Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/sXTlYpbmyjAd_nYhgw9l25t1s3k.roa
File: sXTlYpbmyjAd_nYhgw9l25t1s3k.roa (raw, json)
Hash identifier: YrL0JVF23KN/J2EEIJfAX9bJzrdMhrnQ79TE0E5dLRk=
Subject key identifier: B1:74:E5:62:96:E6:CA:30:1D:FE:76:21:83:0F:65:DB:9B:75:B3:79
Certificate issuer: /CN=3161c7bec1d71d3499213b3b0552fe6e2513a326
Certificate serial: 0183F41923A85081F5C049F078AE4A35997D
Authority key identifier: 31:61:C7:BE:C1:D7:1D:34:99:21:3B:3B:05:52:FE:6E:25:13:A3:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWHHvsHXHTSZITs7BVL-biUToyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/sXTlYpbmyjAd_nYhgw9l25t1s3k.roa
Signing time: Thu 20 Oct 2022 06:33:51 +0000
ROA not before: Thu 20 Oct 2022 06:33:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202352
IP address blocks: 45.93.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f4:19:23:a8:50:81:f5:c0:49:f0:78:ae:4a:35:99:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3161c7bec1d71d3499213b3b0552fe6e2513a326
Validity
Not Before: Oct 20 06:33:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b174e56296e6ca301dfe7621830f65db9b75b379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:05:f7:c4:43:65:e8:bf:51:c2:12:bd:15:98:
3e:9e:a9:96:44:48:17:86:b8:15:ef:b9:d0:d6:79:
01:63:4a:1f:e2:ea:93:3f:1d:22:4a:07:f7:c1:f5:
ff:9f:1d:f0:d7:5e:a0:c7:55:09:dd:27:d5:82:bf:
a3:11:bc:bf:dc:17:56:7f:8a:ad:2d:9f:cf:11:7e:
a5:aa:19:3e:aa:b0:c8:e0:2f:6b:8c:bb:15:42:ea:
3d:ad:a4:c5:04:bd:9a:8a:52:57:dd:19:a7:55:39:
20:bb:21:7d:be:b9:76:db:6d:97:51:fd:30:73:09:
ff:3f:55:01:d2:49:20:7b:6b:94:8f:04:20:68:36:
79:d7:26:39:fb:52:be:9b:23:7a:5f:4b:75:e4:27:
82:9c:96:e2:4b:b0:42:b9:29:c3:88:05:19:6c:2f:
08:11:95:26:a9:33:a7:28:ff:a5:6e:9a:74:62:20:
4b:3d:af:a8:e3:f9:a6:a4:8a:c5:89:cf:86:57:e8:
d0:f7:28:c9:81:2a:fa:d7:7f:1a:82:a2:df:29:f7:
1d:6a:89:52:3f:99:ad:e6:6a:be:c6:03:f2:20:d6:
10:68:43:cf:2b:a3:38:75:66:a6:5e:39:54:f4:90:
cc:18:e7:19:ac:bc:9d:df:94:b3:3d:84:46:e3:47:
39:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:74:E5:62:96:E6:CA:30:1D:FE:76:21:83:0F:65:DB:9B:75:B3:79
X509v3 Authority Key Identifier:
keyid:31:61:C7:BE:C1:D7:1D:34:99:21:3B:3B:05:52:FE:6E:25:13:A3:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWHHvsHXHTSZITs7BVL-biUToyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/sXTlYpbmyjAd_nYhgw9l25t1s3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/MWHHvsHXHTSZITs7BVL-biUToyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.123.0/24
Signature Algorithm: sha256WithRSAEncryption
39:3a:00:04:06:79:aa:f2:7e:89:44:f1:22:a0:6e:df:a5:8f:
6f:f5:eb:2b:8e:58:79:c2:cc:27:ea:fd:cc:9e:fd:ce:9a:f3:
03:ac:aa:74:b5:ba:da:3f:4e:71:f9:8d:06:c2:e2:1e:a7:21:
e6:c4:7c:b0:11:5b:8f:c5:26:7d:33:9a:1c:a7:5f:34:0a:5a:
9e:f6:33:b5:e2:ae:a0:be:0a:5e:55:b5:a7:06:a4:cf:b9:3d:
2e:c1:4d:8d:97:1f:4e:11:3f:05:da:e8:a6:b4:e7:5d:f4:57:
89:72:48:9e:d1:38:c2:e0:05:6c:18:df:ec:68:8c:a5:6e:68:
f1:5e:4b:b3:f5:f5:33:1b:65:bd:fb:d7:b4:9f:03:07:59:50:
25:c9:17:2b:92:47:25:53:b1:a3:56:c5:62:68:3e:41:3b:d2:
b6:e9:43:0a:9e:ee:60:48:d0:85:9f:17:24:7c:65:09:cc:92:
27:be:d2:ca:dd:69:a5:1f:61:a8:ec:65:7a:fb:8a:e9:a9:81:
1e:8f:06:68:e0:a2:e7:f1:9e:41:20:c3:eb:5c:ac:71:df:82:
22:f1:ae:25:43:c0:19:46:22:ef:6b:18:65:0b:43:dd:f4:b3:
73:91:40:71:d0:e1:2a:79:22:41:f8:f8:ef:be:a6:3a:34:51:
b0:6a:ca:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:31:19 2025 by rpki-client