Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/DLm5pQ5kt7d8AQJqU2_IVbAwMTQ.roa
File: DLm5pQ5kt7d8AQJqU2_IVbAwMTQ.roa (raw, json)
Hash identifier: cnJVJJHjlxSXIkwHhOmSOn4sWgq7B+WwTvMVTeCAQI8=
Subject key identifier: 0C:B9:B9:A5:0E:64:B7:B7:7C:01:02:6A:53:6F:C8:55:B0:30:31:34
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01876CDA5C424CC4EDC5198F98FEC53CB6A1
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/DLm5pQ5kt7d8AQJqU2_IVbAwMTQ.roa
Signing time: Mon 10 Apr 2023 20:27:42 +0000
ROA not before: Mon 10 Apr 2023 20:27:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209043
IP address blocks: 45.80.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6c:da:5c:42:4c:c4:ed:c5:19:8f:98:fe:c5:3c:b6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Apr 10 20:27:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cb9b9a50e64b7b77c01026a536fc855b0303134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b1:21:75:e5:89:49:03:a9:e8:a6:67:32:e9:
ed:2f:0e:24:11:0d:77:c3:85:9b:7f:af:cb:eb:58:
e0:b6:b0:80:85:15:62:0b:c3:7e:5d:ad:f6:41:77:
60:a6:d5:55:2f:37:0a:9a:32:55:1c:20:0e:83:0e:
f3:54:85:61:95:ec:17:a4:63:64:fb:4d:e5:a1:b6:
60:fe:54:c9:87:e8:bc:54:62:52:76:2c:47:94:50:
7b:41:3c:26:29:69:e2:ce:71:e5:42:94:c6:8d:15:
28:cd:fe:fd:f8:68:58:e0:3f:0e:ac:e2:b3:69:17:
f5:c6:f5:bd:42:fa:cb:92:51:c2:05:86:b4:b0:44:
3e:13:9c:26:5e:18:92:09:cb:2c:42:65:12:a2:58:
bf:91:a4:a5:29:d8:61:83:0f:9a:20:5c:34:af:cd:
f7:21:61:b8:2e:9d:fa:2f:63:a6:b1:e4:3b:49:33:
da:96:33:8b:a8:cc:06:ee:fc:a9:b0:ab:58:95:65:
d1:05:ec:b5:c7:c9:05:34:c1:77:2b:7d:39:79:d4:
e0:e3:1f:68:4c:86:ac:36:17:ef:83:0a:e0:8a:c0:
42:f8:ec:16:1a:b4:0f:38:e1:95:71:5c:75:4c:da:
99:c8:5a:ed:a8:c5:4b:2d:ee:b3:14:cf:87:8b:43:
f5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B9:B9:A5:0E:64:B7:B7:7C:01:02:6A:53:6F:C8:55:B0:30:31:34
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/DLm5pQ5kt7d8AQJqU2_IVbAwMTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.5.0/24
Signature Algorithm: sha256WithRSAEncryption
16:5b:f8:34:65:8c:97:b1:bd:3e:3c:15:67:8d:97:c7:ca:4b:
ff:b6:5e:e1:e3:f8:42:dc:3d:ea:dd:b0:27:5e:d4:09:1d:de:
cf:24:39:63:98:80:04:3b:01:c9:e0:26:49:71:5d:1f:36:ac:
57:64:db:d6:55:7b:51:2c:ba:da:5b:02:48:6d:87:c3:91:14:
33:0d:b8:0e:79:80:7c:26:99:cd:50:a9:e2:58:74:04:38:7c:
d0:fc:a5:f5:ba:ff:a1:1f:88:26:ce:82:c2:a5:30:44:0b:f1:
ba:25:32:fc:08:f0:cf:fc:ef:1d:be:94:99:89:eb:af:e0:50:
e2:73:8c:2a:b0:64:a4:b3:25:7a:0e:03:60:b9:59:e5:07:70:
7c:75:cd:c0:28:0b:b0:b4:59:d7:d0:1b:66:84:85:42:54:98:
bc:34:8c:4c:bf:95:55:bc:04:95:32:b8:83:bc:8b:23:23:a0:
d2:c5:63:a8:c5:86:84:c9:9e:9a:bb:ea:34:cb:63:3a:a5:5b:
f4:25:44:41:c8:3a:73:f3:3e:4e:1b:34:3a:96:7b:04:06:18:
1e:a0:2d:81:08:42:e0:9f:ea:d8:da:cd:ec:d9:c5:95:e0:28:
f8:31:1a:a3:33:88:c7:56:46:2d:b2:11:1b:e5:a0:45:0a:87:
9f:2c:d3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:33 2025 by rpki-client