Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/_nBY93JBZttn2938LkJSPACSyjQ.roa
File: _nBY93JBZttn2938LkJSPACSyjQ.roa (raw, json)
Hash identifier: e6XSqg77WfPzxSCoGH2BxTruIFkELB6o7I0wszutFUk=
Subject key identifier: FE:70:58:F7:72:41:66:DB:67:DB:DD:FC:2E:42:52:3C:00:92:CA:34
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0187C2CD372666DE97667C064C6C15A99B82
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/_nBY93JBZttn2938LkJSPACSyjQ.roa
Signing time: Thu 27 Apr 2023 13:00:41 +0000
ROA not before: Thu 27 Apr 2023 13:00:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.132.98.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:cd:37:26:66:de:97:66:7c:06:4c:6c:15:a9:9b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Apr 27 13:00:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe7058f7724166db67dbddfc2e42523c0092ca34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f0:31:2b:a1:ea:13:fd:e1:34:46:00:39:62:
be:6f:a3:58:92:9c:88:7c:04:97:8d:30:27:dd:ce:
51:e3:6b:a8:96:a4:cc:bf:1c:c3:f4:3c:a8:5d:6f:
cd:1b:04:e7:a6:06:50:71:d0:36:34:fe:2e:28:0f:
3e:e8:e1:36:7c:16:21:89:e5:5b:e1:fb:6b:e7:23:
f2:c5:8f:63:d4:c6:a2:58:4b:b5:68:c5:b6:a8:7f:
f6:18:c0:1d:c7:2c:bb:18:d8:94:62:e9:bc:1f:ce:
24:50:a6:86:82:30:98:78:38:3f:74:eb:b2:5e:fd:
bf:d2:10:a5:1c:c5:33:f4:ff:95:a1:2c:c2:fc:ec:
ed:e1:d8:31:af:df:c0:30:48:69:62:94:8a:86:d4:
d3:88:16:c8:3f:70:db:1f:0d:fb:31:aa:b9:53:15:
f6:4c:4a:75:66:43:67:4c:ee:97:13:ef:7d:dc:bc:
74:5a:a4:95:f3:86:18:4d:18:31:ff:de:a8:66:ca:
5e:50:2b:b8:37:98:de:71:ff:ab:e1:f1:63:0b:1a:
ab:cc:61:80:2c:6f:6c:89:d4:ca:30:24:f1:5d:5e:
1d:cb:1f:0b:a2:4b:41:ad:ae:f2:6e:ec:78:15:9a:
08:44:9c:e0:f3:1e:b0:a7:a3:12:8d:cb:a2:e0:fb:
c0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:70:58:F7:72:41:66:DB:67:DB:DD:FC:2E:42:52:3C:00:92:CA:34
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/_nBY93JBZttn2938LkJSPACSyjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.98.0/23
Signature Algorithm: sha256WithRSAEncryption
23:ea:9e:13:4d:2c:4c:f4:92:6e:b8:46:29:48:2c:ef:cf:cd:
4b:59:67:c5:f6:f0:83:4d:d9:d7:17:93:6c:6a:be:c1:4a:84:
0b:90:97:af:c2:58:2d:35:10:e6:d2:d9:2b:8c:59:b5:3f:0d:
d7:f2:48:1b:bb:1a:31:8e:e4:b6:94:c1:82:09:73:fe:de:83:
e6:2b:1d:79:27:0c:75:e4:9b:21:2a:d3:fc:be:11:9d:8f:82:
5a:0c:d2:75:14:37:74:83:02:6e:9a:36:47:ba:d9:b9:63:1d:
67:71:a5:2c:5d:5f:60:fa:d4:67:27:36:d1:99:13:d8:6c:76:
72:b5:3b:62:83:92:2f:ef:98:c5:73:49:09:87:61:e5:f6:d3:
06:1f:5f:9d:74:1b:ba:c7:88:b2:90:e2:66:1f:ab:1e:89:7d:
2d:bd:5d:01:fe:4f:7e:58:fe:cd:d0:55:a7:59:30:e4:5b:57:
b8:d9:9e:72:a8:1a:eb:dc:11:a2:4e:f2:0e:65:b8:bf:a6:dd:
40:c6:7e:6d:4b:ee:b8:7d:de:f6:1a:f4:0f:2b:2a:9f:40:7d:
4e:02:dc:f9:96:d6:b9:4d:05:a0:ce:0a:eb:b1:02:2e:e9:34:
c4:a6:e6:6b:f2:74:49:61:fb:c0:ec:f6:8d:f9:e2:bb:ec:62:
90:7f:8d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:59 2025 by rpki-client