Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/oW9lejh_c8O9WGXw83mGmj4DvBw.roa
File: oW9lejh_c8O9WGXw83mGmj4DvBw.roa (raw, json)
Hash identifier: WU13lGzeOaUYHZmjMmQ93iAGhU8rD5X3Z3CryzfCiI8=
Subject key identifier: A1:6F:65:7A:38:7F:73:C3:BD:58:65:F0:F3:79:86:9A:3E:03:BC:1C
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 0189AD93BAB1CC866BD2227CB7AC02876DD2
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/oW9lejh_c8O9WGXw83mGmj4DvBw.roa
Signing time: Mon 31 Jul 2023 20:11:27 +0000
ROA not before: Mon 31 Jul 2023 20:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142594
IP address blocks: 45.139.226.0/24 maxlen: 24
45.139.227.0/24 maxlen: 24
2a04:ff00:800::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ad:93:ba:b1:cc:86:6b:d2:22:7c:b7:ac:02:87:6d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Jul 31 20:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a16f657a387f73c3bd5865f0f379869a3e03bc1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7d:b7:12:a1:03:50:8c:05:39:65:ea:c8:0e:
65:53:04:be:6e:37:a1:34:fa:15:f6:55:93:9a:80:
31:a1:e3:74:8d:2f:ac:d1:7f:96:87:5e:d1:b9:27:
19:7c:34:fb:b8:7f:93:42:3b:b6:21:f2:64:ba:8d:
85:64:74:e8:76:41:97:4b:b9:7d:a4:08:2b:6a:70:
03:63:d7:01:0c:05:68:0b:06:22:95:a3:6f:b3:dd:
ae:3d:ab:50:0d:00:07:d7:53:ac:de:c4:4e:29:e4:
ea:1c:29:3b:3c:67:35:b6:f8:9d:f7:bc:ec:0a:14:
f5:b1:bd:28:b6:85:25:71:9e:a3:7e:57:d9:c7:af:
d0:17:0c:40:02:8c:e4:11:62:4a:57:30:63:f0:50:
25:70:b6:21:a9:e0:98:db:49:1b:12:55:8f:b2:fe:
8c:5a:a3:46:a5:44:a1:7c:33:0e:04:ac:59:ab:5f:
91:33:16:19:31:5e:3f:64:1d:fb:8b:b0:f5:2d:05:
c4:89:42:0b:ff:4d:f5:08:ce:22:4e:32:42:40:ae:
cd:c8:e8:9d:c9:06:74:bc:6f:42:15:53:d4:7d:d7:
bd:70:6c:94:7a:ef:72:b8:68:5d:e9:c0:4f:0c:dc:
42:40:5f:41:8a:b6:82:ac:1e:d0:9a:db:04:b5:ad:
cd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6F:65:7A:38:7F:73:C3:BD:58:65:F0:F3:79:86:9A:3E:03:BC:1C
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/oW9lejh_c8O9WGXw83mGmj4DvBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.226.0/23
IPv6:
2a04:ff00:800::/40
Signature Algorithm: sha256WithRSAEncryption
81:1e:90:51:64:26:c2:c6:95:e7:d3:a4:66:f0:14:de:93:53:
5d:57:3c:71:92:f7:2e:36:01:89:0e:33:fc:76:9c:d1:c2:32:
dd:ee:a4:65:0e:cd:f4:22:9e:3e:58:0b:31:e4:ea:17:e0:27:
d3:5c:06:03:91:fa:9f:2a:27:1c:e3:64:7e:bc:b2:83:5b:35:
72:52:c4:79:84:05:91:66:2a:d2:c4:ab:ad:bf:b5:6c:88:37:
6b:34:15:78:3b:67:c3:06:fa:bf:83:f2:97:6e:f4:4f:11:91:
04:fb:ba:f3:9a:3a:6c:7a:1d:d6:88:e3:1a:b9:7d:78:bf:3e:
cf:9a:86:6a:dd:ca:95:26:bc:20:00:9f:97:a6:c1:86:5a:6b:
be:e9:e9:61:c2:2c:b9:0a:0e:d6:9d:3c:a9:dc:5a:4b:d7:9f:
d2:5d:cd:ee:79:a7:8f:d0:c7:bb:17:16:6b:3c:6d:5c:69:d2:
7b:4a:44:a6:5b:f9:de:a3:95:88:6e:d9:18:2e:01:14:78:3f:
59:fa:ed:7c:4f:fd:34:70:a7:e4:2e:ad:ce:cc:ed:fa:2b:0e:
24:8b:b4:2b:e6:8e:a1:42:8c:42:b9:f6:4e:11:d2:09:11:f6:
ee:4f:8c:d4:2b:6d:97:80:1a:c2:a5:0a:b6:78:8e:2c:1f:e7:
46:e1:06:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:18 2025 by rpki-client