Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/DL4IextBw_a_P7RW7nnyxDxi8Jg.roa
File: DL4IextBw_a_P7RW7nnyxDxi8Jg.roa (raw, json)
Hash identifier: XCopsdmCyYDTFUxbunzrFDY4AiQwxcAKy156EVJPzDc=
Subject key identifier: 0C:BE:08:7B:1B:41:C3:F6:BF:3F:B4:56:EE:79:F2:C4:3C:62:F0:98
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 018D833613777CEA0E0AE1E7C1911941C96E
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/DL4IextBw_a_P7RW7nnyxDxi8Jg.roa
Signing time: Wed 07 Feb 2024 10:56:15 +0000
ROA not before: Wed 07 Feb 2024 10:56:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48779
IP address blocks: 45.158.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:83:36:13:77:7c:ea:0e:0a:e1:e7:c1:91:19:41:c9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Feb 7 10:56:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cbe087b1b41c3f6bf3fb456ee79f2c43c62f098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:ab:62:6a:97:8b:99:5a:6a:2c:ad:f3:e3:
c5:55:e8:13:4e:6f:9b:29:32:25:b9:ef:2c:8b:d2:
bd:a6:21:c4:e8:66:16:9a:01:5b:30:4c:00:d2:aa:
38:c8:7a:7d:65:14:b5:cd:f0:c3:22:2d:23:d1:7b:
01:18:02:1f:a0:16:83:50:21:91:eb:bb:b2:fc:bf:
98:60:41:f9:eb:a7:d4:5c:db:20:90:7e:f3:87:29:
f6:37:bb:2a:e7:92:9e:e3:f5:f4:b7:f2:d3:31:8a:
8b:69:70:56:3a:93:78:16:05:19:d7:21:71:03:11:
1f:32:12:ae:83:ac:3a:1c:e1:7c:d9:9f:21:4d:23:
c7:c5:7e:d3:d6:7a:a7:61:f1:4c:f5:44:8e:22:d9:
ab:31:5f:4e:c2:9f:a7:57:74:78:a8:75:90:32:42:
47:80:5d:23:7d:27:a6:5f:95:ad:a2:c7:01:4c:74:
25:cf:0a:a9:98:b4:70:df:7f:af:bb:be:10:25:77:
79:3d:b3:64:b0:6f:c7:a4:79:3f:89:47:84:67:df:
1d:8a:52:f9:71:d9:77:4d:47:78:4d:f7:75:79:6d:
5a:ad:59:82:81:e4:d7:44:71:e0:ed:21:2e:38:50:
4b:c2:ba:57:b9:1b:42:cd:18:9e:6a:04:7b:6b:b3:
6e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BE:08:7B:1B:41:C3:F6:BF:3F:B4:56:EE:79:F2:C4:3C:62:F0:98
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/DL4IextBw_a_P7RW7nnyxDxi8Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.13.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:92:f7:3b:6c:a3:d6:cc:8f:78:90:55:c9:87:72:a4:dd:71:
69:ed:02:36:a0:8f:58:4e:75:80:1b:fc:cc:a2:e4:25:cb:6b:
22:27:69:af:74:3d:db:3e:74:5f:2f:50:f6:6f:00:e2:36:71:
0a:f1:ef:fb:04:ed:f3:9c:da:91:37:c1:a5:97:8b:06:68:35:
e9:64:66:8c:e1:a3:d3:ad:12:21:57:4b:19:76:33:3f:cc:8f:
16:ad:55:cb:d1:91:76:d1:b9:0b:cb:25:e5:b4:72:73:6b:19:
2f:81:ac:6f:55:b8:42:4c:42:54:56:f9:31:25:83:3c:97:7b:
79:6f:4e:fb:35:47:92:16:81:90:be:f4:40:b7:40:18:cb:1c:
d8:d5:b7:d9:fe:93:7d:3e:c2:b0:91:26:75:b0:46:e1:80:f2:
25:d8:ee:06:3e:17:d0:9c:d7:8c:39:a1:a7:34:d6:55:b7:f6:
5b:ce:15:81:47:34:5e:6b:be:9d:dc:15:6b:a1:d0:8d:63:df:
28:57:b1:8e:a4:6d:4e:a7:1c:ef:39:c2:2f:17:fc:1c:8d:dd:
4c:10:b4:cd:9e:e8:ed:54:a1:bf:df:f1:55:fe:07:3f:23:2d:
a6:2c:a7:ae:89:e4:16:5a:37:2f:1d:4a:0f:3c:6d:3c:81:cf:
25:42:0b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:45 2025 by rpki-client