Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ab056-4bbe-484a-9352-8ac58f273756/1/1-fTNK81zhSiYfiPidXggblD9GPc.roa
File: 1-fTNK81zhSiYfiPidXggblD9GPc.roa (raw, json)
Hash identifier: D9BadVPlLX4m+0iqdtjRrMUpMki3byNndr7U205lLTQ=
Subject key identifier: F9:F4:CD:2B:CD:73:85:28:98:7E:23:E2:75:78:20:6E:50:FD:18:F7
Certificate issuer: /CN=307e7e276a7df580dfb70731d489ede447e07d06
Certificate serial: 040CF4DE
Authority key identifier: 30:7E:7E:27:6A:7D:F5:80:DF:B7:07:31:D4:89:ED:E4:47:E0:7D:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH5-J2p99YDftwcx1Int5EfgfQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ab056-4bbe-484a-9352-8ac58f273756/1/1-fTNK81zhSiYfiPidXggblD9GPc.roa
Signing time: Sat 01 Jan 2022 08:58:18 +0000
ROA not before: Sat 01 Jan 2022 08:58:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29423
IP address blocks: 45.144.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67957982 (0x40cf4de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307e7e276a7df580dfb70731d489ede447e07d06
Validity
Not Before: Jan 1 08:58:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9f4cd2bcd738528987e23e27578206e50fd18f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5f:8d:84:88:3c:eb:07:36:6f:42:8f:1d:92:
d3:03:d3:42:55:eb:c2:29:8c:81:42:81:12:43:62:
de:a4:ce:b8:32:27:78:6f:c8:61:35:75:35:de:92:
af:94:92:f6:ad:5f:81:13:be:f0:46:4b:40:0a:82:
5f:bb:66:7f:a9:4c:4e:ad:b2:05:01:a6:8c:60:c6:
f8:e2:91:e3:5b:41:50:fe:ee:da:18:ab:1c:30:6f:
af:4f:1b:65:e1:87:1f:eb:d4:3d:2d:d5:b8:c9:59:
52:fd:df:73:5c:7d:99:d0:5e:84:a4:8d:a9:dd:5e:
5b:3a:07:04:c7:a3:30:12:40:36:c7:e1:97:fe:f8:
f9:16:08:d0:97:2f:ca:19:78:dd:3a:dd:1c:13:6e:
b6:8b:7a:b9:07:f6:57:9c:82:f9:86:eb:2a:7c:ec:
c1:2c:dd:bb:88:00:59:01:69:27:0b:42:de:b8:d3:
c8:32:d3:0c:f4:2a:88:b8:73:67:09:24:6f:e0:8e:
92:86:b2:60:0f:55:a8:9f:49:c3:05:a2:36:d2:75:
22:25:2e:cb:61:c5:3b:fb:b6:dd:e8:04:39:69:5e:
9a:07:67:0c:b2:b5:8f:aa:63:02:5f:b1:98:8a:20:
73:34:ad:40:1a:9a:b7:2b:11:4b:11:d3:2d:9a:c6:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F4:CD:2B:CD:73:85:28:98:7E:23:E2:75:78:20:6E:50:FD:18:F7
X509v3 Authority Key Identifier:
keyid:30:7E:7E:27:6A:7D:F5:80:DF:B7:07:31:D4:89:ED:E4:47:E0:7D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH5-J2p99YDftwcx1Int5EfgfQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ab056-4bbe-484a-9352-8ac58f273756/1/1-fTNK81zhSiYfiPidXggblD9GPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ab056-4bbe-484a-9352-8ac58f273756/1/MH5-J2p99YDftwcx1Int5EfgfQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.132.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:22:3f:84:f3:60:12:fb:7d:e0:d4:cf:10:27:0a:d2:8d:c9:
33:71:8a:99:25:58:6b:b5:b9:31:3d:dc:87:44:8a:72:46:e8:
f0:61:69:64:7e:e3:19:fa:1a:42:93:e1:7a:cf:c5:dd:e7:1c:
27:9a:9a:8e:0d:ad:97:77:cb:7f:7d:f4:88:dd:be:2e:85:fa:
de:1a:97:7f:ec:b9:c9:d1:60:45:52:67:01:d8:07:f5:3f:fe:
be:79:77:b0:3a:54:63:d1:68:7b:5d:2e:39:e5:d9:73:cb:b6:
7f:53:8a:b1:e1:0f:85:e4:93:29:8a:8d:9b:8f:9d:72:9f:62:
00:70:32:27:1b:48:ef:39:a6:09:13:cb:63:49:c5:c2:7e:1c:
9b:bd:12:e7:2f:75:e3:dc:63:f9:78:0e:78:4b:90:ce:6f:01:
f5:ec:24:a7:d2:f7:58:17:eb:86:c2:e8:af:7e:37:48:bf:45:
1d:79:60:ef:8e:0b:65:36:c2:63:a8:e4:33:83:5e:5e:4e:a2:
22:5c:bd:dd:c5:e5:6e:9e:d3:02:c6:06:4e:88:b0:db:e4:6f:
8d:d4:9d:d4:74:7b:7e:8e:98:e5:77:ff:9a:8e:e9:6f:c1:b9:
da:6a:71:5f:eb:90:0e:af:0f:51:a0:fe:37:71:19:ea:80:fc:
50:76:47:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:26 2025 by rpki-client