Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/420229-4d92-491f-82d7-4d990d72ddbf/1/cKoIn2Gjzjj9b_aUFYVKm16Xxwg.roa
File: cKoIn2Gjzjj9b_aUFYVKm16Xxwg.roa (raw, json)
Hash identifier: IkFbTavou3HePZqsi8eELTheT9+8P9foFUXU9HWX1E4=
Subject key identifier: 70:AA:08:9F:61:A3:CE:38:FD:6F:F6:94:15:85:4A:9B:5E:97:C7:08
Certificate issuer: /CN=285db3930538f3d11a75ee0685849ef037d4c0fb
Certificate serial: 01856FB11D463111213EB57BFB7694CFA00F
Authority key identifier: 28:5D:B3:93:05:38:F3:D1:1A:75:EE:06:85:84:9E:F0:37:D4:C0:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KF2zkwU489Eade4GhYSe8DfUwPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/420229-4d92-491f-82d7-4d990d72ddbf/1/cKoIn2Gjzjj9b_aUFYVKm16Xxwg.roa
Signing time: Sun 01 Jan 2023 23:35:56 +0000
ROA not before: Sun 01 Jan 2023 23:35:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39351
IP address blocks: 45.159.212.0/22 maxlen: 22
2a0f:8980::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:1d:46:31:11:21:3e:b5:7b:fb:76:94:cf:a0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=285db3930538f3d11a75ee0685849ef037d4c0fb
Validity
Not Before: Jan 1 23:35:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70aa089f61a3ce38fd6ff69415854a9b5e97c708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:50:b7:80:b0:8c:96:14:0c:a2:8e:af:b0:0e:
84:15:ed:dc:96:a6:8b:8f:10:de:fa:97:68:e4:9b:
31:a0:67:8f:b9:bb:93:9b:c4:3c:95:17:4c:29:c7:
a0:47:24:b1:5d:ea:42:85:83:48:9c:dd:a0:95:65:
75:86:21:15:25:80:bc:47:87:23:86:23:4b:a3:d9:
c2:cf:50:31:34:39:92:12:9f:c5:f1:41:65:1c:48:
65:94:28:be:dd:d1:12:65:c2:b8:36:7c:ec:24:49:
08:b9:29:86:4b:ff:8c:28:e2:d5:a4:f9:18:f9:d1:
50:72:5d:26:be:90:68:fb:f9:bb:7b:18:7f:42:ee:
09:33:16:f5:d5:ed:ff:f8:56:3b:f7:ea:6c:81:5b:
7e:eb:89:45:93:53:45:f1:e2:80:98:a6:79:34:ec:
fb:67:2d:0f:d0:f7:d4:a8:a0:cf:ba:88:4d:f5:3e:
45:b5:da:a5:10:73:43:79:17:7e:2f:a7:e5:ce:80:
f8:e5:5c:ef:d3:fa:3a:e5:40:70:29:51:72:d3:b1:
a5:75:b4:27:58:fe:b6:ab:a0:3b:98:6b:21:5e:cf:
3f:cd:bd:df:62:b4:95:ff:02:f7:8d:f9:72:3d:a6:
7d:b1:d9:62:10:64:a3:ea:fd:c8:48:32:0a:95:58:
59:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AA:08:9F:61:A3:CE:38:FD:6F:F6:94:15:85:4A:9B:5E:97:C7:08
X509v3 Authority Key Identifier:
keyid:28:5D:B3:93:05:38:F3:D1:1A:75:EE:06:85:84:9E:F0:37:D4:C0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF2zkwU489Eade4GhYSe8DfUwPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/420229-4d92-491f-82d7-4d990d72ddbf/1/cKoIn2Gjzjj9b_aUFYVKm16Xxwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/420229-4d92-491f-82d7-4d990d72ddbf/1/KF2zkwU489Eade4GhYSe8DfUwPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.212.0/22
IPv6:
2a0f:8980::/32
Signature Algorithm: sha256WithRSAEncryption
71:9c:bb:67:75:ad:9f:45:f6:38:92:5a:bd:3f:c9:ea:0b:7f:
26:74:30:e8:6f:1a:3b:d9:ef:99:37:cf:e0:00:c0:b5:14:53:
b4:1a:97:ab:5a:8e:38:18:05:56:a8:f8:13:e6:f7:92:51:fc:
77:72:38:92:ab:7d:f6:9f:57:65:37:50:b2:f7:79:2b:11:fd:
e2:6b:05:cd:a2:d6:9b:c0:eb:03:fa:a7:65:88:13:c8:c7:ce:
41:15:3e:71:e2:8f:69:d0:a2:4c:4d:75:36:f6:80:e7:74:53:
dd:94:16:f3:22:cc:93:24:a9:79:30:7d:bc:b1:5e:b7:63:ab:
07:66:21:f6:ce:7b:f8:fb:93:09:3a:23:96:8e:d0:63:63:f7:
b4:14:83:18:b3:04:7f:6a:9e:51:0c:d6:25:3c:b7:b4:77:7d:
d2:54:e1:f9:34:e8:38:49:9b:3e:2c:4c:a4:fc:e5:f4:71:b9:
56:54:cc:7c:73:59:8d:b4:e3:49:87:53:81:30:7c:ab:82:12:
b1:0a:22:1b:f8:6c:18:3d:69:5a:6d:9d:1d:ce:21:09:08:4f:
46:34:5d:00:8b:2c:6f:9b:fd:18:7c:8f:ec:fa:ec:23:db:57:
97:99:ce:f3:31:95:78:84:91:67:bd:bc:eb:99:24:6c:3f:4e:
bf:f4:9f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:33 2025 by rpki-client