Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/dkzSloFAmXBg_NwkciBUGFU4h0I.roa
File: dkzSloFAmXBg_NwkciBUGFU4h0I.roa (raw, json)
Hash identifier: 3nwtIFyFsmnk0rEdfRSh2rZNd4o9EtcD8NJ1ilBWOSE=
Subject key identifier: 76:4C:D2:96:81:40:99:70:60:FC:DC:24:72:20:54:18:55:38:87:42
Certificate issuer: /CN=45c491362b2e386197b9a0746124288bc0bcf031
Certificate serial: 01896499DAA64AA1696914D366E63CFEAF45
Authority key identifier: 45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/dkzSloFAmXBg_NwkciBUGFU4h0I.roa
Signing time: Mon 17 Jul 2023 16:05:51 +0000
ROA not before: Mon 17 Jul 2023 16:05:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 45.11.23.0/24 maxlen: 24
88.218.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:99:da:a6:4a:a1:69:69:14:d3:66:e6:3c:fe:af:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c491362b2e386197b9a0746124288bc0bcf031
Validity
Not Before: Jul 17 16:05:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=764cd2968140997060fcdc247220541855388742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f1:f7:b8:58:9c:88:11:f2:4c:83:a0:a6:61:
e3:d2:b4:14:46:6b:4e:64:1d:d8:ae:9a:6c:32:fd:
88:e0:93:4e:8b:5b:ca:fe:23:5a:60:80:04:e3:0f:
01:7b:ed:7a:c2:32:06:57:36:ae:08:d2:ff:21:9e:
7d:f7:9e:a6:c4:82:b8:14:b6:5d:5d:aa:f2:9c:69:
f0:c4:2f:64:72:b6:93:c2:6a:32:8e:81:4f:00:50:
87:e1:16:04:b3:70:0f:f7:d8:8f:31:39:c4:0c:fc:
e8:1d:0a:f6:a2:80:a0:f1:3a:cd:61:03:c3:cd:72:
a4:3c:99:11:8b:2b:eb:d4:ca:c7:46:b7:12:b8:ce:
9c:6c:4a:97:71:10:c0:fc:66:a4:56:d3:07:45:72:
32:fe:1f:09:cd:49:6b:14:26:c9:e2:c5:41:df:14:
83:85:da:ef:fd:6a:e5:bb:a1:ef:4c:af:fc:60:bf:
f7:88:5f:2d:3e:8c:7e:0d:ff:a2:42:9c:b5:e9:71:
43:22:a0:99:12:c3:ea:7b:42:e1:a5:38:fd:39:89:
51:d5:68:67:bf:34:4a:2f:12:83:f1:5b:f4:2f:72:
e3:39:2d:b5:a5:5b:df:bb:f0:92:d3:70:a3:2a:ff:
3f:42:b6:3f:fc:2f:18:c1:57:fe:c6:f9:6c:95:0c:
86:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4C:D2:96:81:40:99:70:60:FC:DC:24:72:20:54:18:55:38:87:42
X509v3 Authority Key Identifier:
keyid:45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/dkzSloFAmXBg_NwkciBUGFU4h0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/RcSRNisuOGGXuaB0YSQoi8C88DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.23.0/24
88.218.64.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:cd:1d:99:c0:d7:7c:d5:08:91:c1:d2:b9:f6:48:be:11:b5:
32:ec:ca:2b:d1:b8:4e:29:4d:39:f5:59:f6:eb:73:c6:4c:3e:
10:84:66:55:86:2f:50:0b:59:09:97:6b:bd:75:db:52:91:5e:
aa:1d:81:b4:02:85:66:3a:4c:3e:09:76:51:25:b8:7c:ae:2d:
58:9c:8c:09:4f:f9:d8:32:a3:02:40:3d:04:26:71:fc:e8:01:
97:94:e5:8b:f4:4b:32:fa:60:9a:56:df:54:72:ce:43:2a:5f:
dc:68:7f:ae:fe:e0:02:0a:cc:3b:3c:d1:44:16:b4:59:6c:b3:
70:99:d1:a5:b6:6b:cd:4d:59:04:2b:27:27:a7:ff:41:e9:1a:
22:36:e7:e2:d4:8f:46:01:e8:d4:fd:1e:35:e2:5f:f8:7d:36:
55:65:75:54:af:00:c2:60:e8:0b:52:02:d6:ae:19:f0:1a:bd:
59:e9:e7:91:5d:0b:23:f8:10:09:be:f4:a6:36:99:e0:24:5f:
25:5e:f0:7a:da:dd:46:22:8d:15:be:6e:0c:aa:46:ee:4b:89:
d6:af:70:55:89:62:f9:9f:e5:45:84:62:5d:f1:b5:e7:2f:7e:
5b:67:df:1e:ae:ed:da:a5:98:e0:94:fc:6d:18:00:3c:21:e2:
fb:49:eb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:43 2025 by rpki-client