Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/kQxRJQlhpL4WF3LTUF95dTRofX8.roa
File: kQxRJQlhpL4WF3LTUF95dTRofX8.roa (raw, json)
Hash identifier: eKuHcAoP1XGklXCEx7Kb5TUjtw5kU4ZJ+0RBrQTs+zg=
Subject key identifier: 91:0C:51:25:09:61:A4:BE:16:17:72:D3:50:5F:79:75:34:68:7D:7F
Certificate issuer: /CN=0929ba203ac63fa2971e41070f7842c3761529c4
Certificate serial: 060B7A65
Authority key identifier: 09:29:BA:20:3A:C6:3F:A2:97:1E:41:07:0F:78:42:C3:76:15:29:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/kQxRJQlhpL4WF3LTUF95dTRofX8.roa
Signing time: Fri 17 Jun 2022 08:02:44 +0000
ROA not before: Fri 17 Jun 2022 08:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43043
IP address blocks: 45.154.4.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101415525 (0x60b7a65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0929ba203ac63fa2971e41070f7842c3761529c4
Validity
Not Before: Jun 17 08:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=910c51250961a4be161772d3505f797534687d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6d:aa:a0:a2:50:8b:1e:4d:05:33:c4:36:e2:
75:63:12:79:cf:5d:8d:86:64:c5:bb:8d:1d:6f:49:
65:6f:d4:d0:bd:5e:c3:65:72:22:df:96:fe:91:d1:
2f:94:90:0f:b9:a1:c9:31:33:8d:e0:82:b2:08:08:
0b:72:f6:90:8f:69:c6:bb:14:2b:79:d0:15:3d:49:
b5:d5:27:4c:14:e7:e1:d1:8e:6e:17:49:5e:d7:c1:
83:c1:57:f0:f9:f8:d7:0a:ad:33:25:51:6f:89:1d:
6d:15:5f:c3:86:7c:5c:27:45:ff:4a:4b:92:93:5f:
be:a8:fa:a2:ac:a5:6e:07:62:32:08:1e:ba:58:48:
9a:ff:de:14:33:31:6a:18:9c:b9:ea:4f:06:2e:27:
6d:8d:27:a9:87:eb:d9:0f:ad:3f:3f:50:3c:c4:38:
50:1f:55:a2:d0:ef:be:3c:3c:ac:b2:94:53:d6:59:
a5:35:1e:ff:85:f8:62:4a:69:a0:7e:eb:d3:3b:b6:
bf:dc:00:8f:88:60:bb:2b:59:06:a3:64:b0:ca:59:
02:b2:47:7a:3d:1a:64:5e:65:d9:1c:e2:16:f4:cf:
25:a4:e9:9d:4b:9a:6a:51:d0:74:77:1f:4e:6a:0a:
5a:7a:8d:ee:dc:09:6a:ae:53:2d:2b:85:8f:3e:c9:
06:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0C:51:25:09:61:A4:BE:16:17:72:D3:50:5F:79:75:34:68:7D:7F
X509v3 Authority Key Identifier:
keyid:09:29:BA:20:3A:C6:3F:A2:97:1E:41:07:0F:78:42:C3:76:15:29:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/kQxRJQlhpL4WF3LTUF95dTRofX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.4.0/23
Signature Algorithm: sha256WithRSAEncryption
76:38:95:d7:3e:9e:fd:19:7e:99:e3:89:ef:1f:98:fb:e0:4f:
92:df:2d:4a:d4:f0:26:b0:85:8c:91:66:66:ae:dc:f7:ec:5c:
d4:ce:71:9b:03:71:a3:61:24:de:7c:4b:8b:15:e9:82:09:83:
f6:7f:d0:34:64:1a:07:80:f5:7e:6e:f0:fb:5b:05:d1:89:a4:
31:43:5d:3b:4f:fc:c4:64:cd:8a:04:15:a9:a8:36:74:8c:89:
07:80:dd:37:e4:26:1d:51:7b:11:22:ab:35:4b:0c:fb:77:95:
dd:3d:f5:f2:50:cc:4b:50:df:16:06:cd:93:c6:a1:a3:32:fa:
32:f0:01:d9:a9:84:48:5b:c8:e5:46:98:98:ac:18:9f:7c:bf:
84:af:25:5c:4e:35:97:c0:fd:10:c8:ce:3c:ed:d8:48:1d:9a:
85:1b:26:80:23:4e:7e:a1:8e:91:e5:e5:15:98:cc:1d:b5:20:
62:99:1d:2c:39:00:4d:f1:34:83:42:7e:9b:09:f8:25:b8:8d:
fa:ee:70:ba:58:ab:ae:c0:aa:7c:38:fc:8d:6c:41:9d:b8:e9:
11:fa:31:61:3f:e2:06:f2:19:5a:26:8a:89:fc:be:32:37:15:
24:e9:b8:2f:d9:c8:cd:b6:26:40:95:44:a9:87:8b:14:65:06:
a0:6a:2e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:24 2025 by rpki-client