Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/kTxHO68WIXDQnR03mP6IRNjT-h4.roa
File: kTxHO68WIXDQnR03mP6IRNjT-h4.roa (raw, json)
Hash identifier: DMGbR8G3bUg6OHVHUmos7zvUQzjioDIjfEEApyJXCq8=
Subject key identifier: 91:3C:47:3B:AF:16:21:70:D0:9D:1D:37:98:FE:88:44:D8:D3:FA:1E
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 07590D51
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/kTxHO68WIXDQnR03mP6IRNjT-h4.roa
Signing time: Sat 01 Jan 2022 04:57:14 +0000
ROA not before: Sat 01 Jan 2022 04:57:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51559
IP address blocks: 45.158.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123276625 (0x7590d51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 1 04:57:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=913c473baf162170d09d1d3798fe8844d8d3fa1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b7:6d:12:7d:ca:70:cf:64:0d:ea:fc:c5:aa:
8c:9f:14:c4:29:16:54:56:79:98:75:04:bc:e7:d5:
c1:7b:bc:f0:b3:e8:f5:fa:5d:93:bd:d8:49:db:c1:
85:e7:29:6c:f8:68:83:d4:e3:e8:0b:d0:50:64:1a:
ef:7e:ba:f7:3e:71:12:c5:19:20:b8:01:c6:65:3f:
21:e8:17:05:b3:92:83:34:58:03:90:60:91:b9:3b:
cf:33:e1:93:9f:96:51:59:74:b8:da:00:48:4c:3c:
75:92:87:0d:5a:1c:de:ec:bc:5b:80:23:e0:b9:0b:
bc:fe:0b:43:a4:65:bb:9c:65:10:b1:cd:57:a6:aa:
74:e1:04:ce:24:1c:b8:fd:0c:72:a2:e4:29:88:c7:
a4:11:54:14:c6:94:e9:4f:4d:43:d5:77:28:65:dc:
29:60:89:60:eb:cc:0f:4a:7c:93:d8:0a:df:c6:63:
1d:41:d8:fb:54:8f:9a:3d:8e:4c:47:30:fd:59:f8:
45:8f:c2:cd:73:75:ad:ea:7a:a9:7e:6e:e9:3c:87:
4d:8c:80:60:cb:a6:0f:78:2f:9e:6c:1a:cc:82:74:
61:9a:27:9d:cb:ea:1f:1e:4c:f2:55:c9:a7:70:11:
64:f7:ba:ba:41:84:6f:21:28:dc:81:50:99:b2:45:
47:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3C:47:3B:AF:16:21:70:D0:9D:1D:37:98:FE:88:44:D8:D3:FA:1E
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/kTxHO68WIXDQnR03mP6IRNjT-h4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.12.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:17:ac:cf:67:5a:d7:22:e8:f3:43:a5:7c:7f:46:35:56:3d:
cf:ac:30:bf:d1:ef:da:9f:d6:f5:d6:11:74:39:b1:b0:42:d8:
0a:51:c7:f9:75:29:b5:0a:07:fc:1a:37:c7:17:0d:88:0a:57:
e2:1a:56:01:35:37:f1:5b:fd:14:20:9c:88:17:c0:31:da:8a:
97:b2:a9:e1:28:e2:7b:94:d4:e0:95:9b:be:f4:fc:fd:84:9b:
fb:23:ba:a9:e8:a8:c7:0b:cc:e4:11:f3:ca:5b:db:29:e8:67:
e0:50:4b:0c:7d:8c:45:50:3c:ee:ff:14:20:14:84:10:77:0a:
93:5f:78:c0:06:4a:79:6e:ce:bd:10:7a:dc:e0:45:fc:7d:78:
a9:50:60:d0:7f:87:1d:3b:ae:fc:2c:66:8e:b4:23:75:b5:e8:
28:5b:88:a6:f0:e1:5c:2e:0a:59:47:7b:2a:a8:ab:ed:e2:0f:
8d:cb:02:0e:4c:85:e4:5c:84:02:0c:14:e7:c2:e8:7d:fc:b7:
e4:90:6d:52:d9:2a:a0:ab:a6:ce:6b:3f:8f:c7:83:94:9b:a2:
e9:7e:18:bf:9c:04:e7:f7:23:1c:9a:ef:ce:8c:2f:60:6b:9a:
80:b8:f0:76:56:48:c2:bc:ba:02:5c:a3:2d:a9:e8:78:e2:c4:
cb:57:99:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:32 2025 by rpki-client