Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/gm9Q4nAaYGeOTMzJQM5XBD1wcLE.roa
File: gm9Q4nAaYGeOTMzJQM5XBD1wcLE.roa (raw, json)
Hash identifier: dr88rxzBazedAs/xVRMb/c0fSBw47e5u6rk/SHMFgqU=
Subject key identifier: 82:6F:50:E2:70:1A:60:67:8E:4C:CC:C9:40:CE:57:04:3D:70:70:B1
Certificate issuer: /CN=424e8bd525b199edc1b7392da20225f74896da9d
Certificate serial: 0183E65C9BD08C15E70CFE83E6F2CBE44132
Authority key identifier: 42:4E:8B:D5:25:B1:99:ED:C1:B7:39:2D:A2:02:25:F7:48:96:DA:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk6L1SWxme3BtzktogIl90iW2p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/gm9Q4nAaYGeOTMzJQM5XBD1wcLE.roa
Signing time: Mon 17 Oct 2022 14:32:52 +0000
ROA not before: Mon 17 Oct 2022 14:32:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22653
IP address blocks: 45.9.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e6:5c:9b:d0:8c:15:e7:0c:fe:83:e6:f2:cb:e4:41:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424e8bd525b199edc1b7392da20225f74896da9d
Validity
Not Before: Oct 17 14:32:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=826f50e2701a60678e4cccc940ce57043d7070b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:75:84:b9:58:5b:72:dc:4d:31:4f:30:e1:95:
26:36:1b:f2:ff:c7:37:b5:5c:52:2b:55:52:15:29:
62:65:9b:00:06:40:e0:4f:b1:a1:a7:f9:91:7d:89:
55:72:0e:ab:0f:56:b2:35:d2:83:44:5e:3f:04:3b:
ad:1b:26:f9:de:03:5c:a1:1b:f4:2c:64:3a:6c:0b:
05:5c:6c:81:56:d7:a8:15:8b:ea:76:bf:42:27:e3:
6f:1e:21:ce:f0:16:5b:51:67:fa:97:d8:34:dd:c0:
4e:a0:d5:ce:65:05:2a:bb:56:08:6f:cc:37:71:ee:
14:91:22:1d:97:3c:ce:dd:90:27:aa:fc:f1:05:bf:
0a:35:ce:ce:ed:1f:d2:90:39:cb:d5:35:40:7a:d8:
b3:17:d8:bb:f3:fc:2d:df:45:58:ab:0f:f6:4e:c6:
b6:36:e8:40:ac:31:93:ec:f9:f8:60:c5:32:44:54:
81:b9:a6:be:6d:f9:a2:56:61:19:13:f8:77:57:bd:
d7:d8:c1:d8:40:08:fc:af:24:b3:04:04:1e:83:cc:
46:4c:4f:a6:0d:95:cf:bb:fb:9f:e0:6d:a2:c2:87:
b1:92:4e:7c:b9:71:03:62:5d:da:cb:40:a1:92:0b:
b0:c6:0d:1a:6c:ff:58:7b:fc:af:67:cf:45:7e:5e:
d3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6F:50:E2:70:1A:60:67:8E:4C:CC:C9:40:CE:57:04:3D:70:70:B1
X509v3 Authority Key Identifier:
keyid:42:4E:8B:D5:25:B1:99:ED:C1:B7:39:2D:A2:02:25:F7:48:96:DA:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk6L1SWxme3BtzktogIl90iW2p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/gm9Q4nAaYGeOTMzJQM5XBD1wcLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/Qk6L1SWxme3BtzktogIl90iW2p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:64:58:b6:db:1a:84:88:05:9c:7c:be:bb:ed:28:b1:cc:44:
d8:d2:32:fc:18:53:54:48:f6:4f:e1:28:ad:58:78:a5:be:09:
e9:ba:73:37:a4:e1:9e:ca:df:de:6e:95:d6:4a:48:59:69:88:
ce:43:9e:b6:23:af:8e:35:80:0e:73:24:99:0f:7a:6a:49:0e:
20:d3:af:5a:1f:e9:cf:1a:36:b9:4d:97:0d:82:c6:d5:93:4a:
fb:34:b8:40:b1:98:47:81:98:1a:d9:55:f4:72:39:79:97:27:
91:93:2b:6e:e1:d6:74:20:f6:4b:93:22:07:ab:8d:09:6d:39:
90:8d:9a:95:2b:89:15:41:3c:1e:7b:f3:66:42:b5:3c:1c:d9:
e1:39:f3:93:10:0f:3a:10:72:12:c2:d2:53:e7:c4:2f:54:c6:
37:f3:7c:fd:56:c2:a6:35:8d:f0:ee:74:cb:70:46:4b:5f:81:
01:27:30:c0:19:76:d0:f4:4d:fe:32:36:ce:f4:9c:b0:e4:56:
13:da:29:dc:73:95:30:c0:7a:06:2e:73:c1:ee:bd:08:09:42:
84:22:8d:15:39:06:2c:57:11:c6:f2:39:07:35:3f:33:f6:59:
2f:55:a7:b9:df:d4:12:2f:84:63:50:6f:06:8e:1f:ec:9a:1a:
2e:9a:46:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:43 2025 by rpki-client