Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/7xNbtRpRbmFRCOOtv_7j95NeskY.roa
File: 7xNbtRpRbmFRCOOtv_7j95NeskY.roa (raw, json)
Hash identifier: xvUZb/QAVMKKwtIoqxfZ8iKBDJdNspWIwzUqILDcvLg=
Subject key identifier: EF:13:5B:B5:1A:51:6E:61:51:08:E3:AD:BF:FE:E3:F7:93:5E:B2:46
Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00
Certificate serial: 018CAF9AF93D2605AC68914D7346F6FFBE3A
Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/7xNbtRpRbmFRCOOtv_7j95NeskY.roa
Signing time: Thu 28 Dec 2023 08:46:58 +0000
ROA not before: Thu 28 Dec 2023 08:46:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205122
IP address blocks: 45.92.52.0/24 maxlen: 24
45.92.53.0/24 maxlen: 24
45.92.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:af:9a:f9:3d:26:05:ac:68:91:4d:73:46:f6:ff:be:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239c45e43625522080aec53952989a13a28abd00
Validity
Not Before: Dec 28 08:46:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef135bb51a516e615108e3adbffee3f7935eb246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2c:3f:62:7a:a2:5f:42:d7:eb:30:cc:79:bc:
80:90:8b:cc:80:b4:5b:3c:9c:0f:ff:b1:14:0c:98:
fe:8d:87:50:34:9c:89:63:fa:d9:bb:7b:b7:a4:16:
52:08:41:05:7b:c1:cb:42:b2:e6:e9:56:75:d1:54:
df:07:f5:2e:71:50:9a:9a:13:1a:6b:5d:39:47:30:
b5:c5:63:ad:74:cd:7d:ab:86:2c:5b:7d:27:7e:be:
0e:09:21:b0:e6:0d:93:f7:a3:6b:a9:25:01:42:70:
83:97:05:91:e9:f9:99:ec:dc:de:c2:77:2a:3f:0b:
7b:c1:11:c8:29:f1:63:7d:0a:40:fe:d1:d1:d3:48:
79:31:44:dd:de:57:db:47:2d:c0:f4:1a:bf:f7:5c:
1b:c3:92:21:61:eb:07:a5:2e:88:76:12:0e:a6:19:
3d:eb:8c:fb:1f:f8:70:3c:da:b6:6c:fc:cd:27:e3:
9b:26:39:2b:73:53:81:bb:4c:1b:eb:fe:9f:40:db:
e6:67:23:51:e1:dc:44:83:fd:fd:ec:19:e4:96:19:
1b:3c:49:bf:b6:53:cb:2e:3b:46:54:77:63:d3:1b:
e1:0f:ec:32:a1:ad:d2:fd:84:c4:ee:5e:d9:82:2a:
13:5f:20:60:2d:c0:b7:72:62:9d:75:e0:b2:ce:71:
22:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:13:5B:B5:1A:51:6E:61:51:08:E3:AD:BF:FE:E3:F7:93:5E:B2:46
X509v3 Authority Key Identifier:
keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/7xNbtRpRbmFRCOOtv_7j95NeskY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.52.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:fd:39:d2:4e:58:45:3f:ab:29:7a:ce:90:d3:06:e6:a6:8e:
c3:62:55:fd:30:55:53:03:a1:da:ef:9f:b7:c1:1d:b7:09:60:
eb:12:05:25:2b:b8:b3:ab:4f:17:80:f9:97:59:a6:3f:6d:51:
bb:12:4a:72:0d:48:e5:19:f1:d3:73:19:c9:71:ae:9c:01:43:
bc:0d:53:7e:d7:8c:94:ca:bb:bb:1f:77:a8:ae:93:c5:f7:d6:
19:fb:68:07:7f:81:d2:a0:eb:87:95:31:62:b0:9a:a4:34:55:
3e:4e:99:d3:a0:50:af:b8:01:f4:e9:19:aa:84:68:e5:f0:b1:
6b:c3:6b:ee:27:f3:db:0e:2b:8f:5b:ad:18:0a:a7:b3:1b:5d:
14:16:a2:36:e5:71:d8:02:29:a2:e7:04:8a:7e:fa:55:59:3c:
90:c2:6e:4a:b5:fe:32:e4:68:36:a9:35:b8:f1:83:ec:a2:a6:
f7:e5:90:52:b1:62:88:5a:2e:fb:c1:33:59:20:ba:27:d3:8a:
75:8f:38:30:da:a4:80:f7:73:74:5e:1b:6c:52:9e:81:eb:90:
e4:3a:bd:f3:bf:fe:3f:1d:f0:bc:97:97:60:78:06:8e:27:ed:
f7:38:7a:dd:3a:cd:e8:3d:e7:a4:da:e0:cd:68:4c:5e:95:89:
39:38:dc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:37 2025 by rpki-client