Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/297441-3e45-4793-b6a8-b39bd481efa0/1/czbHIZoL7cvcF6tm4naqQOg6IIU.roa
File: czbHIZoL7cvcF6tm4naqQOg6IIU.roa (raw, json)
Hash identifier: WKWCcdPflbyXkMENW56lb/JUYfxY7l+F60DKbOtNF/c=
Subject key identifier: 73:36:C7:21:9A:0B:ED:CB:DC:17:AB:66:E2:76:AA:40:E8:3A:20:85
Certificate issuer: /CN=eda6065e3f7ab083591030d3b550d73df46338e3
Certificate serial: 0182DE75A9F40B0A71DBBD603E4F18327E96
Authority key identifier: ED:A6:06:5E:3F:7A:B0:83:59:10:30:D3:B5:50:D7:3D:F4:63:38:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7aYGXj96sINZEDDTtVDXPfRjOOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/297441-3e45-4793-b6a8-b39bd481efa0/1/czbHIZoL7cvcF6tm4naqQOg6IIU.roa
Signing time: Sat 27 Aug 2022 08:40:29 +0000
ROA not before: Sat 27 Aug 2022 08:40:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 45.9.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:de:75:a9:f4:0b:0a:71:db:bd:60:3e:4f:18:32:7e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eda6065e3f7ab083591030d3b550d73df46338e3
Validity
Not Before: Aug 27 08:40:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7336c7219a0bedcbdc17ab66e276aa40e83a2085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:76:3d:59:71:96:b6:8e:57:5c:b7:ed:9f:45:
73:ab:21:5e:8a:5c:55:d5:f5:95:84:f5:c5:ec:6f:
40:4e:4a:ac:c0:47:6b:4e:00:b5:84:12:7b:72:00:
c9:2d:c8:2c:4f:2a:8e:84:04:b9:05:10:18:fa:5b:
62:2d:23:2e:a5:67:f9:fa:b5:c0:ce:e9:1d:f2:d2:
4d:1d:91:d0:e9:ca:f2:b0:36:f3:c0:d0:e9:3d:52:
44:68:a3:44:aa:6e:b3:d8:57:2e:18:22:fc:ed:a4:
8a:87:e2:79:14:5a:88:51:1e:8c:a5:d9:1c:e2:00:
fb:f9:ce:04:06:2c:47:14:e1:51:10:d7:ed:26:74:
ce:ea:49:bb:95:b1:13:e3:d5:43:53:d0:8d:88:7e:
86:17:45:98:dd:44:1d:1b:1b:0e:83:4e:a1:3c:07:
07:26:35:76:ae:83:a8:42:78:08:c3:cc:c0:c8:7a:
da:4e:a5:69:0a:0f:70:e8:eb:9e:93:bc:fe:5e:86:
3e:13:be:35:a3:6c:54:3e:77:53:0c:c0:d9:1a:10:
6d:e0:96:49:4c:6a:d3:aa:06:8f:3b:40:2a:23:89:
93:12:d8:fd:f2:ec:03:89:78:09:55:32:99:ee:59:
b4:2c:20:0b:c2:8c:4a:d4:21:41:0d:24:52:bb:c6:
96:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:36:C7:21:9A:0B:ED:CB:DC:17:AB:66:E2:76:AA:40:E8:3A:20:85
X509v3 Authority Key Identifier:
keyid:ED:A6:06:5E:3F:7A:B0:83:59:10:30:D3:B5:50:D7:3D:F4:63:38:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7aYGXj96sINZEDDTtVDXPfRjOOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/297441-3e45-4793-b6a8-b39bd481efa0/1/czbHIZoL7cvcF6tm4naqQOg6IIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/297441-3e45-4793-b6a8-b39bd481efa0/1/7aYGXj96sINZEDDTtVDXPfRjOOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.208.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:56:41:6f:b3:49:50:80:cb:dd:09:c7:ae:ff:a9:a3:51:4f:
d9:2e:24:a9:36:c0:4c:77:98:6b:10:4b:53:9f:ee:86:f9:e1:
32:fc:17:f5:f2:cb:fc:67:cf:87:9a:6f:c5:b6:6c:d3:c6:36:
cc:3f:5a:b9:57:7a:5a:21:91:74:0b:cf:3b:9e:52:f4:fe:cd:
52:33:df:a5:93:03:c4:b5:a2:87:de:ec:7a:4f:4d:3d:34:b7:
ad:49:dc:73:8d:0e:70:84:58:0d:93:29:58:ad:54:8a:17:0d:
2d:2b:0c:5f:1a:56:5c:86:4f:14:9c:66:00:0e:5c:0a:52:eb:
23:5e:bb:06:2c:92:11:ff:b2:2a:bb:a3:04:44:9e:fb:d4:5b:
5b:df:93:8e:20:f9:5e:82:bf:7c:52:db:5b:dc:43:f5:69:0e:
42:13:88:4d:28:b8:68:a9:1d:d9:cb:6f:2d:fe:58:3a:85:46:
79:b0:6a:df:58:cb:ca:03:52:80:e9:b9:86:91:cf:cd:95:50:
84:5b:43:ed:db:3a:f6:be:64:60:3a:c9:cb:97:d0:0f:27:51:
85:36:d3:55:d8:c6:7b:b5:f2:83:b9:50:32:83:f5:bc:d8:b2:
6a:eb:2c:71:7e:24:29:30:a9:b3:e6:99:1c:1a:b5:1e:f0:a7:
5e:04:70:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:44 2025 by rpki-client