Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/pM5PO6-35tR7u4RcCbI4R-jPXoc.roa
File: pM5PO6-35tR7u4RcCbI4R-jPXoc.roa (raw, json)
Hash identifier: LbIcfzAWGVa2ebmgtgkkuYF5oFwn/p8wJrPHsouRySk=
Subject key identifier: A4:CE:4F:3B:AF:B7:E6:D4:7B:BB:84:5C:09:B2:38:47:E8:CF:5E:87
Certificate issuer: /CN=3161c7bec1d71d3499213b3b0552fe6e2513a326
Certificate serial: 018691867B7C5A18424B35B1EE5A5D11C7CD
Authority key identifier: 31:61:C7:BE:C1:D7:1D:34:99:21:3B:3B:05:52:FE:6E:25:13:A3:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWHHvsHXHTSZITs7BVL-biUToyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/pM5PO6-35tR7u4RcCbI4R-jPXoc.roa
Signing time: Mon 27 Feb 2023 06:19:15 +0000
ROA not before: Mon 27 Feb 2023 06:19:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202352
IP address blocks: 45.93.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:91:86:7b:7c:5a:18:42:4b:35:b1:ee:5a:5d:11:c7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3161c7bec1d71d3499213b3b0552fe6e2513a326
Validity
Not Before: Feb 27 06:19:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4ce4f3bafb7e6d47bbb845c09b23847e8cf5e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f7:d9:11:63:ab:b4:eb:0e:92:01:ad:2d:e6:
a0:7f:5c:63:84:13:18:c5:14:01:eb:9d:82:da:e1:
8b:5c:d8:eb:58:29:7c:3a:56:ca:b8:ea:ae:20:9d:
60:7e:18:c0:1a:ba:bc:d7:b8:60:7e:51:4e:25:da:
c3:40:08:fa:f2:ec:75:b8:f4:55:4a:ac:4c:a0:c1:
a3:f6:da:f7:4c:7a:48:5e:27:ad:d8:0b:85:ca:7d:
7f:67:7a:96:8e:ac:66:0e:59:f6:ed:61:75:4b:7e:
7a:88:e2:62:93:cf:79:b3:27:5c:1e:ec:0f:26:88:
92:e4:bf:b0:8e:03:8d:e9:f0:55:b8:cc:ce:af:31:
3a:c9:91:da:98:24:8d:03:0f:c2:e6:f4:ba:7f:96:
9c:6b:d2:4d:f0:e6:42:1c:a2:92:eb:75:b5:7f:6c:
de:ad:e1:a3:69:bf:ef:58:e8:93:ae:93:9e:71:ac:
a0:9b:8f:e5:5d:6c:8e:8e:f3:46:48:29:94:da:07:
14:bf:b1:e0:62:dd:bf:ff:07:e1:33:33:ce:5a:78:
10:c7:4c:4d:1b:03:08:1a:ab:72:08:24:ae:01:a6:
a6:f9:b4:21:a3:47:14:22:dd:d3:de:37:72:8b:3d:
dc:0d:80:0e:7f:56:fd:df:1b:a9:1d:37:75:cf:35:
a0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CE:4F:3B:AF:B7:E6:D4:7B:BB:84:5C:09:B2:38:47:E8:CF:5E:87
X509v3 Authority Key Identifier:
keyid:31:61:C7:BE:C1:D7:1D:34:99:21:3B:3B:05:52:FE:6E:25:13:A3:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWHHvsHXHTSZITs7BVL-biUToyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/pM5PO6-35tR7u4RcCbI4R-jPXoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/MWHHvsHXHTSZITs7BVL-biUToyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.123.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:b2:d2:d7:f3:48:9d:07:a0:df:c9:ba:bf:d1:af:42:c1:97:
5e:50:1e:bd:19:ea:37:03:44:c9:9a:37:da:ce:aa:ab:7c:f9:
d1:7e:d2:1c:7b:7b:f6:bc:1c:4c:53:27:2a:9c:9d:93:d0:87:
58:e1:7c:0a:3e:d1:98:60:48:b3:68:b1:f2:cc:b7:34:ce:87:
fc:4d:5e:57:2e:b4:9f:66:12:14:2c:38:f1:73:37:35:9d:29:
b3:91:77:c2:67:08:b4:6d:58:c3:63:28:2e:fa:b4:9b:e7:54:
46:6a:69:84:bb:77:b9:1a:8b:c7:33:cf:1c:6f:1f:6e:2f:0d:
21:cc:54:0f:4e:44:cc:99:2d:d2:2a:a0:bd:c8:0b:77:eb:2c:
2e:6e:f7:ff:74:60:49:ef:7a:6b:d8:4d:85:52:39:5c:a6:fe:
11:a2:25:f3:ed:03:e1:6b:66:17:e9:e6:d2:f6:32:fc:a8:93:
35:80:86:8c:e6:04:4e:85:50:38:df:d2:a0:60:46:dd:4b:86:
9f:05:c3:7f:a0:d3:a0:4c:48:66:2f:67:9d:1f:c3:88:4a:3d:
b6:87:6f:04:ed:7b:e9:a1:1f:60:3b:99:d7:21:fb:2f:0a:7e:
9f:11:71:f8:77:47:99:f6:8e:b4:6e:fc:e4:05:8b:2a:8c:ee:
4d:74:0a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:26:27 2025 by rpki-client