Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/K822UTAoaRSvVKk2MmY14blDUwU.roa
File: K822UTAoaRSvVKk2MmY14blDUwU.roa (raw, json)
Hash identifier: zTtH1zmM9ccYqTOwC+zidUainfd0AKRuiLC3G1NyRk8=
Subject key identifier: 2B:CD:B6:51:30:28:69:14:AF:54:A9:36:32:66:35:E1:B9:43:53:05
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 04E13D09
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/K822UTAoaRSvVKk2MmY14blDUwU.roa
Signing time: Tue 28 Jun 2022 14:33:02 +0000
ROA not before: Tue 28 Jun 2022 14:33:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 45.146.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81870089 (0x4e13d09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jun 28 14:33:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2bcdb65130286914af54a936326635e1b9435305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:74:2f:22:b3:4e:d4:41:86:dd:64:63:32:cd:
13:54:06:05:33:40:5c:04:b7:72:08:86:b9:6a:96:
3c:18:a6:cb:70:b1:bb:26:e5:df:89:03:48:c0:85:
c0:0a:77:f0:50:76:f1:46:9e:25:c6:6e:a3:6a:ef:
e3:25:70:0e:b8:d4:46:06:b9:90:50:8b:fa:cf:35:
63:16:70:08:aa:2c:29:31:bb:1e:79:76:42:c4:c9:
d1:85:ba:6e:93:0d:46:0d:4b:34:c3:df:b5:3a:af:
47:83:1a:6a:c4:8c:07:f3:f5:db:01:db:d9:21:4b:
7b:cc:14:66:99:76:ab:0c:87:0a:4f:e4:c2:ba:b0:
c4:b6:46:e1:ee:9e:50:5b:59:37:2a:5a:40:83:1b:
4a:76:a6:e8:ca:52:de:67:6f:79:a8:0b:ab:b8:02:
55:fd:65:a3:8d:6f:4f:f0:be:46:f5:a9:cc:37:f6:
3e:10:32:f6:bd:46:31:6d:ef:95:f2:cc:37:19:e5:
73:57:1f:76:2b:9e:0a:b8:73:fb:24:11:89:92:74:
5c:f3:f1:b8:09:59:57:98:7c:74:2b:22:ed:46:db:
4b:0d:09:08:80:b5:26:30:38:5a:99:b4:70:35:da:
6b:fc:cb:6a:b6:7a:9b:dc:8c:ac:13:06:e5:95:a4:
b6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CD:B6:51:30:28:69:14:AF:54:A9:36:32:66:35:E1:B9:43:53:05
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/K822UTAoaRSvVKk2MmY14blDUwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.107.0/24
Signature Algorithm: sha256WithRSAEncryption
73:18:22:22:6f:c1:9c:3c:91:3f:e2:d4:31:9f:aa:fa:37:7c:
d3:cf:b0:4b:24:cb:fa:20:a2:8c:4c:43:fa:48:cc:c2:15:cb:
6e:77:85:d6:3e:ef:4b:bf:41:c6:cd:95:4a:3e:1b:6e:ff:ed:
3e:c5:e7:79:fc:59:bc:51:c4:c2:c5:f9:f4:b8:7d:eb:33:54:
62:24:5a:df:fe:55:47:33:64:f1:ab:36:0b:67:25:89:40:e0:
06:08:32:9a:7e:59:fa:15:22:5d:01:09:cc:90:45:8b:14:9d:
97:f0:0a:ad:54:f9:5b:32:a6:a7:58:60:e2:70:f7:63:54:e2:
3f:61:fb:a6:77:b9:fa:1f:95:7e:2c:22:3f:1e:66:7c:41:c1:
c2:22:c6:c0:f8:61:e9:02:12:b7:b4:11:e0:e7:c9:b8:8e:80:
68:24:3a:c4:0d:9b:c3:84:99:93:39:13:59:ec:bf:f8:16:08:
ef:fa:3a:6d:a2:32:b9:d7:aa:bc:77:d6:9f:d6:be:8a:d2:ae:
7c:68:1c:00:c7:49:5b:8e:ff:69:2c:c9:ae:12:a7:0e:4e:53:
1c:7a:38:62:6d:6e:1a:02:8e:c7:9d:eb:af:0e:4c:19:10:52:
c5:b0:5d:0f:3f:ad:cf:4f:e1:af:db:68:f2:49:26:12:4f:81:
4f:d9:fc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:01 2025 by rpki-client