Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/zVmCjYMrL11tn67_dSrwrx22FEU.roa
File: zVmCjYMrL11tn67_dSrwrx22FEU.roa (raw, json)
Hash identifier: eHjNEHVCVsM3y7Olkl9wFUdF/Jym87Nl3ogUssXAUI4=
Subject key identifier: CD:59:82:8D:83:2B:2F:5D:6D:9F:AE:FF:75:2A:F0:AF:1D:B6:14:45
Certificate issuer: /CN=b7ecf9d374cc0f739671ee55055bd58c5fb767a8
Certificate serial: 078710C6
Authority key identifier: B7:EC:F9:D3:74:CC:0F:73:96:71:EE:55:05:5B:D5:8C:5F:B7:67:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-z503TMD3OWce5VBVvVjF-3Z6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/zVmCjYMrL11tn67_dSrwrx22FEU.roa
Signing time: Sat 01 Jan 2022 14:01:09 +0000
ROA not before: Sat 01 Jan 2022 14:01:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208254
IP address blocks: 45.150.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126292166 (0x78710c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ecf9d374cc0f739671ee55055bd58c5fb767a8
Validity
Not Before: Jan 1 14:01:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd59828d832b2f5d6d9faeff752af0af1db61445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:fd:c6:dd:ed:1c:b6:e0:b8:17:8b:65:48:
39:3b:5c:db:6b:65:3e:6a:69:3e:bb:2c:0c:86:0b:
b9:53:87:29:db:e0:21:bf:c5:86:93:e6:7f:67:c8:
dc:28:65:6d:f4:a4:98:ab:48:2f:34:07:06:aa:8f:
b7:d4:82:30:33:f9:ee:fb:e9:7a:d9:78:df:04:57:
78:e4:2c:5c:56:f8:b5:2e:b7:7a:12:6d:74:89:22:
6b:4d:de:ab:6a:22:26:28:27:7b:87:46:3c:02:4e:
da:fc:49:5b:26:7a:0f:1d:88:a7:76:02:b6:f0:a1:
a7:6e:f2:63:ac:8f:0b:77:b8:f3:5e:fb:af:bc:99:
52:a8:ae:d4:01:70:b2:36:80:7a:38:78:ee:e3:3b:
fd:a1:4e:58:3a:5f:3e:bc:d1:2a:50:07:97:c1:92:
bc:ac:1e:9b:0d:91:84:e2:67:ab:ee:d3:9e:3a:97:
37:60:e2:bb:ed:2f:7d:6f:49:a9:91:29:03:77:28:
0c:a5:84:60:2b:a2:64:63:8b:9c:21:b0:78:ab:31:
16:ac:4b:c3:08:45:ce:30:f4:c6:c0:1d:4c:71:e5:
47:a9:67:34:87:3c:14:93:ba:b6:a5:a1:12:e5:b3:
f5:a8:6f:01:b6:45:2f:a7:d1:0a:b1:6b:24:3d:65:
2e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:59:82:8D:83:2B:2F:5D:6D:9F:AE:FF:75:2A:F0:AF:1D:B6:14:45
X509v3 Authority Key Identifier:
keyid:B7:EC:F9:D3:74:CC:0F:73:96:71:EE:55:05:5B:D5:8C:5F:B7:67:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-z503TMD3OWce5VBVvVjF-3Z6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/zVmCjYMrL11tn67_dSrwrx22FEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/t-z503TMD3OWce5VBVvVjF-3Z6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.223.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:f3:4f:07:56:24:a2:27:91:b1:b6:fb:b9:c5:fa:a3:49:b1:
2a:dd:20:24:99:bd:ea:ca:d9:f0:76:cd:f6:d3:d7:90:7e:0b:
91:3b:e1:3a:bd:a4:fd:9c:2f:17:92:84:a1:8c:d5:8b:a7:18:
95:32:02:51:71:9a:6c:30:e2:bb:7f:92:41:6d:eb:fb:4f:89:
b2:43:d2:3e:11:5e:74:47:d4:77:fa:8c:a6:d8:d0:89:87:a7:
f7:32:1c:76:4e:cb:4f:56:8e:fe:68:59:26:42:ad:c1:7b:27:
54:c9:b0:21:85:ff:91:af:c9:dd:75:97:a9:0e:07:aa:ce:44:
9a:47:45:cf:7a:25:ea:b6:ed:46:70:c6:a5:f2:40:06:75:c3:
e2:e3:d9:40:ab:2a:36:3b:79:b8:78:fd:02:d6:3e:16:4c:71:
b0:c9:e8:a9:6f:07:d7:04:e1:4c:d1:f3:70:dc:13:f0:0c:ee:
39:39:e4:71:72:84:4e:78:e1:4e:85:fc:da:59:dd:59:a9:10:
3f:6a:16:c5:c9:d2:d9:9a:e6:ad:a9:ab:c7:a7:c2:ed:54:e9:
53:a6:38:58:f4:a3:6c:19:d8:6f:7e:71:d4:2e:ad:1f:2d:39:
11:39:25:64:8d:5c:34:71:0c:b1:eb:fd:a2:74:04:3e:3a:80:
d2:00:90:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:02 2025 by rpki-client