Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/GohZi58zwp5RfY0iKDAWNuTn-5A.roa
File: GohZi58zwp5RfY0iKDAWNuTn-5A.roa (raw, json)
Hash identifier: LhDYJy0Ht668FgChIsYbATtPmPjqm//AwvZA6qK2gkU=
Subject key identifier: 1A:88:59:8B:9F:33:C2:9E:51:7D:8D:22:28:30:16:36:E4:E7:FB:90
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 01856D81966CF358E421539C52673B6AE20E
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/GohZi58zwp5RfY0iKDAWNuTn-5A.roa
Signing time: Sun 01 Jan 2023 13:24:47 +0000
ROA not before: Sun 01 Jan 2023 13:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41683
IP address blocks: 45.158.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:96:6c:f3:58:e4:21:53:9c:52:67:3b:6a:e2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 1 13:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a88598b9f33c29e517d8d2228301636e4e7fb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:39:92:c3:a0:e4:f7:5e:9b:ab:9f:83:72:08:
77:62:53:0b:66:ab:f1:cf:44:20:0c:c2:40:29:eb:
94:f8:e8:56:45:34:0a:d2:9f:8c:2e:e3:f9:7e:e4:
ee:c9:9d:23:a5:3b:7a:e8:63:b7:b0:65:39:75:d3:
d1:50:79:02:50:a8:1d:4d:b7:06:40:96:20:c9:8f:
6d:fb:0a:c7:69:1a:26:12:52:2c:dc:fb:f8:d1:10:
cc:7b:e5:61:41:b8:a8:78:27:2a:f1:d6:d6:d0:22:
87:e3:01:4b:9e:bc:dc:da:d9:9b:5c:72:b8:31:0c:
62:0f:c6:9c:ea:52:78:a7:e7:e2:a4:cf:d9:0b:3b:
2a:4a:49:9e:24:73:f5:30:40:19:a1:d9:f2:89:be:
9c:c2:0e:96:e5:93:68:93:b5:99:dc:4f:67:0e:5d:
31:c3:75:86:8b:29:19:17:ad:50:de:b3:35:e4:21:
1f:f3:08:55:db:5c:ac:16:79:49:4c:da:ef:95:bc:
15:3e:a2:c3:56:ef:11:b3:0c:e7:88:7a:0b:ac:5b:
bf:82:d3:ef:d3:35:f1:e9:63:da:fb:e6:67:5d:e7:
60:a7:f3:75:c4:ef:0b:67:e8:72:ac:5f:86:1e:08:
f7:93:59:1a:70:c3:22:3e:fe:1c:ae:1b:50:3d:9e:
32:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:88:59:8B:9F:33:C2:9E:51:7D:8D:22:28:30:16:36:E4:E7:FB:90
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/GohZi58zwp5RfY0iKDAWNuTn-5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.13.0/24
Signature Algorithm: sha256WithRSAEncryption
70:58:f0:2e:e2:0c:46:df:4b:2a:e5:12:ac:15:09:fa:b3:95:
02:ed:aa:21:fd:ef:09:8c:8b:47:a8:22:98:76:2e:38:6f:67:
9e:85:76:63:ee:d9:c9:00:29:34:5d:c8:90:37:4a:1b:ee:ce:
05:9e:f0:f7:55:c4:cd:ec:e3:95:99:34:0b:6d:58:84:cd:ee:
85:37:5b:39:2d:40:97:83:ca:6d:97:e5:94:c3:c2:b6:20:f6:
2e:c9:92:b9:67:3f:82:7b:1e:5a:dc:39:22:e1:3c:12:11:d3:
d0:60:b5:c7:fc:08:05:78:f7:72:e7:b5:43:82:ac:94:a1:c0:
a7:01:c6:0a:c1:ad:22:3f:00:fd:43:a5:d5:aa:6a:5a:d3:85:
12:e0:07:7c:46:f5:c3:4e:73:17:8a:a6:d4:fd:e3:12:2a:57:
c4:40:31:52:90:15:2e:3f:a5:71:65:3f:79:c9:11:16:bc:49:
d0:21:08:79:fd:bf:7d:10:ee:82:b6:ce:81:f7:b3:de:14:31:
07:20:e6:8d:ef:24:14:54:97:59:c8:27:e3:e2:68:44:02:4d:
57:67:95:6e:50:bc:f3:9c:dd:75:b7:f3:15:89:89:f4:eb:91:
f2:ab:f6:bf:82:e8:7d:cb:6d:74:3c:3a:da:47:04:9c:c7:af:
0c:f1:2c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:21 2025 by rpki-client