Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/2nCLWPhVvhO_lULzLR6W0Rt-I_I.roa
File: 2nCLWPhVvhO_lULzLR6W0Rt-I_I.roa (raw, json)
Hash identifier: Ld8kFpWCwY7TeDy2EPzilh4/Rtl0848LmllX+Jz4Gds=
Subject key identifier: DA:70:8B:58:F8:55:BE:13:BF:95:42:F3:2D:1E:96:D1:1B:7E:23:F2
Certificate issuer: /CN=3161c7bec1d71d3499213b3b0552fe6e2513a326
Certificate serial: 0186928665B2A5D6A0B011DA4CDBF49F8F3B
Authority key identifier: 31:61:C7:BE:C1:D7:1D:34:99:21:3B:3B:05:52:FE:6E:25:13:A3:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWHHvsHXHTSZITs7BVL-biUToyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/2nCLWPhVvhO_lULzLR6W0Rt-I_I.roa
Signing time: Mon 27 Feb 2023 10:58:46 +0000
ROA not before: Mon 27 Feb 2023 10:58:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200810
IP address blocks: 45.93.120.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:86:65:b2:a5:d6:a0:b0:11:da:4c:db:f4:9f:8f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3161c7bec1d71d3499213b3b0552fe6e2513a326
Validity
Not Before: Feb 27 10:58:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da708b58f855be13bf9542f32d1e96d11b7e23f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:99:8d:06:cc:91:91:3a:23:19:74:d3:3f:
7b:6a:c8:74:62:8b:97:02:51:34:94:9d:7a:71:ca:
a4:da:ee:63:36:ad:03:3f:63:fb:7f:1b:15:2d:df:
14:eb:10:4c:8d:25:58:63:c2:68:c4:6b:11:55:f3:
d5:c4:d8:9f:e1:39:57:b0:33:02:7c:6f:cd:06:82:
4b:aa:e8:97:7d:b0:f0:83:e7:d4:e6:41:74:d7:33:
70:6c:53:8f:67:2c:32:ef:bb:fa:71:77:18:8c:ab:
13:f3:a1:bd:66:ab:71:3f:30:d9:1a:c3:5f:45:66:
64:e3:74:d8:d5:93:bc:4d:ca:0b:e3:14:bf:b9:87:
fa:fc:85:cb:a6:78:88:14:2b:df:bc:05:c4:42:6a:
9d:d3:87:d3:ba:e3:72:15:b3:c5:57:f8:d1:86:ad:
65:84:79:7f:cf:0b:a1:24:2c:0a:22:b8:92:23:0d:
bd:21:ff:1a:a4:b6:d2:57:c8:66:2a:a6:41:34:23:
3a:4d:2b:65:e1:48:9d:28:cc:a2:59:fe:0b:0c:94:
f5:7d:b1:af:cd:a4:26:ed:6d:0b:71:b2:a7:88:d4:
d3:82:1c:f8:ed:95:72:fc:c1:5f:87:0c:82:e5:64:
f3:32:d9:bb:e2:58:e9:fe:eb:6f:22:7c:62:7c:fc:
33:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:70:8B:58:F8:55:BE:13:BF:95:42:F3:2D:1E:96:D1:1B:7E:23:F2
X509v3 Authority Key Identifier:
keyid:31:61:C7:BE:C1:D7:1D:34:99:21:3B:3B:05:52:FE:6E:25:13:A3:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWHHvsHXHTSZITs7BVL-biUToyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/2nCLWPhVvhO_lULzLR6W0Rt-I_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/MWHHvsHXHTSZITs7BVL-biUToyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.120.0/23
Signature Algorithm: sha256WithRSAEncryption
60:53:36:c6:d5:3e:2f:93:4f:61:ce:4e:d4:ec:04:82:e8:26:
7c:a6:8b:8f:09:fb:4c:6a:3e:85:bf:e5:ae:37:6a:95:4f:87:
83:29:dc:78:2d:71:44:ae:1f:93:38:7e:a9:9e:c4:be:b0:29:
18:bc:73:9b:79:3e:9d:3d:b5:b4:56:69:5d:93:c5:9c:12:84:
5d:ab:f2:ea:45:d3:d0:43:c7:d1:2c:36:4e:60:43:8e:2f:d8:
0d:81:a6:ff:ae:54:5d:49:9a:51:07:c0:7e:5a:f7:06:40:f7:
4c:02:4f:33:f3:fa:53:d5:9d:de:3f:e8:b9:26:51:22:27:86:
b6:65:15:29:6b:a1:bb:03:58:32:bd:3b:7d:f8:48:9b:9a:58:
28:6f:61:27:3b:52:d0:16:39:6f:e4:2b:71:1d:d7:e1:5f:2c:
d9:3b:7b:5c:64:fb:f7:5d:c2:12:4e:e7:84:00:b2:b9:32:78:
2c:9a:46:8f:0d:26:7d:86:ad:8f:7e:58:ee:9a:17:b3:6b:2b:
cf:84:5b:d8:0e:92:48:00:3a:64:28:4a:85:70:98:2e:27:da:
84:33:80:b9:49:85:53:ff:5d:d1:16:72:06:06:b6:27:7d:5d:
cc:3e:5f:3e:c6:ea:12:bb:c7:a5:9d:de:6b:20:08:26:e4:76:
de:8e:f8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:50 2025 by rpki-client