Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/3IFTLOfaV-oOW9DvHnGf24rq50w.roa
File: 3IFTLOfaV-oOW9DvHnGf24rq50w.roa (raw, json)
Hash identifier: GPRKh+A5kfslJtHdLIoNifmwSZmxY9PWZvk1HXcWvV4=
Subject key identifier: DC:81:53:2C:E7:DA:57:EA:0E:5B:D0:EF:1E:71:9F:DB:8A:EA:E7:4C
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0185E573409130CE8E7782C34CF4FB30316A
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/3IFTLOfaV-oOW9DvHnGf24rq50w.roa
Signing time: Tue 24 Jan 2023 20:23:33 +0000
ROA not before: Tue 24 Jan 2023 20:23:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 45.80.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e5:73:40:91:30:ce:8e:77:82:c3:4c:f4:fb:30:31:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 24 20:23:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc81532ce7da57ea0e5bd0ef1e719fdb8aeae74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:63:bc:0e:19:52:82:85:58:67:86:4d:bc:
a0:34:a0:2d:b2:78:41:80:be:4f:13:d7:8b:34:2d:
59:0e:1b:fb:39:f4:8a:50:cc:99:d8:40:82:fa:f6:
13:4a:5d:7d:be:ed:7f:8f:05:a7:99:5f:86:f4:6b:
41:7c:53:e2:b4:f4:9e:06:e6:18:fc:fb:06:1e:2e:
75:2e:1a:88:85:43:e4:40:94:13:b2:c3:53:21:cd:
79:8b:b4:60:47:a2:02:dd:86:0b:49:52:c2:1f:c8:
fc:d2:81:73:79:5b:65:b8:26:f3:18:1d:ed:49:bb:
d3:17:68:91:f0:05:8a:60:5e:19:aa:b8:07:83:fe:
2e:aa:71:aa:5c:59:d0:d9:5b:96:9d:1a:d6:10:84:
b1:6f:a9:57:80:bb:fe:6e:5a:ce:d0:e4:a2:08:93:
22:98:26:68:a7:f7:e3:a8:f0:57:03:42:cb:96:25:
61:bb:4d:fb:3d:4d:e6:12:3c:6b:30:1b:61:ce:a8:
c1:60:d1:19:5a:9d:f1:3c:65:8b:16:67:3e:b9:5a:
2e:5f:ba:fa:0f:a9:2a:c9:4e:ff:88:98:2d:a1:ba:
ad:8b:d6:a1:b6:36:ac:81:98:d0:1f:15:8a:2d:31:
79:d4:a2:17:61:87:91:c4:5d:76:a8:b3:a9:8d:74:
c1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:81:53:2C:E7:DA:57:EA:0E:5B:D0:EF:1E:71:9F:DB:8A:EA:E7:4C
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/3IFTLOfaV-oOW9DvHnGf24rq50w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.5.0/24
Signature Algorithm: sha256WithRSAEncryption
09:d9:17:f0:7b:ca:e6:25:4f:14:4d:3d:71:31:f9:c4:e3:a7:
13:89:8e:d4:cf:c0:5a:02:eb:76:b2:0d:41:35:2f:ea:04:67:
eb:7b:b0:e0:48:62:a5:8d:08:b8:85:2c:4f:eb:3f:82:22:94:
6a:1e:65:a0:8f:70:3b:ca:9b:c1:ef:83:5c:4a:1e:28:19:5e:
f5:6e:a9:84:e6:49:33:63:d1:40:a8:d8:71:30:47:74:7a:03:
09:2b:69:b6:e0:62:27:77:58:95:58:7e:05:1a:b8:0d:92:82:
17:6b:42:25:d9:c2:8e:4d:4a:c6:12:0f:20:ae:aa:d4:76:19:
a1:0c:70:49:80:ad:70:b7:65:2b:bb:c5:f8:79:3c:6a:e0:a9:
c2:27:2e:c6:f0:68:08:5a:7a:d2:6f:ea:29:4e:15:5b:36:10:
a3:b1:97:25:3f:96:19:45:3c:47:c3:75:b6:8b:87:5a:d6:22:
2b:4d:30:6a:b7:40:08:a6:14:3e:a1:05:e5:00:52:03:d7:67:
e3:ba:92:b7:c9:03:dd:05:de:05:0b:0c:8d:92:c3:b4:63:27:
4d:8d:a8:41:fe:d8:47:72:df:f3:29:aa:6b:4b:39:9e:28:15:
f6:e8:02:74:75:8f:05:bb:a2:21:60:09:15:5a:db:d9:88:c1:
c7:2b:04:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:10 2025 by rpki-client