Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/rDLRuJy1EDdbFS3x_3pSCjbKAXI.roa
File: rDLRuJy1EDdbFS3x_3pSCjbKAXI.roa (raw, json)
Hash identifier: Afp5fMLeHBmGFsi/EDiJ9iBR/uys9pOMXpUbLHhzm+I=
Subject key identifier: AC:32:D1:B8:9C:B5:10:37:5B:15:2D:F1:FF:7A:52:0A:36:CA:01:72
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01842F7AD13246B651C0B2A33E778E2B1304
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/rDLRuJy1EDdbFS3x_3pSCjbKAXI.roa
Signing time: Mon 31 Oct 2022 19:18:08 +0000
ROA not before: Mon 31 Oct 2022 19:18:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 147176
IP address blocks: 45.132.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2f:7a:d1:32:46:b6:51:c0:b2:a3:3e:77:8e:2b:13:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Oct 31 19:18:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac32d1b89cb510375b152df1ff7a520a36ca0172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9d:09:2a:22:d5:9a:4d:3b:6d:75:a9:63:fb:
cb:b3:bd:c0:df:5b:0d:9c:db:b6:b7:01:90:02:ad:
83:5c:be:8a:7b:78:1f:9f:60:1f:93:a0:a2:16:0a:
0e:7e:3c:8a:5b:59:58:92:3c:6d:cd:ad:76:39:59:
3a:55:4e:fc:07:be:66:c7:70:2b:28:45:d9:ed:51:
91:19:94:9b:89:b1:a7:00:3b:73:c2:f1:e4:60:ea:
9c:26:14:71:4a:1e:73:ec:09:42:23:b0:3b:59:31:
86:b4:f7:bc:4a:99:a5:f8:6b:23:38:d7:c6:5b:42:
25:35:5a:d7:f9:3a:80:7a:69:36:6c:1f:6e:f1:1e:
79:3b:5c:85:01:dd:c7:13:7d:ba:c4:d4:0d:63:46:
75:25:32:90:9c:63:7a:1b:36:f2:ac:9e:43:e9:59:
2f:b1:63:04:0d:b9:42:c7:5a:04:da:27:b7:ac:3a:
97:3e:b8:27:61:77:e5:eb:3b:7f:18:eb:1b:9c:26:
39:50:48:9e:92:08:fd:4e:74:0c:c0:78:7d:9f:7c:
8e:7f:4e:79:b6:36:ce:af:3d:95:da:74:3f:84:9a:
10:17:ae:06:ad:e1:77:d2:88:ee:ff:1c:7a:93:8b:
71:a6:38:22:02:c0:b1:9e:fa:da:5f:72:93:22:73:
de:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:32:D1:B8:9C:B5:10:37:5B:15:2D:F1:FF:7A:52:0A:36:CA:01:72
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/rDLRuJy1EDdbFS3x_3pSCjbKAXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.99.0/24
Signature Algorithm: sha256WithRSAEncryption
22:da:e7:39:b7:05:e8:b8:d8:37:f0:d6:68:7b:ab:3d:e3:60:
d4:12:a9:3c:c1:f9:54:7d:db:38:88:1e:9e:fa:ec:cc:6d:2f:
a4:d0:10:45:a2:7e:43:bb:85:ea:f3:e5:cd:45:76:99:4b:90:
1c:72:6b:ce:eb:a9:5a:8f:85:7f:3e:80:0b:e3:c6:d3:01:cd:
8f:24:41:af:eb:d5:24:a3:db:19:69:fa:b8:b3:49:16:de:56:
5c:33:19:c9:3a:e4:74:ab:00:e4:b0:80:27:cc:51:69:91:3f:
95:0b:28:28:37:55:a4:d0:61:64:89:f6:21:85:3d:f3:42:e6:
f1:2b:ee:ea:08:10:1a:da:cb:a5:b3:89:81:cc:41:3a:d6:05:
8f:87:e2:bd:9b:6f:9e:ba:b2:31:dd:d1:89:59:ff:47:b2:86:
98:b6:0c:d2:e5:b8:bc:c9:3a:7d:7e:9e:a7:6f:c1:45:55:5f:
fb:b7:bd:94:5b:46:9e:ad:a9:8c:62:b9:46:b3:41:4b:d8:5c:
cc:87:c0:e2:32:96:78:00:c1:d2:74:71:66:fd:98:b7:f0:56:
35:9d:4a:56:2c:9e:fd:11:9d:2c:26:f3:42:9c:ce:52:78:c9:
cb:6e:46:3c:01:66:2a:f0:ff:97:04:9b:26:bc:d1:f5:76:e9:
1a:94:ca:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:38:54 2025 by rpki-client