Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/3_DQ-YNdldpIpVZvEmyoO2xcNzo.roa
File: 3_DQ-YNdldpIpVZvEmyoO2xcNzo.roa (raw, json)
Hash identifier: ZacxRu/aTw7igdwdzaYDwarwHvBUG+ZJz/iUouWFWbs=
Subject key identifier: DF:F0:D0:F9:83:5D:95:DA:48:A5:56:6F:12:6C:A8:3B:6C:5C:37:3A
Certificate issuer: /CN=45c491362b2e386197b9a0746124288bc0bcf031
Certificate serial: 0184F845E273CADFBCF3E2C22D123CD487B7
Authority key identifier: 45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/3_DQ-YNdldpIpVZvEmyoO2xcNzo.roa
Signing time: Fri 09 Dec 2022 19:04:00 +0000
ROA not before: Fri 09 Dec 2022 19:04:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.93.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f8:45:e2:73:ca:df:bc:f3:e2:c2:2d:12:3c:d4:87:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c491362b2e386197b9a0746124288bc0bcf031
Validity
Not Before: Dec 9 19:04:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dff0d0f9835d95da48a5566f126ca83b6c5c373a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:88:43:b9:ee:a4:5f:c0:87:ee:08:9f:a9:f4:
e2:bc:b6:e6:af:35:3e:29:61:69:f6:d2:a0:59:10:
59:80:a3:4e:77:64:94:2b:c7:dc:cf:2e:59:5e:61:
b1:f2:49:ba:eb:bd:9a:48:c1:26:33:82:d1:c5:1e:
34:bb:64:c9:b0:01:55:86:45:07:fd:2a:b3:35:78:
b8:38:76:2e:f7:fc:8f:bc:da:be:49:58:c9:b1:5f:
77:23:c1:ae:49:40:a1:a5:43:52:08:78:2b:33:f6:
06:a2:49:07:c2:7f:0c:70:b1:6c:de:04:6f:05:61:
56:06:54:f2:a5:e8:f8:32:2c:fa:b8:a5:ce:5d:95:
86:99:8e:6b:e5:51:d9:ef:94:a8:76:ed:ac:94:c7:
03:b7:98:b7:23:96:ba:18:1e:58:87:d0:25:65:9a:
e8:31:4b:15:c3:3c:60:5c:42:b8:34:1e:80:55:0e:
1a:a8:cf:e1:0b:3e:a1:a4:a3:3a:79:df:e8:0c:3a:
85:4c:cd:30:12:a6:18:93:28:77:a5:a0:db:35:50:
79:93:0a:14:16:a9:ad:42:f3:16:45:5a:92:55:af:
d3:55:e9:38:c0:4b:35:8c:62:93:76:49:3c:e2:84:
f0:0a:58:da:1a:ab:a2:2a:26:4c:dc:f1:b6:7d:af:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F0:D0:F9:83:5D:95:DA:48:A5:56:6F:12:6C:A8:3B:6C:5C:37:3A
X509v3 Authority Key Identifier:
keyid:45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/3_DQ-YNdldpIpVZvEmyoO2xcNzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/RcSRNisuOGGXuaB0YSQoi8C88DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.81.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:52:df:c4:ed:f8:de:57:d9:06:d2:3f:b6:86:cd:5f:df:9e:
a6:cd:43:d7:6f:9b:e7:b8:dd:0b:48:61:a3:b0:4f:94:af:18:
2f:31:9b:c8:e7:f0:2d:94:f1:b7:eb:06:c8:25:24:52:0e:6f:
57:9a:0f:d2:bc:eb:87:02:f0:0f:bf:13:04:b7:04:16:57:22:
80:8f:1c:f0:cf:91:59:0b:3c:7c:5c:d0:a6:68:4f:df:9e:5d:
bd:78:19:ae:99:0e:c6:aa:93:8d:3e:c8:e1:26:1f:90:f9:e9:
16:53:84:b6:df:d7:ce:1c:be:3d:cd:fa:a9:66:86:e6:fb:c1:
96:f7:9c:f0:4c:f6:75:ce:c4:0e:0f:cf:32:7b:e5:cf:a2:bb:
ce:4d:22:62:4f:98:de:bf:08:ac:6a:40:3c:88:32:fb:36:32:
06:a5:6a:f4:2c:bf:da:93:a4:a1:9a:78:e0:50:b3:83:f9:12:
1a:e6:12:e1:95:23:28:79:43:a8:67:d9:f8:24:90:5a:73:57:
e1:fe:79:84:f6:e4:8c:9d:4e:95:45:2a:46:b7:da:03:eb:c4:
87:9c:0e:62:82:ad:5a:e7:47:f3:76:6a:e1:c0:35:53:cc:88:
a4:89:78:e8:13:6d:d7:7e:2a:55:96:93:c3:de:93:aa:1b:18:
f5:2d:3b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:45 2025 by rpki-client