Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/5AvqRIEXD2_3HCod2mWPo-OD6hE.roa
File: 5AvqRIEXD2_3HCod2mWPo-OD6hE.roa (raw, json)
Hash identifier: E1wKPeYAwbpbDC261D4khom7B2P4UsBcZfOEZyLInA8=
Subject key identifier: E4:0B:EA:44:81:17:0F:6F:F7:1C:2A:1D:DA:65:8F:A3:E3:83:EA:11
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0368ED60
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/5AvqRIEXD2_3HCod2mWPo-OD6hE.roa
Signing time: Thu 03 Feb 2022 13:07:20 +0000
ROA not before: Thu 03 Feb 2022 13:07:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 45.146.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57208160 (0x368ed60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Feb 3 13:07:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e40bea4481170f6ff71c2a1dda658fa3e383ea11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3c:39:cf:e3:8e:4b:87:ab:08:9e:17:72:cf:
41:ed:24:20:68:39:89:33:1b:6f:fe:01:6b:dc:90:
ea:68:a5:9a:e8:91:aa:b4:e5:ad:e3:f2:5b:38:6e:
6d:14:4b:c2:71:ee:f9:19:3d:89:06:86:3f:4f:5e:
0e:f8:81:30:8a:04:0e:87:bf:0a:a5:3c:75:b2:59:
e8:00:5a:29:1d:54:1e:d1:62:ce:4a:a2:63:60:8a:
d2:12:5a:0f:19:42:dd:eb:b1:94:dc:af:07:45:9c:
0e:0e:76:2c:ca:9b:e0:f5:ea:fb:d1:72:1d:23:51:
d1:55:74:13:f8:d5:1e:cf:57:22:e9:f1:cb:f7:a8:
40:4d:6b:1b:6a:fe:c7:e6:d1:19:a3:83:5d:18:c6:
04:91:16:0b:7a:46:6b:7a:51:5b:d5:e8:42:17:c1:
b2:9d:bc:9a:a8:73:f4:a4:35:d1:50:ef:fd:8a:e8:
a5:66:3d:f5:55:57:fd:42:91:2d:4c:ef:00:68:a9:
c5:74:b1:3d:5c:cd:a5:65:e5:8b:dc:4d:c3:0f:e5:
b4:76:29:38:68:c6:ab:0b:cf:e8:db:05:e4:5b:39:
18:c7:08:42:8d:aa:fc:bd:0f:f1:e8:bd:a0:da:44:
ee:64:3b:10:1a:27:10:00:f0:c0:01:5b:12:46:91:
fd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0B:EA:44:81:17:0F:6F:F7:1C:2A:1D:DA:65:8F:A3:E3:83:EA:11
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/5AvqRIEXD2_3HCod2mWPo-OD6hE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.104.0/24
Signature Algorithm: sha256WithRSAEncryption
84:58:dc:7a:15:12:18:5e:89:78:5f:4d:46:b0:ad:f5:17:13:
54:da:c0:87:ca:07:52:68:8a:f1:26:bc:8f:2a:5a:95:46:f6:
3b:07:7a:88:83:ad:7d:1b:cf:bf:8b:20:16:32:37:2d:3e:d1:
c4:d8:ac:df:d3:c3:f8:3c:a4:db:c1:92:ee:4e:ca:fa:e0:9c:
ef:d4:78:13:0b:05:27:9d:ca:ff:eb:57:7e:2c:11:81:e2:bb:
78:c0:14:77:c9:27:12:95:16:2d:45:2d:d3:f5:3a:05:c8:8f:
31:56:9d:11:e3:ab:69:39:7a:80:6e:42:b8:82:e6:d9:d7:41:
b1:d8:50:55:0f:84:2d:ba:17:a8:c5:64:0f:22:6c:4e:b0:c0:
40:9b:2c:c9:7a:3e:aa:55:2f:f9:f2:e5:7a:d7:f7:31:cc:eb:
34:7e:6d:fb:44:4e:c6:fe:bb:42:c6:1a:37:05:2c:a0:91:4c:
b6:14:01:7d:a3:13:e9:44:26:ad:f4:3a:72:0e:79:4c:90:d5:
a7:29:67:33:d1:52:04:05:d3:2d:cd:92:c9:c6:3d:ab:08:f4:
eb:e3:41:29:d4:26:43:04:2c:35:f4:75:96:b5:e0:61:9f:40:
ab:2e:4f:97:85:1b:4b:9d:43:7f:5a:1b:20:18:83:e2:e4:6e:
a9:17:a1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:07 2025 by rpki-client