Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/obcEq4cXIvoJ2fAu-81v0CIvc_A.roa
File: obcEq4cXIvoJ2fAu-81v0CIvc_A.roa (raw, json)
Hash identifier: 4Xrr+HKzfLOsGRABJIFyL2EXrNvPhGiWhzGUUHJq08c=
Subject key identifier: A1:B7:04:AB:87:17:22:FA:09:D9:F0:2E:FB:CD:6F:D0:22:2F:73:F0
Certificate issuer: /CN=45c491362b2e386197b9a0746124288bc0bcf031
Certificate serial: 0188542E103BC87883FC7AB8E08F0C79F049
Authority key identifier: 45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/obcEq4cXIvoJ2fAu-81v0CIvc_A.roa
Signing time: Thu 25 May 2023 18:31:24 +0000
ROA not before: Thu 25 May 2023 18:31:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202656
IP address blocks: 45.15.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:54:2e:10:3b:c8:78:83:fc:7a:b8:e0:8f:0c:79:f0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c491362b2e386197b9a0746124288bc0bcf031
Validity
Not Before: May 25 18:31:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1b704ab871722fa09d9f02efbcd6fd0222f73f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:26:b3:11:5b:96:68:91:26:81:bd:1d:22:dc:
46:6a:a2:85:aa:a3:d2:ba:44:a9:8c:b0:09:4c:2b:
8c:9e:cf:13:09:44:10:5a:0e:2e:ca:6c:0a:fb:9e:
5c:c5:8e:56:b4:c2:38:0f:ce:a1:ce:f2:3f:31:c7:
b8:98:78:13:53:fd:48:c7:0e:49:ca:e4:37:2b:95:
df:25:74:5f:df:76:96:5d:b9:16:fc:6f:20:54:39:
1c:6b:6a:ee:85:8a:5c:6e:74:63:6a:e6:2e:0c:ad:
9b:a0:09:f5:fb:89:40:48:f4:67:db:fe:de:65:ce:
ed:b0:06:38:0d:e0:7c:4a:13:0d:33:17:9e:b4:fe:
e7:f4:7c:f1:14:82:8e:44:db:9e:46:13:c1:0b:60:
2f:3d:5d:ca:a8:73:7c:5f:11:7c:ae:fe:18:b7:5f:
6e:e0:58:a9:c6:91:9f:3f:eb:08:fd:37:a0:ad:d4:
cd:8f:62:61:83:32:0a:bc:5d:4c:c9:96:fd:59:42:
90:ea:58:cf:60:89:b0:f1:89:85:62:d2:eb:a2:33:
94:58:d7:cb:db:02:f3:06:ee:ce:63:2e:65:49:0e:
ba:4b:60:05:ad:47:10:fd:27:09:23:2d:08:5b:7d:
a4:5b:38:71:3b:54:65:ea:36:f8:86:51:24:62:cb:
e2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B7:04:AB:87:17:22:FA:09:D9:F0:2E:FB:CD:6F:D0:22:2F:73:F0
X509v3 Authority Key Identifier:
keyid:45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/obcEq4cXIvoJ2fAu-81v0CIvc_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/RcSRNisuOGGXuaB0YSQoi8C88DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.239.0/24
Signature Algorithm: sha256WithRSAEncryption
45:49:b3:c5:d7:a9:3e:16:45:b3:3b:4d:02:05:d5:fe:b7:23:
b9:9c:0a:42:17:c3:d2:ef:0d:d6:91:29:fd:90:5b:ae:d1:4f:
33:b6:75:48:36:04:ac:40:64:a4:75:fa:61:48:46:b8:04:d3:
bd:7a:60:33:36:2e:ba:d7:69:c2:ff:fc:85:e5:c1:58:98:31:
c3:c1:23:b7:86:59:e4:bb:44:66:01:d6:46:86:ae:ee:0b:d0:
15:dc:b5:df:0b:2e:af:49:14:4c:be:89:c1:a3:eb:24:82:fd:
f4:89:ab:1f:e1:33:52:09:e5:5d:3f:f5:7d:7b:5a:e1:4e:ac:
59:5b:2f:4f:4d:dc:91:34:0d:f4:ee:c8:ae:6f:89:4b:7d:2f:
c4:8b:42:cb:b5:b9:bb:e9:53:b3:6c:6b:c1:d2:e5:1a:63:74:
65:e2:2f:e5:3c:92:4a:48:00:d5:c4:d2:50:c8:bc:0c:8c:f7:
2b:b1:d2:e1:8d:71:4e:3d:3e:22:1e:4a:b6:fd:f0:c6:97:d6:
d6:ba:34:15:18:8a:25:7b:37:d7:b4:44:29:ce:3c:a9:b3:0d:
7f:c8:6c:50:1c:06:6f:6a:0a:21:0c:f8:56:c5:a6:69:a9:3a:
79:2c:15:bd:cb:ba:6d:3d:6e:0c:e0:f9:f2:06:4b:a8:66:e6:
4f:f4:cd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:09:03 2025 by rpki-client