Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a2df45-f4b7-4ec6-8612-4ab036cac2db/1/R6c4NuZp6BPnG1OmRzO5iZ2oxfA.roa
File: R6c4NuZp6BPnG1OmRzO5iZ2oxfA.roa (raw, json)
Hash identifier: XKK9NhHFK/6TGQm9CPbqduoIV3uK9P4swOPRFSudCFk=
Subject key identifier: 47:A7:38:36:E6:69:E8:13:E7:1B:53:A6:47:33:B9:89:9D:A8:C5:F0
Certificate issuer: /CN=b01ffbf22e37c7ae42c03f6e63f32172399cfe07
Certificate serial: 018326EC4B909B1FC280273423451D2C1441
Authority key identifier: B0:1F:FB:F2:2E:37:C7:AE:42:C0:3F:6E:63:F3:21:72:39:9C:FE:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sB_78i43x65CwD9uY_Mhcjmc_gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a2df45-f4b7-4ec6-8612-4ab036cac2db/1/R6c4NuZp6BPnG1OmRzO5iZ2oxfA.roa
Signing time: Sat 10 Sep 2022 10:22:43 +0000
ROA not before: Sat 10 Sep 2022 10:22:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 45.92.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:26:ec:4b:90:9b:1f:c2:80:27:34:23:45:1d:2c:14:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b01ffbf22e37c7ae42c03f6e63f32172399cfe07
Validity
Not Before: Sep 10 10:22:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47a73836e669e813e71b53a64733b9899da8c5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c2:4d:4b:23:c6:e4:79:c0:01:4d:14:0a:37:
07:55:11:10:f0:0c:d3:03:5b:b4:7b:a4:35:be:ac:
71:d3:7b:5d:17:6c:ee:cf:68:e4:34:1f:fa:c6:d4:
80:51:cb:95:05:8c:43:59:09:44:6c:fd:9c:b4:99:
db:10:96:1c:4f:1b:32:d2:0c:b6:bb:88:43:15:36:
e0:39:92:a5:9e:1c:ac:d7:79:78:99:b3:ea:db:bb:
e0:21:8c:17:bd:fe:83:af:4e:9c:8e:dc:0a:a0:e9:
b3:74:bb:49:b0:62:80:28:31:3f:74:ca:20:2b:84:
83:11:b8:a9:79:4a:c7:5b:d6:06:6e:db:c5:5d:ee:
ce:f4:f2:66:ea:38:4a:ff:2a:29:c1:9e:69:e1:d7:
a2:2b:7f:c4:06:f7:af:9c:67:2b:2c:ea:20:93:da:
6e:1c:7b:27:ea:10:b1:73:da:40:e2:22:3f:d0:ba:
f5:23:f5:9d:d2:0b:05:ce:b1:bd:f0:a2:df:26:41:
81:61:bc:67:37:46:82:a5:b5:9c:ee:9b:f9:fe:8f:
94:e5:29:a9:40:71:36:07:59:16:58:ad:99:a9:0e:
0e:3f:69:aa:f3:d6:3c:49:a5:ac:5f:e3:5c:72:25:
fb:ec:02:a9:6e:c4:7f:f2:55:0b:19:c2:66:12:e1:
2a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A7:38:36:E6:69:E8:13:E7:1B:53:A6:47:33:B9:89:9D:A8:C5:F0
X509v3 Authority Key Identifier:
keyid:B0:1F:FB:F2:2E:37:C7:AE:42:C0:3F:6E:63:F3:21:72:39:9C:FE:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sB_78i43x65CwD9uY_Mhcjmc_gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a2df45-f4b7-4ec6-8612-4ab036cac2db/1/R6c4NuZp6BPnG1OmRzO5iZ2oxfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a2df45-f4b7-4ec6-8612-4ab036cac2db/1/sB_78i43x65CwD9uY_Mhcjmc_gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.76.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:c1:78:a6:e5:c5:74:83:ef:8e:a1:88:81:5a:a6:4d:68:b6:
e6:6d:37:44:88:0c:09:9a:d9:10:74:9d:a1:7d:45:84:24:1b:
7e:ad:a5:f3:15:c6:b5:51:21:13:db:81:b4:61:51:5c:2a:7a:
09:70:92:31:2e:d1:e1:e5:91:3a:ae:74:b6:0f:53:1c:d5:94:
aa:3e:eb:e9:f7:34:07:99:f7:0c:d3:03:4e:2f:5c:4a:0b:90:
c6:e1:fe:f4:a0:b3:b0:56:bc:50:21:f0:45:e4:a0:42:dc:05:
4a:c1:7d:b0:af:eb:5a:57:5a:9c:39:33:10:6c:06:79:c2:f2:
01:dc:5d:16:11:f4:9f:ea:74:2f:d7:54:76:d8:0a:6d:0a:b1:
9b:b4:57:43:6a:b8:8a:02:51:07:9f:a9:8e:d9:2f:d6:b5:1f:
c6:16:98:1a:c7:a1:20:2b:b4:a8:bf:99:48:df:fd:ea:2c:98:
e0:5c:86:9c:51:3a:8e:93:30:9f:3c:a0:3f:3d:90:d1:49:1f:
a9:5a:f2:b8:7a:04:60:9f:b3:d0:af:e1:9f:f4:96:d2:b1:fe:
a6:05:d2:a3:c5:d5:06:dd:3e:6b:a0:22:06:4a:a3:55:b1:8f:
e4:11:21:12:ce:4e:1e:22:77:2f:a4:8f:da:a9:9f:32:5c:e8:
9f:9e:39:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:55 2025 by rpki-client