Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/a1CFMWBGbLCLZBlXsIp38Z9a7UE.roa
File: a1CFMWBGbLCLZBlXsIp38Z9a7UE.roa (raw, json)
Hash identifier: f486D/6qmZqD5i29WUFzKAcWxwfzOKASzO+EgmuyDQs=
Subject key identifier: 6B:50:85:31:60:46:6C:B0:8B:64:19:57:B0:8A:77:F1:9F:5A:ED:41
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01879E2F6FE7117BDBEADEF9345CCE426F5E
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/a1CFMWBGbLCLZBlXsIp38Z9a7UE.roa
Signing time: Thu 20 Apr 2023 10:22:01 +0000
ROA not before: Thu 20 Apr 2023 10:22:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 45.146.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:2f:6f:e7:11:7b:db:ea:de:f9:34:5c:ce:42:6f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Apr 20 10:22:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b50853160466cb08b641957b08a77f19f5aed41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:85:04:ac:a8:74:c6:52:b9:e2:a4:f6:c3:74:
c8:87:d0:24:74:67:3d:47:0b:12:1b:06:5e:04:7e:
f0:79:97:90:88:2c:57:d7:bd:1c:98:da:a2:26:d5:
71:e4:7d:d6:30:2a:93:95:57:c7:ad:96:eb:15:27:
aa:ff:ed:30:5a:19:2e:19:2f:4b:4a:8f:7a:8b:34:
41:e2:3a:7f:6b:de:f9:0e:ea:87:8a:0b:fa:fa:97:
bc:d4:a1:2a:a6:02:52:3b:f6:8b:aa:5d:ab:ff:0e:
07:8e:a2:17:0a:4d:47:bb:01:c2:8e:d4:f1:f0:33:
66:13:20:bc:69:26:52:ec:a4:b7:40:51:8c:76:ce:
1f:0d:a4:fd:1f:5c:dc:b9:2a:8d:10:09:98:1b:30:
8a:6a:2e:b8:a1:a2:5a:f9:f8:0a:43:9b:69:c1:b9:
a7:64:e8:11:01:66:b3:4e:8c:d8:dc:68:56:cb:aa:
60:f7:28:a7:ed:0d:a4:0d:e8:c9:62:e3:4e:28:a6:
62:ac:2f:40:3c:fe:6c:d9:4f:85:d7:91:30:05:6a:
d0:8e:34:14:f3:80:c7:ab:74:da:3e:32:6f:d8:42:
1b:d2:65:0e:cf:52:e2:56:7a:b9:3f:ef:46:d5:81:
8d:9c:20:f5:4c:ba:e0:ad:db:b9:d9:cb:e8:ff:7f:
b1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:50:85:31:60:46:6C:B0:8B:64:19:57:B0:8A:77:F1:9F:5A:ED:41
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/a1CFMWBGbLCLZBlXsIp38Z9a7UE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.105.0/24
Signature Algorithm: sha256WithRSAEncryption
37:29:e8:76:dd:d8:51:a1:73:3d:ee:40:63:e4:39:da:0b:0d:
c6:6e:76:5e:c5:bd:84:af:fd:7f:36:cf:81:bb:b9:e4:d6:5e:
ce:80:f4:53:23:5a:da:af:2a:c0:bd:e9:44:ca:1c:f0:be:27:
1b:7d:f3:f6:01:6e:dd:da:d9:fc:7f:62:e9:b9:fb:f0:26:13:
28:24:02:ae:11:27:27:0c:71:c4:05:c7:f2:82:ff:d1:d8:b6:
c4:89:5c:af:c8:eb:be:65:51:0f:da:b0:a1:c3:1f:c6:fe:f7:
3f:8b:05:a1:89:1a:d8:39:0a:16:ae:e2:b0:be:35:37:64:26:
37:6b:7a:7b:d1:61:46:9d:d6:51:33:c2:ea:23:f9:05:a4:49:
a4:08:e5:2c:57:7a:ef:8b:58:bb:ca:c4:2d:3b:04:64:73:20:
07:13:74:58:f0:5b:2d:62:35:43:e0:16:1e:3a:75:b0:78:4a:
0c:df:86:a1:0b:d8:4d:5f:8f:20:92:8d:e6:35:b4:93:5f:c7:
17:57:e0:d5:f5:2d:c5:17:7d:de:74:7b:ae:c0:99:d1:29:34:
9f:56:61:10:48:94:7a:c5:b7:06:1c:9c:be:12:bf:19:a2:f2:
c9:ba:03:bd:54:5f:be:f1:95:a8:b5:4e:c1:38:c6:7c:9b:10:
28:36:25:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:23 2025 by rpki-client