Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/43ac4b-9ada-4047-9517-966dbe794a4a/1/1-PBxkil4THzy0545DPbkydFXH94.roa
File: 1-PBxkil4THzy0545DPbkydFXH94.roa (raw, json)
Hash identifier: KuxoPulA+Qm/8mkFQcKpCN9vbPxtNjC0ItbsBLVGlBM=
Subject key identifier: F8:F0:71:92:29:78:4C:7C:F2:D3:9E:39:0C:F6:E4:C9:D1:57:1F:DE
Certificate issuer: /CN=919aff1cf73b583506a2bad8bc7a63f5c2f2965b
Certificate serial: 0170B4AE
Authority key identifier: 91:9A:FF:1C:F7:3B:58:35:06:A2:BA:D8:BC:7A:63:F5:C2:F2:96:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZr_HPc7WDUGorrYvHpj9cLylls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/43ac4b-9ada-4047-9517-966dbe794a4a/1/1-PBxkil4THzy0545DPbkydFXH94.roa
Signing time: Sat 01 Jan 2022 09:58:17 +0000
ROA not before: Sat 01 Jan 2022 09:58:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42947
IP address blocks: 45.95.76.0/24 maxlen: 24
45.95.77.0/24 maxlen: 24
45.95.78.0/24 maxlen: 24
45.95.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24163502 (0x170b4ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=919aff1cf73b583506a2bad8bc7a63f5c2f2965b
Validity
Not Before: Jan 1 09:58:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8f0719229784c7cf2d39e390cf6e4c9d1571fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:2f:e8:19:5c:8e:0b:3d:12:a9:89:ef:3d:
55:72:86:4e:03:cd:33:84:fb:9e:da:5e:00:ab:cd:
19:42:78:b9:27:97:ae:a6:0b:d6:70:9b:81:ab:58:
3c:57:80:fb:b5:ed:e1:ad:29:ed:f6:cb:44:4c:32:
66:a0:f4:65:8d:30:7e:a0:42:58:4a:9d:f1:f6:b9:
2a:c1:a2:b7:4e:87:3d:6a:72:82:ca:ff:14:fd:70:
ac:47:94:50:d3:4f:86:21:ec:57:ba:1e:7f:e2:bf:
31:57:af:03:98:5c:48:d7:f9:c1:fb:7c:fe:12:e4:
55:d5:9c:2b:71:21:a9:47:8b:7e:ef:9c:f6:8a:d6:
5a:0b:f9:88:80:e2:cb:58:68:16:f4:2b:de:67:77:
7e:f1:86:2a:20:d4:56:b2:8e:b0:d6:05:80:da:95:
25:e3:ce:4a:27:17:44:52:01:c1:b7:c4:ca:4c:65:
1a:24:6a:e8:4b:07:fd:b0:63:1f:d4:09:3c:a8:4f:
56:78:79:51:76:17:b0:f3:3e:71:cc:99:be:ff:b8:
10:c0:7d:10:49:0d:f1:ac:5a:17:d5:8d:81:19:5f:
5c:2c:0f:bd:c7:91:7a:ae:51:37:6a:66:97:7a:a8:
dd:e6:24:22:cd:31:57:41:3e:3b:13:de:db:e5:bd:
cb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F0:71:92:29:78:4C:7C:F2:D3:9E:39:0C:F6:E4:C9:D1:57:1F:DE
X509v3 Authority Key Identifier:
keyid:91:9A:FF:1C:F7:3B:58:35:06:A2:BA:D8:BC:7A:63:F5:C2:F2:96:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZr_HPc7WDUGorrYvHpj9cLylls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/43ac4b-9ada-4047-9517-966dbe794a4a/1/1-PBxkil4THzy0545DPbkydFXH94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/43ac4b-9ada-4047-9517-966dbe794a4a/1/kZr_HPc7WDUGorrYvHpj9cLylls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.76.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:d3:d9:a6:ae:c9:97:bb:37:a2:00:5b:fc:43:67:06:f1:98:
76:89:a8:53:5e:92:5e:30:e2:3e:dc:7c:ea:ae:a8:b6:65:a4:
f7:9e:d8:86:af:1b:ca:1a:a0:39:fe:28:8c:c1:bd:28:41:05:
1d:24:d5:9b:7d:38:4d:3b:37:63:ab:23:55:83:8e:9b:4b:4c:
cf:ab:9e:a0:ac:ec:cf:ec:77:f1:64:02:86:03:13:2d:c2:47:
da:6d:98:2e:48:78:f6:87:d0:67:c3:a2:f1:cd:3e:5e:c4:55:
a9:75:4e:15:54:e9:71:a4:cf:86:5e:35:0f:24:6c:09:0d:55:
8c:03:2b:e4:c2:37:96:2b:07:00:ee:ef:80:7a:e0:87:7e:31:
51:75:70:3f:6a:a6:4a:96:58:34:21:07:13:02:21:20:47:6f:
73:ce:cf:dc:a7:8e:4b:ba:05:85:b9:7e:36:54:aa:dd:d8:3a:
19:86:5e:cf:2d:69:56:d5:c4:44:93:3f:5c:07:a0:16:fd:d9:
2a:9f:90:e2:91:32:3b:4f:82:c6:7d:26:70:93:07:60:7b:3f:
69:57:e1:18:72:62:aa:d2:5c:cc:96:b2:e4:80:a7:00:af:be:
df:2d:49:0d:01:28:16:c5:53:1b:d9:f0:6f:c9:3a:49:11:17:
dd:82:6c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:02 2025 by rpki-client