Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c30960-92f0-46c5-8f4e-8b61b417c328/1/7tLuVkINmOTU9junbtTvqCTezPo.roa
File: 7tLuVkINmOTU9junbtTvqCTezPo.roa (raw, json)
Hash identifier: O/KcQ8dOvMvWpQJXY+OWTfkY/VjK/00gA/Xry4WFcNI=
Subject key identifier: EE:D2:EE:56:42:0D:98:E4:D4:F6:3B:A7:6E:D4:EF:A8:24:DE:CC:FA
Certificate issuer: /CN=c3f1c2d3d9e46341d0a27f05584ad1b0fcba3e40
Certificate serial: 079A7235
Authority key identifier: C3:F1:C2:D3:D9:E4:63:41:D0:A2:7F:05:58:4A:D1:B0:FC:BA:3E:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_HC09nkY0HQon8FWErRsPy6PkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c30960-92f0-46c5-8f4e-8b61b417c328/1/7tLuVkINmOTU9junbtTvqCTezPo.roa
Signing time: Sat 01 Jan 2022 00:55:30 +0000
ROA not before: Sat 01 Jan 2022 00:55:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208364
IP address blocks: 45.132.8.0/22 maxlen: 24
2a0e:6540::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127562293 (0x79a7235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3f1c2d3d9e46341d0a27f05584ad1b0fcba3e40
Validity
Not Before: Jan 1 00:55:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eed2ee56420d98e4d4f63ba76ed4efa824deccfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:b0:ea:57:13:73:7f:2b:cb:8c:8b:b8:fa:
f4:1c:e8:63:89:e6:ad:19:f9:e4:c8:e7:68:75:13:
04:2e:37:ec:b5:26:b1:80:c3:0e:19:6d:b9:3c:d9:
a4:38:2d:37:37:7e:5b:d6:5f:f2:b5:30:7b:8c:a6:
5e:c8:65:00:94:fc:9c:df:92:65:1d:2c:40:48:75:
3c:36:32:a7:e3:35:e2:6c:3f:a5:1a:fe:31:d9:df:
f1:6d:89:a3:1a:17:30:ab:c8:93:af:01:3d:72:1c:
71:66:37:5d:18:a4:f6:9a:67:ec:74:ae:3b:01:2a:
a3:bf:7b:aa:78:23:f3:a5:d1:b8:8c:5e:ea:bd:1a:
42:71:6f:59:bd:d2:4b:74:62:66:2d:fa:ef:54:18:
e3:b6:2a:34:5e:53:21:a5:fa:aa:e7:aa:14:38:51:
70:d7:2d:b0:dd:bf:e8:d7:fa:cd:59:37:af:58:b0:
52:ae:b7:c7:92:a4:65:5f:38:be:2b:5c:b2:3e:31:
f1:9a:2f:aa:d3:5a:85:42:40:4d:f0:28:5b:37:0f:
9e:fa:81:a1:88:62:09:e8:b0:65:76:6e:8f:e0:9a:
56:25:b7:6b:0d:b2:b6:d5:14:8c:90:8d:5b:7a:99:
97:11:b0:98:80:e1:40:41:ae:2c:4b:dd:87:b2:a9:
21:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D2:EE:56:42:0D:98:E4:D4:F6:3B:A7:6E:D4:EF:A8:24:DE:CC:FA
X509v3 Authority Key Identifier:
keyid:C3:F1:C2:D3:D9:E4:63:41:D0:A2:7F:05:58:4A:D1:B0:FC:BA:3E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_HC09nkY0HQon8FWErRsPy6PkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c30960-92f0-46c5-8f4e-8b61b417c328/1/7tLuVkINmOTU9junbtTvqCTezPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c30960-92f0-46c5-8f4e-8b61b417c328/1/w_HC09nkY0HQon8FWErRsPy6PkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.8.0/22
IPv6:
2a0e:6540::/29
Signature Algorithm: sha256WithRSAEncryption
24:99:da:0f:8c:87:70:48:4e:66:66:33:17:8a:3c:a8:18:22:
e2:39:92:78:1b:5a:d0:ed:46:3c:79:29:23:99:6e:72:43:2b:
0d:2e:2c:af:08:44:a5:bc:9a:0f:0b:0d:13:2a:7f:2d:8c:d1:
32:75:9e:d8:7b:f8:68:fb:86:a3:a7:a5:8d:c1:97:87:89:52:
e3:26:4a:4b:ac:83:c3:4a:22:c6:32:92:a3:67:72:dd:ca:09:
e9:69:ea:b2:0d:ac:8c:21:bf:6f:4b:c5:d0:33:2c:0b:e4:a3:
f8:91:66:5b:ae:a8:75:7a:46:58:db:ce:1e:c3:43:59:45:ac:
a2:65:2a:24:e9:d7:df:d5:0d:ab:ae:2b:34:1b:5f:97:71:8e:
33:fb:b5:11:b5:e3:e2:41:88:21:11:71:64:08:f8:71:4f:41:
75:2d:ce:75:65:b4:5c:74:28:19:bd:ea:64:5e:39:3f:08:a1:
e2:b6:ec:ec:bd:b6:18:9d:c3:fc:70:1c:ec:e1:c0:3a:a4:97:
2a:c6:b7:1d:59:aa:04:d4:4a:7b:eb:06:ec:e1:45:f5:23:4c:
fd:a4:0a:87:bb:2b:47:60:31:7b:b8:f4:af:f0:79:1f:50:11:
a0:1b:03:ec:60:11:61:9c:e7:51:0f:8f:22:9f:88:9d:e1:2d:
ef:4a:05:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:13 2025 by rpki-client