Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/1vhUFR9_szl2izk6SFird5gsCZ8.roa
File: 1vhUFR9_szl2izk6SFird5gsCZ8.roa (raw, json)
Hash identifier: FvvQ6Bi/J4COVHfwyLMZXydII5VdLllY1DC1AjGT3p8=
Subject key identifier: D6:F8:54:15:1F:7F:B3:39:76:8B:39:3A:48:58:AB:77:98:2C:09:9F
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0182A34C2EF8BCA47527B971359FAAC1662B
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/1vhUFR9_szl2izk6SFird5gsCZ8.roa
Signing time: Mon 15 Aug 2022 20:57:35 +0000
ROA not before: Mon 15 Aug 2022 20:57:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 45.146.105.0/24 maxlen: 24
45.80.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a3:4c:2e:f8:bc:a4:75:27:b9:71:35:9f:aa:c1:66:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Aug 15 20:57:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6f854151f7fb339768b393a4858ab77982c099f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dd:53:b4:58:94:49:89:13:fd:77:77:fb:24:
60:a3:04:8c:f2:e2:bd:c0:91:cf:f6:71:c7:47:05:
bf:36:1f:2a:6e:97:f6:4d:8f:75:0e:ad:eb:9b:3f:
69:03:77:ad:8f:36:17:c7:0e:e2:8f:44:04:cf:ce:
8c:dd:fc:54:ae:d2:b0:5e:a6:19:26:f5:7a:45:ac:
c5:95:6b:97:84:cc:8e:b8:6f:56:8c:07:b4:1f:e3:
44:0d:21:bc:db:be:72:64:b3:09:8b:3e:00:e7:fe:
6f:b2:61:41:73:f7:60:5b:2d:d9:5e:25:08:9e:08:
77:85:dd:3c:6d:00:6f:20:60:83:54:2d:75:3b:a2:
89:37:f1:3f:f5:51:80:16:3e:93:05:5c:5d:0e:1c:
6f:33:ef:5a:fd:54:51:4b:21:83:e7:56:bc:46:c0:
69:4d:ab:ac:3e:7e:ed:bc:23:f1:62:0e:8f:4f:91:
1c:c4:74:61:b7:6f:06:81:cd:a3:45:2a:b2:aa:ca:
e0:4e:3f:5c:a5:32:af:da:a6:64:fe:86:b4:dc:22:
47:c6:a5:d9:7c:9a:4a:1e:f7:d7:04:94:bf:57:cf:
3e:a4:08:93:d8:9a:96:2f:2a:19:ad:ef:37:4c:81:
8a:56:68:37:57:9d:79:0a:fe:7d:9b:79:7e:05:92:
98:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F8:54:15:1F:7F:B3:39:76:8B:39:3A:48:58:AB:77:98:2C:09:9F
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/1vhUFR9_szl2izk6SFird5gsCZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.4.0/24
45.146.105.0/24
Signature Algorithm: sha256WithRSAEncryption
06:36:19:ac:36:1c:98:04:c1:e4:fc:85:03:51:f1:eb:cb:0a:
1d:8d:73:b8:84:7e:e7:1f:ba:36:0b:0a:59:e5:73:a8:68:d4:
e8:ce:7b:bb:41:6c:60:95:42:29:6f:1b:51:79:c9:44:07:53:
ec:3d:51:a6:13:db:5b:82:20:03:88:f3:61:91:86:87:2d:2e:
1a:3e:cb:48:fc:a0:f1:42:13:4c:98:09:8d:c1:1a:6f:47:02:
17:41:c7:a3:84:62:9b:e7:e5:05:02:88:ad:0e:d8:85:b4:8e:
fb:fc:34:b3:a2:7f:1d:c8:27:ed:10:0a:a4:37:09:e7:c8:b4:
cc:0d:af:1f:22:38:ac:0e:3b:ba:58:2c:1b:6c:ca:30:e9:02:
dd:56:98:60:40:ed:ad:73:d4:cb:03:51:d9:07:87:93:95:eb:
0c:6d:38:39:31:9e:60:80:f9:f4:fc:7e:09:80:41:76:77:8e:
08:35:c2:39:0d:08:63:3e:6c:2e:20:6c:83:40:3e:e2:11:a6:
f3:5e:6b:c7:6b:03:2b:cd:8c:04:87:66:df:39:fd:5a:6c:ae:
42:63:f3:e0:12:f7:6e:08:c3:08:b1:a3:14:cb:1d:29:cb:0e:
ac:3f:d1:71:d2:14:4f:87:cf:cb:82:22:72:12:3e:16:46:1d:
5f:04:03:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:26 2025 by rpki-client