Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/1-50YMzORwx8uorw7xlYU9aKOdVA.roa
File: 1-50YMzORwx8uorw7xlYU9aKOdVA.roa (raw, json)
Hash identifier: 1MyGS/zho5+Rx3XfB5/vUWykaby/iGzG25i0XoeAV+0=
Subject key identifier: FB:9D:18:33:33:91:C3:1F:2E:A2:BC:3B:C6:56:14:F5:A2:8E:75:50
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0187A31566C24AACDA6EEDBE3CAD1ED404EA
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/1-50YMzORwx8uorw7xlYU9aKOdVA.roa
Signing time: Fri 21 Apr 2023 09:11:41 +0000
ROA not before: Fri 21 Apr 2023 09:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 213.225.236.0/24 maxlen: 24
45.146.104.0/24 maxlen: 24
45.132.98.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a3:15:66:c2:4a:ac:da:6e:ed:be:3c:ad:1e:d4:04:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Apr 21 09:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb9d18333391c31f2ea2bc3bc65614f5a28e7550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:23:29:bb:7a:60:61:b4:bf:d2:70:e2:c1:85:
67:d2:06:7f:6c:d6:25:16:c8:88:0c:12:d6:48:64:
9d:ac:f9:a7:25:47:04:1b:bb:db:fc:ad:72:74:19:
37:d5:b1:bd:30:3d:02:ab:d6:f2:7f:f8:23:78:e7:
35:7b:55:d9:40:c5:3a:bd:9d:25:49:77:ec:cf:6d:
9a:e2:4c:05:c7:e2:fb:7b:9c:d6:70:bb:d0:8c:80:
c0:39:78:0c:35:86:11:40:74:73:4e:6d:94:ee:ae:
f9:a6:d1:81:a1:60:40:da:be:54:46:80:da:31:64:
2d:20:69:31:38:b4:0d:d6:e6:80:cb:3a:d1:b2:ee:
56:59:0d:43:84:fa:09:4f:e7:8d:d2:74:5f:89:f5:
c3:2f:1c:8e:4a:8d:b0:b4:40:04:6a:6d:7d:7a:a6:
81:68:7f:98:9a:ac:3b:d3:61:07:c1:97:bb:02:36:
de:20:fd:29:26:08:33:87:5f:17:77:92:8c:35:6f:
71:26:3a:59:c6:e9:b7:3b:b0:f5:08:e4:23:33:3b:
d0:f2:df:6d:56:5c:6d:ee:ce:26:0d:75:e7:69:32:
7d:b7:5a:61:8f:a2:54:93:b5:67:4b:d8:59:c8:b6:
0c:cc:85:a7:8c:c9:9e:ba:9c:26:03:12:a4:f7:ea:
f8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9D:18:33:33:91:C3:1F:2E:A2:BC:3B:C6:56:14:F5:A2:8E:75:50
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/1-50YMzORwx8uorw7xlYU9aKOdVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.98.0/23
45.146.104.0/24
213.225.236.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:2b:3b:8d:d0:b3:72:cc:eb:f8:58:a3:69:e3:3f:28:e1:f7:
b0:58:86:d2:f4:7e:26:56:95:1f:3a:00:68:a0:f8:82:85:8b:
fd:57:b2:91:bf:11:1b:af:2a:95:0e:de:8f:57:14:3c:9f:e6:
50:a1:06:79:bc:b6:b6:fe:1a:c5:4b:2a:5a:0f:81:ce:1f:b3:
c4:48:a6:f5:b7:11:0f:86:a5:c9:03:2e:31:2c:2d:c2:ea:66:
1a:14:eb:43:9b:33:e3:72:75:fc:82:ba:8f:30:a4:a0:3e:4d:
29:81:dd:a7:be:cb:7c:fc:b7:5e:42:52:8c:5c:05:27:bb:a0:
0b:71:7e:7c:ad:ca:b8:df:b9:d3:09:fd:94:bf:f5:33:27:3f:
3f:0a:f8:7a:07:b4:fc:7f:9d:bf:24:71:3a:2a:e4:92:08:75:
81:26:22:95:a0:fe:23:08:7d:2d:e6:c5:ad:5d:c5:cb:2f:d5:
41:5a:02:e6:ab:6c:d0:2f:0d:e8:56:ba:c8:42:58:b2:4a:fb:
e2:54:38:21:92:ae:16:eb:92:e2:d2:51:a2:cc:ad:3d:f3:4d:
fa:6b:41:19:28:4d:4a:76:51:dd:fc:29:d7:86:1a:1b:7c:65:
d7:bd:c4:c1:ba:1e:f2:ef:72:f8:af:a5:a4:c8:a2:02:d5:c8:
36:40:63:ef
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:11 2025 by rpki-client