Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/77ba29-9cb4-48cf-a661-50e3fd66271d/1/1Lx-ZtkLIs903_P2h5_OApJw4qU.roa
File: 1Lx-ZtkLIs903_P2h5_OApJw4qU.roa (raw, json)
Hash identifier: yPyDeSrQROWvk2jx2XmC3hE565piaLxxCdehF/x7AL8=
Subject key identifier: D4:BC:7E:66:D9:0B:22:CF:74:DF:F3:F6:87:9F:CE:02:92:70:E2:A5
Certificate issuer: /CN=01a2a27e65033a418dea39263c69fb22491ed55f
Certificate serial: 05B4612A
Authority key identifier: 01:A2:A2:7E:65:03:3A:41:8D:EA:39:26:3C:69:FB:22:49:1E:D5:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaKifmUDOkGN6jkmPGn7Ikke1V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/77ba29-9cb4-48cf-a661-50e3fd66271d/1/1Lx-ZtkLIs903_P2h5_OApJw4qU.roa
Signing time: Sat 01 Jan 2022 11:54:25 +0000
ROA not before: Sat 01 Jan 2022 11:54:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57704
IP address blocks: 45.158.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95707434 (0x5b4612a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a2a27e65033a418dea39263c69fb22491ed55f
Validity
Not Before: Jan 1 11:54:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4bc7e66d90b22cf74dff3f6879fce029270e2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:d6:6b:8a:58:af:1f:82:08:49:cd:c1:f4:
2b:41:f8:a0:d2:e5:ac:45:22:09:d9:68:02:4a:c5:
80:41:e5:e3:0d:fd:98:65:c2:3a:79:f6:91:ec:84:
f3:a0:7b:a5:20:d2:3e:18:ce:80:ea:51:44:15:01:
a2:1c:7b:74:65:cb:55:12:51:97:7c:55:a5:42:9b:
07:21:88:51:35:65:67:10:80:8e:e0:05:1f:86:10:
2b:83:57:9e:72:78:05:d9:b1:38:ff:63:57:2f:9c:
88:92:19:ee:7f:1b:36:6a:af:b1:17:d1:95:8a:16:
76:55:29:46:5b:8f:21:8b:16:76:e8:f4:0c:57:87:
61:b2:55:0c:61:02:2d:eb:b4:c2:8e:87:80:9b:b6:
18:b4:fe:6b:f8:4c:72:4d:75:e1:82:f8:8c:71:ef:
8d:93:78:19:84:eb:16:31:2d:26:c0:fa:ea:77:8f:
6e:75:48:d3:23:86:59:c8:1c:ee:b2:6d:8f:b2:84:
49:d8:54:21:c1:d8:9b:e5:ff:08:88:a2:03:2c:be:
da:d1:10:0a:91:2d:49:b7:68:1d:2a:5a:82:e3:95:
ad:a2:f7:ea:99:51:38:c7:98:b7:51:ce:cd:91:54:
9a:a6:75:53:1f:17:9e:3d:3b:6a:67:95:db:b6:77:
e4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BC:7E:66:D9:0B:22:CF:74:DF:F3:F6:87:9F:CE:02:92:70:E2:A5
X509v3 Authority Key Identifier:
keyid:01:A2:A2:7E:65:03:3A:41:8D:EA:39:26:3C:69:FB:22:49:1E:D5:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaKifmUDOkGN6jkmPGn7Ikke1V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/77ba29-9cb4-48cf-a661-50e3fd66271d/1/1Lx-ZtkLIs903_P2h5_OApJw4qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/77ba29-9cb4-48cf-a661-50e3fd66271d/1/AaKifmUDOkGN6jkmPGn7Ikke1V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.156.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:69:23:93:59:b1:1c:a6:90:6d:f9:4c:96:3a:45:11:10:bb:
da:e5:af:12:26:59:c2:87:89:09:8c:2f:ab:c5:f5:b3:c3:73:
17:b1:33:91:35:e3:d1:a5:bb:1e:5c:79:b3:17:d0:81:e1:8b:
e6:98:20:a5:ca:71:f9:2b:67:b1:4c:f9:29:97:86:30:58:ba:
70:da:31:16:36:4d:ef:5f:4a:c7:9f:bd:d9:28:99:a5:f9:91:
13:ca:58:13:0f:2e:3b:e1:41:fc:8d:b5:a4:2e:1d:28:51:5d:
df:4e:d3:bc:b4:a2:cb:7a:43:8c:c6:50:a1:a7:64:80:f1:22:
4d:45:d2:03:54:2c:7d:5d:46:34:c1:b6:f9:3c:fa:e1:42:e5:
59:23:fc:57:72:4e:79:36:19:8b:0f:3a:a1:aa:7d:19:61:d4:
50:95:14:b5:ee:a7:13:8a:ea:37:82:91:6b:65:6d:96:75:40:
2d:e3:4b:10:1c:e0:69:f0:17:86:77:89:38:7b:86:92:61:e3:
b0:da:61:fe:84:e9:78:57:4e:65:54:b9:6b:61:5e:27:48:8c:
70:03:8a:05:99:f0:6a:d4:e6:67:e6:4d:ec:95:27:58:48:4b:
08:b6:61:8e:5d:ab:85:4c:da:04:49:af:e1:d5:5f:8a:eb:b4:
4a:51:5c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:04 2025 by rpki-client