Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1b167b-186f-4851-a99e-0838a26339ad/1/7Sb6FEE6a6RIo3Z8EQF7T8LcWpU.roa
File: 7Sb6FEE6a6RIo3Z8EQF7T8LcWpU.roa (raw, json)
Hash identifier: Ed3jAY0bXN8xTEDfkW2Rrh2cXwaiNPgRxlgPR3Ixs50=
Subject key identifier: ED:26:FA:14:41:3A:6B:A4:48:A3:76:7C:11:01:7B:4F:C2:DC:5A:95
Certificate issuer: /CN=69a22c14c23efcb46a46477c6ea9e17922ef464e
Certificate serial: 018736AFF647CB87BD15D233200D4DE65B69
Authority key identifier: 69:A2:2C:14:C2:3E:FC:B4:6A:46:47:7C:6E:A9:E1:79:22:EF:46:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaIsFMI-_LRqRkd8bqnheSLvRk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1b167b-186f-4851-a99e-0838a26339ad/1/7Sb6FEE6a6RIo3Z8EQF7T8LcWpU.roa
Signing time: Fri 31 Mar 2023 08:01:54 +0000
ROA not before: Fri 31 Mar 2023 08:01:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 45.93.186.0/23 maxlen: 23
45.93.184.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:36:af:f6:47:cb:87:bd:15:d2:33:20:0d:4d:e6:5b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a22c14c23efcb46a46477c6ea9e17922ef464e
Validity
Not Before: Mar 31 08:01:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed26fa14413a6ba448a3767c11017b4fc2dc5a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:1b:59:dd:5b:53:80:1a:bb:c0:44:eb:f7:
78:8f:99:ec:6f:5c:a2:89:08:10:4c:d4:fc:04:cd:
8a:45:72:a3:e4:0c:e6:6e:0d:6a:14:f6:09:08:7f:
bf:1e:5d:87:aa:75:ae:86:77:3f:2e:1e:0c:b7:46:
07:7e:c5:40:bd:70:72:3d:56:38:66:66:2c:5a:eb:
bb:2d:8e:92:24:5f:1e:d3:8f:8d:07:27:21:12:dc:
0d:20:eb:d9:5c:f9:56:2c:20:1c:31:2a:55:39:a9:
c7:f3:48:f1:21:13:8e:9d:99:e7:98:fb:9c:fb:06:
ab:e3:0f:26:8d:fe:ce:70:74:49:af:be:63:fa:58:
5b:a0:b7:f7:13:57:ce:7b:68:d4:26:9e:93:7c:7a:
60:64:60:d7:af:c3:9f:8c:39:21:49:82:d6:3d:22:
e1:95:62:1a:87:d9:2c:1a:11:e8:f7:52:af:d7:bf:
9f:36:82:ee:4c:59:53:c5:7d:b2:f6:e1:d2:2c:73:
45:ce:32:df:4f:6e:ff:9d:39:aa:bc:fd:73:5f:5a:
ff:e6:84:3e:b2:7f:85:1e:4e:50:05:f7:5c:14:5e:
52:49:53:86:e4:ef:d3:7e:92:23:0c:7d:be:29:dd:
5c:e5:64:2e:00:6d:1a:d9:71:fa:1d:69:e2:b2:32:
b6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:26:FA:14:41:3A:6B:A4:48:A3:76:7C:11:01:7B:4F:C2:DC:5A:95
X509v3 Authority Key Identifier:
keyid:69:A2:2C:14:C2:3E:FC:B4:6A:46:47:7C:6E:A9:E1:79:22:EF:46:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaIsFMI-_LRqRkd8bqnheSLvRk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1b167b-186f-4851-a99e-0838a26339ad/1/7Sb6FEE6a6RIo3Z8EQF7T8LcWpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1b167b-186f-4851-a99e-0838a26339ad/1/aaIsFMI-_LRqRkd8bqnheSLvRk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.184.0/22
Signature Algorithm: sha256WithRSAEncryption
63:dd:b0:ba:29:32:d6:bb:ee:97:47:8b:e9:8b:1f:f7:e4:f7:
9f:9c:f4:c5:7d:4f:72:3b:c9:ff:78:e4:27:26:22:03:20:6f:
e3:f3:36:9c:9b:24:4e:b3:93:17:c0:44:70:f3:d2:28:b6:9d:
79:fc:13:67:b8:fd:44:45:93:5e:fb:96:38:e9:83:c6:2a:64:
0a:7b:0b:1c:72:9c:1f:13:8e:0a:9c:30:bf:7b:06:34:b3:6e:
0f:c6:45:ad:ce:0b:96:91:7f:e9:43:f2:48:11:1b:e4:59:07:
76:38:65:5e:38:d7:c7:5f:be:ba:f5:d1:d6:2e:77:59:78:5c:
3b:01:f3:ba:5e:9a:f1:3c:93:f1:65:a0:57:0d:ed:52:15:18:
a4:d3:d2:b5:1c:68:4a:b0:c4:fc:3d:c2:cd:9e:b7:02:eb:79:
b4:84:fc:8f:ee:42:dc:03:e8:90:76:f0:49:eb:3e:ab:4f:be:
f9:3c:59:1c:36:30:a4:2b:31:c2:0f:53:36:8a:2d:35:63:71:
69:18:46:ee:01:44:f3:33:06:f7:54:61:71:98:4f:2c:f0:48:
e3:16:1a:80:c6:03:7c:18:ea:f7:a7:bb:c2:a0:dc:04:29:e7:
bd:e6:f9:a2:7b:a6:62:ca:aa:10:00:d0:cc:ab:48:62:23:d9:
f9:a8:39:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:14 2025 by rpki-client