Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/IsqB2k5cl3ar_8-wVC6VU7Z3oIE.roa
File: IsqB2k5cl3ar_8-wVC6VU7Z3oIE.roa (raw, json)
Hash identifier: /EW0Qnvx3RCQ02zv0BYwmAG8JgYiogOMjipnppR9dXc=
Subject key identifier: 22:CA:81:DA:4E:5C:97:76:AB:FF:CF:B0:54:2E:95:53:B6:77:A0:81
Certificate issuer: /CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
Certificate serial: 01856FF0237C3CA7B58E08D66F1C20EA9755
Authority key identifier: 61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/IsqB2k5cl3ar_8-wVC6VU7Z3oIE.roa
Signing time: Mon 02 Jan 2023 00:44:46 +0000
ROA not before: Mon 02 Jan 2023 00:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210636
IP address blocks: 45.144.198.0/23 maxlen: 24
185.102.169.0/24 maxlen: 24
45.144.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:23:7c:3c:a7:b5:8e:08:d6:6f:1c:20:ea:97:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
Validity
Not Before: Jan 2 00:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22ca81da4e5c9776abffcfb0542e9553b677a081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:27:28:a0:9b:c0:ce:00:7d:95:95:84:dc:e8:
36:59:e5:fb:0b:b5:3a:e5:5a:3b:9d:f9:be:a7:0c:
16:08:05:48:36:ae:f8:05:21:fc:3c:e0:35:39:f1:
7b:ed:81:0c:65:38:f1:e2:bf:e7:52:cd:21:a3:f8:
7b:88:5a:76:01:ca:3c:46:2a:38:43:6d:83:8e:a4:
29:60:05:08:05:b1:a7:c0:3b:f5:17:5e:b1:ce:bd:
70:ce:97:f8:51:2b:87:58:3c:a5:7f:ac:11:23:df:
c5:67:3f:bd:98:7a:d1:97:1a:e5:df:6e:cd:b2:0c:
96:40:4c:f8:6f:b6:00:c3:56:7e:68:9a:c2:ec:d1:
e4:5c:a9:76:b6:3d:4d:c6:5e:d1:80:66:18:9c:78:
93:4c:8c:fc:67:bc:b6:cc:ec:a0:a7:96:28:26:d8:
4e:f6:34:16:66:2d:fa:de:19:38:97:a3:06:62:45:
6d:eb:18:63:af:c8:71:e9:2d:5d:71:07:af:27:7b:
63:b2:95:bf:48:5f:f4:05:6a:a2:b8:f0:af:25:40:
c7:f3:50:a4:09:f3:f9:6e:af:f6:ae:c9:d4:91:f9:
0a:c3:00:fa:98:f9:9f:a6:fa:7e:9b:3a:87:69:a4:
ce:10:9f:c5:17:ee:81:97:26:76:4c:d6:c1:cf:35:
99:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CA:81:DA:4E:5C:97:76:AB:FF:CF:B0:54:2E:95:53:B6:77:A0:81
X509v3 Authority Key Identifier:
keyid:61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/IsqB2k5cl3ar_8-wVC6VU7Z3oIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/YYL6MljC0s6hWExW8CYlwD_ysNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.197.0-45.144.199.255
185.102.169.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:21:c5:30:e9:80:07:33:ca:52:30:86:6c:ed:4e:87:a1:01:
b4:97:bf:f6:8f:ff:f6:90:88:69:cf:9d:fd:bb:29:9f:95:de:
45:0e:25:51:91:7d:13:b7:3d:53:03:c3:50:ab:a9:a2:6e:f2:
22:21:87:4f:4b:60:fb:13:ec:79:77:b0:1b:dd:7d:57:e0:3b:
30:70:48:89:d3:b5:6c:ef:fb:50:a5:1d:4b:2f:b1:4c:80:e0:
68:36:3f:c7:1b:f7:f3:c0:68:63:f4:0e:3f:b6:11:55:7d:08:
d4:79:f8:fa:d2:14:1a:ca:a6:f2:79:9a:1b:0d:32:2a:2b:03:
dd:1b:49:ca:cf:c5:41:ef:35:e9:c6:e8:e8:17:de:e2:38:65:
6b:77:d7:93:df:50:e1:30:92:ea:5c:fe:f5:66:04:b0:23:63:
9c:b0:12:8e:bb:fc:01:3d:cf:e9:67:3a:a7:37:91:e0:39:97:
89:bf:9d:1e:cb:a2:43:74:4d:88:56:2d:97:fe:a0:a2:65:11:
d4:79:d2:95:b2:1d:3c:ca:90:eb:ee:a6:0c:60:34:54:80:d4:
fa:35:9a:c2:6c:1b:4b:8b:7e:14:73:eb:e9:f0:e3:6e:30:ed:
ff:7d:11:70:d1:c9:b7:37:bf:52:bd:ba:18:1f:50:a0:5e:65:
48:ab:15:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:51 2025 by rpki-client