Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8d32e6-dc3e-4b84-b42e-68a4d3193c36/1/qMVENyZITf9X_19sEdt-SQk8gtg.roa
File: qMVENyZITf9X_19sEdt-SQk8gtg.roa (raw, json)
Hash identifier: Pc48eUPfXQbdekmxRIiiOmPrGy4WRRBiV79NkKuHKkU=
Subject key identifier: A8:C5:44:37:26:48:4D:FF:57:FF:5F:6C:11:DB:7E:49:09:3C:82:D8
Certificate issuer: /CN=5039deed6052e8a9f1483379a38cd64ee128eae0
Certificate serial: 01857255902CDDC2387171DA5512E8EFCB5C
Authority key identifier: 50:39:DE:ED:60:52:E8:A9:F1:48:33:79:A3:8C:D6:4E:E1:28:EA:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDne7WBS6KnxSDN5o4zWTuEo6uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8d32e6-dc3e-4b84-b42e-68a4d3193c36/1/qMVENyZITf9X_19sEdt-SQk8gtg.roa
Signing time: Mon 02 Jan 2023 11:54:48 +0000
ROA not before: Mon 02 Jan 2023 11:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42263
IP address blocks: 45.136.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:90:2c:dd:c2:38:71:71:da:55:12:e8:ef:cb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5039deed6052e8a9f1483379a38cd64ee128eae0
Validity
Not Before: Jan 2 11:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8c5443726484dff57ff5f6c11db7e49093c82d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d7:ea:04:ff:6b:a3:21:d0:fa:03:d7:4d:6f:
6e:09:2c:73:13:f6:b8:74:30:0f:0b:16:96:5d:a7:
bf:58:5b:d9:fa:93:14:bc:54:e7:1f:9e:41:38:af:
43:71:93:8f:9c:31:2a:fd:70:a0:b2:50:a0:65:f3:
d5:f7:56:a4:94:8e:38:dc:4a:c6:b0:3b:90:a4:69:
9d:ab:a5:d0:11:d3:35:1d:ce:dc:17:c4:83:85:19:
ac:51:da:42:09:38:92:45:6a:94:30:ea:cb:29:67:
9d:df:02:d1:db:03:40:43:2a:60:b5:16:b5:54:d7:
19:1d:b9:be:ac:a1:88:17:5b:f0:e6:db:d5:06:e1:
98:62:0f:b2:70:65:ae:1c:53:b6:9e:a1:16:5f:53:
b2:af:fd:1a:47:5f:5a:5e:d4:cf:4e:3f:cb:8d:e3:
b7:dd:be:03:20:82:68:50:57:a2:60:a2:2d:67:04:
20:fb:f0:59:3f:6f:1b:67:23:64:ad:b8:1a:cc:c5:
f6:f8:7b:f8:19:45:43:bb:be:88:11:d1:de:4b:5a:
cd:b6:7c:65:73:90:ee:24:81:49:00:26:99:e8:7b:
04:95:2a:60:73:56:ad:ae:26:96:9e:0e:b6:2f:fe:
c5:bd:56:15:22:26:3b:70:41:43:5b:32:0d:bc:14:
4f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C5:44:37:26:48:4D:FF:57:FF:5F:6C:11:DB:7E:49:09:3C:82:D8
X509v3 Authority Key Identifier:
keyid:50:39:DE:ED:60:52:E8:A9:F1:48:33:79:A3:8C:D6:4E:E1:28:EA:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDne7WBS6KnxSDN5o4zWTuEo6uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8d32e6-dc3e-4b84-b42e-68a4d3193c36/1/qMVENyZITf9X_19sEdt-SQk8gtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8d32e6-dc3e-4b84-b42e-68a4d3193c36/1/UDne7WBS6KnxSDN5o4zWTuEo6uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.96.0/22
Signature Algorithm: sha256WithRSAEncryption
98:5c:3c:61:55:25:0a:ac:ff:24:33:a4:49:5f:27:93:df:35:
f5:72:2a:84:65:3c:c4:5b:56:09:b5:ee:bb:56:45:1f:4d:52:
fb:47:67:5b:d4:86:f0:ab:48:1a:5b:1f:55:a6:fc:5a:89:4e:
ff:98:f2:d3:45:a2:70:ec:b3:7d:b8:28:23:d5:eb:f4:4a:2f:
c3:91:d7:78:57:7d:29:d8:48:6d:39:bb:0d:3a:4e:0f:6b:2d:
dc:98:10:c1:3e:df:73:2e:66:a4:33:bb:e7:79:65:16:ad:92:
e1:53:d6:4c:45:e0:bf:59:59:ec:98:bc:07:39:36:63:d3:aa:
fa:cf:a2:a9:42:85:3f:44:d5:72:ae:1a:59:b6:a0:72:e5:c0:
49:5b:3f:e4:4d:ec:3d:a1:ad:0e:3d:82:8c:25:65:56:9f:59:
7f:01:5f:56:86:24:71:6e:bc:15:26:a5:6b:0d:1a:41:a4:89:
c5:5c:57:62:02:f2:35:af:63:5d:a0:71:0a:0c:e1:43:dd:e6:
dd:d8:5e:60:69:1b:d4:cd:d5:0b:03:65:45:5e:22:8c:c4:8a:
90:9f:1c:21:58:c0:5e:4d:c7:2a:b1:fe:9f:d2:d8:24:4c:60:
e7:57:69:ae:ae:6d:7a:69:b9:43:fe:3b:1f:e6:c1:db:7e:f1:
07:3b:f6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:10 2025 by rpki-client