Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/69A9I3t7YfT1WiRuG_tlEOH2naE.roa
File: 69A9I3t7YfT1WiRuG_tlEOH2naE.roa (raw, json)
Hash identifier: cWIQ1A0IrnXcoYYstwryG9V9prGdhTmc7ZXMr2d7DHE=
Subject key identifier: EB:D0:3D:23:7B:7B:61:F4:F5:5A:24:6E:1B:FB:65:10:E1:F6:9D:A1
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01831623B9DB411DBE745F3542350B791C4C
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/69A9I3t7YfT1WiRuG_tlEOH2naE.roa
Signing time: Wed 07 Sep 2022 04:09:43 +0000
ROA not before: Wed 07 Sep 2022 04:09:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 269749
IP address blocks: 45.158.171.0/24 maxlen: 24
45.158.170.0/23 maxlen: 24
45.158.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:16:23:b9:db:41:1d:be:74:5f:35:42:35:0b:79:1c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Sep 7 04:09:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebd03d237b7b61f4f55a246e1bfb6510e1f69da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:91:24:71:6a:cb:22:13:aa:53:98:a2:86:66:
ed:1e:b3:df:f2:d0:53:3b:a1:df:2e:0f:c0:8d:ef:
fa:06:1d:9c:91:49:24:a8:d2:13:bc:b6:ac:a5:24:
8f:87:dd:7c:5f:6f:af:c5:0c:07:f2:d0:92:02:94:
fd:2d:a0:7b:fd:5d:5d:8d:18:e3:05:a5:d1:41:05:
1a:53:74:15:8c:4e:ed:d5:ca:59:a7:d9:cf:8f:70:
ea:16:60:f7:36:75:39:45:ce:d0:a2:46:0c:7c:62:
92:51:d8:cc:c0:07:5c:41:ff:99:2e:b9:27:f3:83:
ed:29:c4:19:3d:cf:1c:f6:18:1d:02:1f:5b:3b:e9:
09:12:2f:59:8e:57:9a:90:c9:16:12:7c:8d:04:2e:
0f:ae:d7:10:d0:b2:8e:46:eb:8b:15:cb:2a:f4:29:
86:cd:2b:d2:00:a5:7d:94:4a:0b:0a:ea:a4:db:6f:
4a:fc:38:e0:59:e0:97:49:e5:e5:dc:0e:d9:b4:2d:
ec:1f:69:79:6f:d0:e2:65:5d:aa:bf:52:25:c2:fd:
1d:ef:45:a2:dc:1b:61:74:bc:c4:0a:00:ac:da:d7:
0e:e3:f6:37:5d:9e:6d:25:f0:73:69:ed:ee:07:e6:
c7:6a:b0:85:70:76:f0:e6:60:b0:12:e5:68:43:96:
66:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D0:3D:23:7B:7B:61:F4:F5:5A:24:6E:1B:FB:65:10:E1:F6:9D:A1
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/69A9I3t7YfT1WiRuG_tlEOH2naE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.170.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:cf:11:b8:4b:49:d8:53:3b:a4:86:d7:e5:43:7e:c3:05:d2:
4f:a2:f5:93:00:68:4c:66:5c:b6:89:8d:29:9c:0b:74:7a:3c:
99:36:82:b9:3c:c5:f5:fc:df:56:92:ae:b6:b1:a6:3f:80:68:
d3:e7:ab:78:4a:08:b2:a4:a8:c8:28:6b:53:e1:40:d4:9e:55:
bf:86:c6:e0:68:98:00:c4:2c:61:ea:2c:78:71:70:e0:b2:ab:
57:19:d4:5e:6d:be:2e:48:79:6f:78:70:00:b1:20:c3:c8:0f:
11:15:03:bd:b9:e1:a0:1e:02:91:c0:d8:3f:0a:14:fe:2f:8b:
a3:d6:34:0e:d7:8e:78:d0:fe:fd:30:01:c2:b0:ff:c9:cd:a9:
92:c3:16:db:61:aa:4e:97:1f:05:87:a1:f4:af:c2:64:94:63:
6f:03:35:a4:f3:16:7c:1a:6c:8b:c2:d4:39:ae:99:2d:69:20:
fa:61:54:75:08:a0:95:ae:66:d4:e8:d1:4f:04:e2:2a:17:59:
3b:d9:ba:f1:b3:e1:2b:7f:6b:6f:77:54:b0:52:71:7e:9d:50:
5c:60:fd:1f:f7:ca:be:56:3c:be:03:40:a1:22:fd:f5:78:50:
b1:a5:2f:43:26:3c:9c:49:6f:64:c2:d2:21:de:de:bd:3f:c2:
36:1b:ae:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:17 2025 by rpki-client