Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/pbsDgcOZoHaA1STKpIPGBXFiQRI.roa
File: pbsDgcOZoHaA1STKpIPGBXFiQRI.roa (raw, json)
Hash identifier: Fwzj7V464D4h/dv+9xoKGCLk7xHaKVY5CLyGHaSVfiQ=
Subject key identifier: A5:BB:03:81:C3:99:A0:76:80:D5:24:CA:A4:83:C6:05:71:62:41:12
Certificate issuer: /CN=fc8569520e0da7d87aa682124a2774d63666b5e8
Certificate serial: 018673DE0B93029DA3827994751D4407768E
Authority key identifier: FC:85:69:52:0E:0D:A7:D8:7A:A6:82:12:4A:27:74:D6:36:66:B5:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IVpUg4Np9h6poISSid01jZmteg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/pbsDgcOZoHaA1STKpIPGBXFiQRI.roa
Signing time: Tue 21 Feb 2023 12:06:17 +0000
ROA not before: Tue 21 Feb 2023 12:06:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50738
IP address blocks: 45.141.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:de:0b:93:02:9d:a3:82:79:94:75:1d:44:07:76:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8569520e0da7d87aa682124a2774d63666b5e8
Validity
Not Before: Feb 21 12:06:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5bb0381c399a07680d524caa483c60571624112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3f:35:b4:6c:24:34:ad:c7:c1:ef:c0:1d:e7:
49:55:bc:3a:07:cd:23:9a:47:d0:87:b2:a6:76:a3:
b5:52:09:32:33:cc:0f:4e:f8:89:0b:bb:db:4d:cb:
29:76:59:9a:09:a2:5e:05:0d:fd:88:ca:a4:55:9f:
83:68:62:b8:ec:0d:4d:90:b3:79:13:39:1c:e4:9f:
df:bd:50:90:02:c9:7d:ef:fb:ac:b9:d6:6b:d4:d6:
d4:19:f4:65:57:c1:51:6c:e3:83:3c:88:13:b3:0e:
81:d6:6b:5a:aa:97:60:09:a4:20:eb:6e:3f:80:31:
80:eb:42:e3:33:c2:df:1c:9e:09:a0:84:4a:7c:0b:
65:1c:35:ec:d3:1f:3d:4b:0c:ad:50:5d:23:5e:4d:
13:6e:b8:15:71:5c:ba:65:45:f5:9d:52:b3:4f:e0:
3c:b8:dd:39:eb:00:5d:77:51:ae:13:68:54:98:22:
98:c4:10:ee:bf:0b:c9:65:ab:19:c1:09:fb:56:47:
32:38:85:89:6d:ad:91:1e:8f:49:12:d2:17:8a:9c:
a7:49:81:36:2a:ce:74:f4:36:c7:ad:41:34:1b:ef:
e1:64:43:c0:23:a3:32:4c:8d:7c:04:d0:28:43:3a:
a7:b7:b5:7f:d0:7f:24:7f:0d:2a:f8:f3:a1:5d:47:
b4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BB:03:81:C3:99:A0:76:80:D5:24:CA:A4:83:C6:05:71:62:41:12
X509v3 Authority Key Identifier:
keyid:FC:85:69:52:0E:0D:A7:D8:7A:A6:82:12:4A:27:74:D6:36:66:B5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IVpUg4Np9h6poISSid01jZmteg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/pbsDgcOZoHaA1STKpIPGBXFiQRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/_IVpUg4Np9h6poISSid01jZmteg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.184.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:2d:50:39:7e:70:f9:05:32:e8:ff:56:72:00:6c:6d:5d:32:
b7:1d:73:52:91:a5:56:73:db:04:99:3d:5d:27:c1:81:5c:ea:
31:bb:7b:6b:ff:a5:80:25:26:ff:00:f5:bb:c5:ac:c5:ea:a4:
58:12:81:3c:b0:79:1c:43:b3:ea:0f:a6:8a:3e:37:74:cc:86:
41:67:8e:0c:e6:ac:0f:16:22:ed:45:22:82:9c:b9:bc:6e:84:
b2:81:a7:80:9e:49:5c:a1:c1:26:b6:e7:df:0e:af:1d:c4:a2:
3f:4a:cc:af:c6:87:e1:0c:d6:89:6e:49:79:bd:48:2e:ab:a4:
1f:fa:5d:6c:38:f8:45:69:b9:1f:9a:96:de:18:e3:22:0d:d8:
1f:66:72:1f:5d:1e:4b:6e:f1:6f:94:76:87:82:d8:2c:a0:5f:
43:97:45:49:a1:d8:7b:f9:fa:0b:5b:c6:49:09:53:c6:a8:28:
1a:29:28:c1:f9:73:0e:9c:c4:66:fc:e7:fe:13:1f:a2:d8:01:
bf:36:7a:59:ec:40:7d:1b:e4:b7:77:e2:37:68:b5:5a:2a:6d:
1b:76:8d:42:74:de:6a:05:00:71:e8:ab:fe:56:9d:e2:f6:4f:
8e:87:8a:6e:c5:aa:b7:20:5d:13:53:5b:3e:6c:43:53:d4:57:
9c:af:36:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:40:59 2025 by rpki-client