Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/gFOakHUnwfPyPVH5D7ajoHWj86w.roa
File: gFOakHUnwfPyPVH5D7ajoHWj86w.roa (raw, json)
Hash identifier: mbmAgkwXrIX4t3yr8/KpX81bT7ZrTaqAlxyK5PvdpmY=
Subject key identifier: 80:53:9A:90:75:27:C1:F3:F2:3D:51:F9:0F:B6:A3:A0:75:A3:F3:AC
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 07DCB53B
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/gFOakHUnwfPyPVH5D7ajoHWj86w.roa
Signing time: Sat 01 Jan 2022 01:55:47 +0000
ROA not before: Sat 01 Jan 2022 01:55:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6233
IP address blocks: 45.139.226.0/24 maxlen: 24
45.139.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131904827 (0x7dcb53b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Jan 1 01:55:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80539a907527c1f3f23d51f90fb6a3a075a3f3ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ee:8d:cf:93:5b:fb:fc:2e:f9:8e:8d:18:e8:
08:a6:34:b6:7d:ef:f7:21:ad:e1:02:13:1b:2e:a8:
7d:f3:50:d2:74:10:72:c4:eb:4e:90:96:be:0b:d6:
87:a0:c4:d4:de:0b:3b:1b:a5:e6:bf:fa:55:ab:e2:
34:79:5f:39:5b:69:4e:ef:ff:89:63:95:61:95:ce:
b7:a4:29:ae:a6:3b:9a:76:3b:94:a5:e9:fa:34:18:
ea:c7:d3:34:f4:9b:88:91:4d:a4:26:96:ab:02:58:
12:95:9e:bd:73:9d:d7:d4:62:dc:5d:bb:ed:b0:6f:
56:43:aa:6d:cb:b1:d9:9a:4e:08:59:c3:14:44:b6:
16:66:6d:c8:1b:ff:a1:9b:fe:0f:c1:f8:2b:a5:b1:
09:fa:44:52:b3:b9:e2:6c:60:db:d5:3b:c4:40:86:
b8:d0:b1:75:a4:58:a7:08:7e:76:66:47:29:14:11:
b9:0a:5a:bf:f1:5f:79:c6:ad:86:4d:dd:2d:a4:b5:
ac:16:68:24:cf:15:a2:01:4a:b6:f2:a6:fa:1e:d2:
c5:30:f8:d7:13:e3:5e:6d:d4:5e:fa:18:98:74:d9:
60:2e:f5:5e:38:cb:56:85:a6:39:83:01:d1:cf:78:
cb:8c:37:40:13:eb:22:28:46:5c:4a:19:6d:a1:52:
fa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:53:9A:90:75:27:C1:F3:F2:3D:51:F9:0F:B6:A3:A0:75:A3:F3:AC
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/gFOakHUnwfPyPVH5D7ajoHWj86w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.226.0/23
Signature Algorithm: sha256WithRSAEncryption
44:46:0f:c9:96:9d:ca:e0:56:9d:f4:f0:76:a0:1f:5a:7e:86:
a0:27:7e:0d:15:2e:cb:fc:73:7a:8c:1e:61:a4:46:30:98:b4:
7c:9e:37:c0:b7:cb:8b:44:08:b3:29:b0:09:fc:6d:80:75:ea:
7d:18:44:2e:77:9a:e9:eb:1d:ce:eb:1a:e0:ef:9d:b0:1f:14:
5a:f3:bc:8f:22:79:b2:3f:e9:53:12:51:01:81:8b:81:4c:42:
c1:a7:0d:1a:fd:83:4a:45:b3:b5:d2:6d:37:13:ca:f8:1c:61:
8a:14:3f:04:71:c6:4f:f7:26:5e:29:a0:53:39:bd:9e:de:d7:
5f:ba:dc:ed:70:cb:65:fb:f1:7f:08:88:18:66:25:de:9c:0a:
df:91:39:3d:b7:6d:2b:bb:83:bb:4b:91:7e:77:6b:e6:76:8d:
8e:63:3b:c5:1e:e0:6d:27:47:65:63:dd:c0:f6:d1:bb:89:41:
3f:65:0f:97:4b:c9:6d:42:bd:90:1e:3a:69:24:99:19:e6:0a:
36:eb:86:d5:41:85:e0:b5:33:83:71:e2:7f:e3:35:f5:7a:3c:
e5:45:df:60:09:c8:5e:16:90:0f:bd:fa:cd:34:47:bd:4c:6e:
f1:07:d1:f1:c2:1b:dd:c2:ad:37:f4:6e:f7:a3:4b:8b:cd:ba:
c5:99:f5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:22 2025 by rpki-client