Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/s3mHSeJuLbJjUsJM3IPov0Dhmtk.roa
File: s3mHSeJuLbJjUsJM3IPov0Dhmtk.roa (raw, json)
Hash identifier: 0/GylmaRfHf12q05vbzd8WbwqcEAYux96pUdJfr3AWQ=
Subject key identifier: B3:79:87:49:E2:6E:2D:B2:63:52:C2:4C:DC:83:E8:BF:40:E1:9A:D9
Certificate issuer: /CN=718ab66ee3a8c1b35accddba57c0c7d148cbe55f
Certificate serial: 01CD01D0
Authority key identifier: 71:8A:B6:6E:E3:A8:C1:B3:5A:CC:DD:BA:57:C0:C7:D1:48:CB:E5:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYq2buOowbNazN26V8DH0UjL5V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/s3mHSeJuLbJjUsJM3IPov0Dhmtk.roa
Signing time: Wed 09 Mar 2022 11:23:02 +0000
ROA not before: Wed 09 Mar 2022 11:23:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.81.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30212560 (0x1cd01d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718ab66ee3a8c1b35accddba57c0c7d148cbe55f
Validity
Not Before: Mar 9 11:23:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3798749e26e2db26352c24cdc83e8bf40e19ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d3:39:29:6e:ff:2f:a7:49:0d:8c:4a:76:fe:
4c:57:d5:0d:c8:45:16:14:3b:da:aa:44:b2:9a:4e:
6a:7f:93:90:15:a1:23:02:ca:6c:4b:e8:2a:aa:87:
92:57:05:24:ae:01:82:2a:cf:12:30:43:2f:fb:17:
e1:20:11:db:74:7f:59:1d:d5:f3:14:e2:83:14:de:
71:51:c7:1c:12:46:5a:bd:72:02:93:11:d9:fb:e8:
d2:82:d3:b2:f5:97:45:27:24:55:c6:a2:b7:c4:49:
5c:dd:d3:91:6f:42:5a:30:03:c4:36:89:4f:e3:10:
d2:bb:4d:cf:e3:c5:88:d5:3c:a1:79:d8:c0:dc:d3:
b2:83:92:3e:1a:ca:07:51:04:98:19:11:fc:5c:f2:
b4:ed:dd:8b:0d:0e:e1:2b:b0:49:5a:38:0e:34:ce:
20:46:f4:46:31:cd:4b:e4:82:08:a0:e3:1a:5e:90:
6a:cf:01:ed:04:79:88:c0:2f:29:d8:77:03:fa:c6:
3c:c6:21:a7:e1:8e:5d:ed:1e:ea:2c:83:d6:76:fa:
d3:8b:e2:02:10:fe:ef:2c:7a:d4:6f:b6:0d:23:7c:
72:bc:1b:7a:e1:88:aa:e7:da:4f:22:58:eb:27:17:
e7:c8:84:93:53:f2:23:20:ee:19:00:64:92:ac:21:
50:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:79:87:49:E2:6E:2D:B2:63:52:C2:4C:DC:83:E8:BF:40:E1:9A:D9
X509v3 Authority Key Identifier:
keyid:71:8A:B6:6E:E3:A8:C1:B3:5A:CC:DD:BA:57:C0:C7:D1:48:CB:E5:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYq2buOowbNazN26V8DH0UjL5V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/s3mHSeJuLbJjUsJM3IPov0Dhmtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/cYq2buOowbNazN26V8DH0UjL5V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.36.0/24
Signature Algorithm: sha256WithRSAEncryption
66:29:af:cd:1b:42:77:07:a1:8a:05:b0:6e:db:9a:71:64:d9:
29:d8:20:e4:f7:69:cb:f5:14:a7:5d:02:31:ac:8c:da:31:61:
ba:a0:03:bd:b0:5b:57:87:77:e2:d3:79:b0:2d:ed:f9:c1:7a:
9a:82:62:39:4d:ab:60:a8:0b:2a:32:a3:7e:55:b2:9d:ff:c8:
82:0c:35:60:45:21:48:e8:d2:2d:1a:94:f1:70:54:8e:d2:bc:
41:48:6e:5b:b5:73:5b:fb:f0:65:b1:29:69:aa:9f:12:52:da:
6e:8f:74:68:73:4d:8e:a7:3f:60:e0:d2:3e:dd:00:7a:6b:5d:
03:21:84:55:8f:4e:d9:c9:15:66:03:c2:91:b5:2f:da:61:08:
29:51:12:33:45:60:e0:28:79:c0:79:65:49:7b:8f:19:46:48:
b4:7e:a6:40:5c:8c:40:39:6b:4a:a2:9f:61:35:65:a5:30:32:
a0:55:46:ea:63:71:3a:19:ee:4f:1f:00:0b:2d:59:f3:de:07:
74:e7:30:89:f7:30:f9:20:35:96:ce:0e:12:7b:f9:97:9f:c6:
a2:de:58:83:d3:43:4d:f5:54:94:22:d6:d6:74:67:6b:83:33:
fc:0b:9f:2a:c7:86:9a:9f:0f:0d:20:c8:cb:59:00:6d:d8:af:
0f:61:98:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:56 2025 by rpki-client