Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/73d43a-738a-4261-b5b1-293420b1eb98/1/ruLgc497tjnhBqBeAlFjzNcfdWs.roa
File: ruLgc497tjnhBqBeAlFjzNcfdWs.roa (raw, json)
Hash identifier: lKhztkrykJ+HggXrCbsyIjilNv5WiZzS0kbRMB6xv1w=
Subject key identifier: AE:E2:E0:73:8F:7B:B6:39:E1:06:A0:5E:02:51:63:CC:D7:1F:75:6B
Certificate issuer: /CN=f6bbebb55a2d22585aaf20e62f5f0d245f9aa158
Certificate serial: 05F0AF3F
Authority key identifier: F6:BB:EB:B5:5A:2D:22:58:5A:AF:20:E6:2F:5F:0D:24:5F:9A:A1:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rvrtVotIlharyDmL18NJF-aoVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/73d43a-738a-4261-b5b1-293420b1eb98/1/ruLgc497tjnhBqBeAlFjzNcfdWs.roa
Signing time: Sat 01 Jan 2022 05:05:52 +0000
ROA not before: Sat 01 Jan 2022 05:05:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42156
IP address blocks: 45.83.172.0/22 maxlen: 24
2a0e:8480::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99659583 (0x5f0af3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bbebb55a2d22585aaf20e62f5f0d245f9aa158
Validity
Not Before: Jan 1 05:05:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aee2e0738f7bb639e106a05e025163ccd71f756b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:57:b1:cb:69:69:9e:38:48:9c:98:8e:3f:46:
a0:dc:cb:2c:9a:78:c6:32:2f:3f:b8:e7:30:28:49:
8b:b9:a7:3c:03:ea:28:97:76:f7:63:0d:7d:3c:83:
2e:09:8a:c1:57:b8:ab:8c:4c:bd:5b:a0:21:34:e4:
49:b6:76:a3:33:03:0c:3a:6d:ff:95:99:52:fa:6f:
6c:68:a9:cf:93:9e:d1:f2:49:21:43:83:0b:c8:b5:
83:93:41:51:43:6d:7e:c7:a2:72:f9:ee:aa:95:91:
a2:5c:21:6d:68:b3:21:b9:23:1a:8b:7a:10:c7:be:
13:bf:2c:ac:23:9b:fa:d4:09:a9:c8:b2:dc:5b:f8:
da:84:ec:5d:09:5e:f3:1b:3d:b5:88:73:37:1f:eb:
5c:7f:63:fd:73:24:b1:52:c5:16:9c:8a:93:a6:f6:
d9:93:72:76:8b:87:f0:7d:e4:8e:0a:d7:25:0a:2f:
99:cc:5a:e4:bb:d1:f5:0b:39:5e:cb:06:b9:1a:d6:
4c:c2:b6:40:80:7b:08:98:10:e3:3c:8b:af:0e:bc:
11:92:10:44:35:19:3a:2b:ea:32:d3:d2:b2:94:2b:
4e:ef:89:15:9f:23:51:72:e3:1d:46:0f:37:e7:f7:
4a:de:5d:30:ca:84:c1:1f:30:0b:ba:be:c4:9f:f6:
68:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E2:E0:73:8F:7B:B6:39:E1:06:A0:5E:02:51:63:CC:D7:1F:75:6B
X509v3 Authority Key Identifier:
keyid:F6:BB:EB:B5:5A:2D:22:58:5A:AF:20:E6:2F:5F:0D:24:5F:9A:A1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rvrtVotIlharyDmL18NJF-aoVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/73d43a-738a-4261-b5b1-293420b1eb98/1/ruLgc497tjnhBqBeAlFjzNcfdWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/73d43a-738a-4261-b5b1-293420b1eb98/1/9rvrtVotIlharyDmL18NJF-aoVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.172.0/22
IPv6:
2a0e:8480::/29
Signature Algorithm: sha256WithRSAEncryption
cc:93:6b:08:18:3c:5e:2b:bb:ca:4b:f5:45:f1:80:56:28:ce:
11:92:1c:19:9c:a8:c6:35:d1:79:2f:ed:e7:40:f9:bd:70:cf:
39:e5:c0:a6:a2:e5:b6:59:42:e5:2b:cc:e7:74:7d:0d:c7:c7:
96:70:ca:37:85:6f:2d:cc:a2:1c:1d:16:24:2d:58:29:8e:1c:
6b:ed:f5:04:92:f1:fe:06:68:3b:d1:5f:f5:c3:db:20:84:9f:
dd:c9:aa:07:9f:fe:20:9a:d5:b6:39:3a:14:03:2a:4c:3e:a0:
79:38:3c:ae:df:59:5f:c9:4c:ed:e7:cc:81:80:92:40:fc:5e:
1f:ce:02:66:67:32:57:0a:c7:d5:cd:a5:14:3e:7f:55:94:8c:
9d:d5:10:43:aa:38:fd:59:9b:62:79:1d:b8:73:f1:c4:96:d6:
1f:3a:67:29:74:85:89:77:f3:cb:4b:28:c2:37:6d:18:c5:0a:
e1:7a:45:04:0c:22:26:9b:78:e3:75:fa:c2:fc:4e:a1:15:d8:
0a:91:47:aa:e1:ed:9f:e2:4e:3c:dc:e9:e8:f3:c3:3e:e2:7c:
2f:01:a0:13:02:62:9a:6b:81:26:f8:99:fd:17:45:ca:b6:f4:
2b:01:ef:77:4a:8e:8b:26:0e:0f:f9:8d:be:a5:ce:19:4b:bc:
11:c0:b6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:51 2025 by rpki-client