Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/XozeMpbzbEDcIpmdLM4vGLQ8DcI.roa
File: XozeMpbzbEDcIpmdLM4vGLQ8DcI.roa (raw, json)
Hash identifier: WbMPqU1EYZIuqBZdvzoQs2z9yY993XPwlnB/uXnsEj8=
Subject key identifier: 5E:8C:DE:32:96:F3:6C:40:DC:22:99:9D:2C:CE:2F:18:B4:3C:0D:C2
Certificate issuer: /CN=b7ecf9d374cc0f739671ee55055bd58c5fb767a8
Certificate serial: 07863D14
Authority key identifier: B7:EC:F9:D3:74:CC:0F:73:96:71:EE:55:05:5B:D5:8C:5F:B7:67:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-z503TMD3OWce5VBVvVjF-3Z6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/XozeMpbzbEDcIpmdLM4vGLQ8DcI.roa
Signing time: Sat 01 Jan 2022 14:01:09 +0000
ROA not before: Sat 01 Jan 2022 14:01:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 45.150.222.0/24 maxlen: 24
45.150.223.0/24 maxlen: 24
45.150.220.0/24 maxlen: 24
45.150.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126237972 (0x7863d14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ecf9d374cc0f739671ee55055bd58c5fb767a8
Validity
Not Before: Jan 1 14:01:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e8cde3296f36c40dc22999d2cce2f18b43c0dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:ab:13:8e:44:4d:62:6d:7d:ab:c2:1a:8e:
39:fe:03:85:5a:03:84:bf:ca:38:98:82:2a:29:86:
3b:c4:4c:fc:27:47:7a:bd:90:b9:12:e0:09:d8:49:
85:77:65:35:16:c2:78:44:bb:51:2e:32:c2:fe:db:
91:78:15:14:52:66:1f:2e:12:d2:20:98:d1:9f:28:
09:fc:88:58:ea:30:e3:56:a0:ed:6b:0e:a9:06:19:
ce:5d:c1:56:34:17:c2:34:7f:25:c7:f2:c6:00:b2:
b9:aa:00:ff:66:cd:29:0a:a0:f6:08:7b:07:02:88:
f5:40:e8:bd:37:96:a0:81:a7:2a:73:cc:16:20:f1:
77:b1:1c:44:ca:dd:ad:48:d5:b1:47:28:2d:8b:80:
69:cd:12:5f:be:09:bb:90:9b:d2:16:1c:d2:48:63:
05:d1:30:48:97:96:f6:6e:31:9f:a1:04:5a:97:6a:
d7:aa:1f:96:88:c9:9b:f3:6e:11:95:17:57:09:ff:
b3:02:53:a4:dc:33:51:8b:2b:8a:23:86:38:15:0f:
47:db:de:48:ba:e6:c3:87:69:10:e4:e6:08:b3:e9:
88:f7:8f:ab:a4:6a:1f:60:84:d9:29:96:a7:3b:78:
cb:a8:67:48:8a:69:19:d5:a2:63:0e:2c:77:e9:a0:
17:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8C:DE:32:96:F3:6C:40:DC:22:99:9D:2C:CE:2F:18:B4:3C:0D:C2
X509v3 Authority Key Identifier:
keyid:B7:EC:F9:D3:74:CC:0F:73:96:71:EE:55:05:5B:D5:8C:5F:B7:67:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-z503TMD3OWce5VBVvVjF-3Z6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/XozeMpbzbEDcIpmdLM4vGLQ8DcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/t-z503TMD3OWce5VBVvVjF-3Z6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.220.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:95:7c:5a:96:cb:ba:7d:52:55:6e:8d:71:c7:38:00:87:5e:
7a:e4:cb:fd:59:6d:3b:6e:89:a9:92:9e:e8:da:29:0a:d4:0e:
be:d0:ec:5a:79:dc:bd:24:09:fd:de:f0:6d:e8:49:83:3b:8d:
f6:f2:99:14:bd:04:e0:44:38:13:a8:23:76:38:48:f1:42:d0:
ee:c1:99:74:4d:68:a9:f3:22:19:47:81:c6:f9:aa:57:6f:70:
d6:3b:6f:01:c7:82:c6:c4:d3:6a:ee:87:ad:1d:b3:87:e9:6b:
df:e9:44:96:bc:f6:52:1a:87:ea:ba:67:b1:69:ac:b8:be:06:
03:0c:56:db:ea:7a:ad:aa:1a:19:ba:16:3e:37:3b:cd:8c:ac:
e0:15:19:28:8c:61:96:f1:a3:b2:e4:2d:24:b2:f4:10:32:15:
76:67:65:6d:8e:d3:01:34:19:87:90:74:d5:f7:d6:f7:97:fd:
19:5e:d5:99:b8:6b:aa:4f:f2:bd:3c:a4:55:8a:78:fb:0c:e1:
19:b5:00:49:15:8b:f8:c6:2e:63:13:59:b9:31:25:30:77:bc:
56:b4:ce:f4:7b:bf:79:7c:83:62:17:08:a6:ab:2d:97:1c:9b:
47:13:75:a0:50:f4:18:34:f5:38:58:30:fd:75:73:7c:4e:f5:
3b:1d:fb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:12 2025 by rpki-client