4:63:95:ba:23:f2:b6:25:
5f:51:77:89:d0:0f:e0:b9:a8:81:22:05:5e:32:b9:
40:4d:22:18:10:8a:98:62:17:90:ba:d7:94:46:10:
8c:4d:26:e7:98:1f:3a:26:62:cd:18:9f:3b:25:44:
62:7f:84:80:69:28:cb:20:6d:23:ed:d6:95:fb:98:
b9:05:9d:74:84:bf:01:05:e0:32:18:96:f3:62:85:
cf:36:d1:61:d4:70:e2:c1:18:88:b7:80:95:0a:46:
86:1b:25:c8:15:ad:67:18:2b:aa:3c:a3:99:ad:49:
c3:36:0e:45:ca:04:17:0c:26:18:85:3e:48:9e:7c:
e1:c9:36:49:4a:2b:61:76:f6:64:db:57:45:cb:a4:
a6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F3:52:7E:5C:88:A2:36:1F:D7:8E:5F:90:94:97:87:55:4D:54:57
X509v3 Authority Key Identifier:
keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/ofNSflyIojYf145fkJSXh1VNVFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.198.48.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:80:5d:f6:36:cb:88:b0:7a:1f:be:73:35:8b:d1:e9:7e:6f:
44:05:53:8c:d4:50:f3:1d:9a:1d:1d:74:bb:c3:88:c5:b1:5f:
df:eb:91:39:c8:ad:b2:45:62:71:86:bc:eb:87:0a:4e:30:a7:
4d:eb:33:0e:a0:f9:b4:08:0e:65:c0:25:44:89:6d:7c:66:1a:
bd:07:b6:fc:44:3a:9a:26:eb:d4:0f:db:e5:f1:31:5a:7d:4e:
67:ec:df:97:eb:65:78:14:e5:c7:54:47:7f:d3:88:8c:ff:8c:
53:d1:c7:a7:28:5d:ad:aa:25:91:20:65:a9:11:cc:cb:6a:27:
cd:b0:c6:c8:ac:a4:68:53:72:ef:2a:a3:98:32:eb:4f:71:92:
38:bb:05:d2:9c:58:21:6c:0d:32:f6:14:2a:86:f9:29:58:4a:
50:53:65:43:2a:61:7e:73:08:45:32:04:a3:85:30:c0:3d:78:
a2:89:72:ac:93:9e:e6:67:ab:45:26:30:1f:98:c3:d8:d7:c3:
ee:c5:33:05:51:e4:e7:56:d1:a0:42:bb:da:5e:7c:82:b8:cd:
6e:a9:b8:72:86:5f:b6:6d:6c:20:56:1f:50:1b:b9:fb:f3:5b:
bc:dd:9d:a1:07:42:5f:ca:fa:ef:bb:24:a6:d6:8c:c3:31:85:
5d:65:1a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:30:24 2025 by rpki-client