Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/2Ipv2u3AXrdty-frHsNVJXcmREs.roa
File: 2Ipv2u3AXrdty-frHsNVJXcmREs.roa (raw, json)
Hash identifier: GYZZ9mQ8IZr1dbRu2mHmiFgIYMBLTC61xQCFlwBnvDc=
Subject key identifier: D8:8A:6F:DA:ED:C0:5E:B7:6D:CB:E7:EB:1E:C3:55:25:77:26:44:4B
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 018CC8DE3A389EC840F34CF738885821B064
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/2Ipv2u3AXrdty-frHsNVJXcmREs.roa
Signing time: Tue 02 Jan 2024 06:30:56 +0000
ROA not before: Tue 02 Jan 2024 06:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32780
IP address blocks: 45.87.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:3a:38:9e:c8:40:f3:4c:f7:38:88:58:21:b0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Jan 2 06:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d88a6fdaedc05eb76dcbe7eb1ec355257726444b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fe:1d:a2:04:52:98:d7:71:d7:08:e4:f0:41:
54:e4:67:a1:d7:4d:c6:c7:70:1a:9a:07:2c:59:e7:
88:df:cc:2f:84:31:65:01:52:92:bd:43:02:14:93:
45:c1:ff:54:cb:65:a7:97:5f:b0:5d:3b:e0:ec:1e:
33:cd:39:60:6a:2d:3f:b6:07:7d:a4:66:f9:be:6f:
a5:86:e7:c6:0d:cc:73:9d:49:03:e3:4f:50:0d:43:
26:43:8f:b6:5e:f4:ed:15:4c:9a:a2:47:2e:d8:a5:
e0:11:ed:7a:f6:80:a4:e9:31:75:56:cb:18:55:e5:
56:63:de:6b:b2:d9:ca:74:10:14:7d:b9:e1:1a:35:
4a:d7:45:17:fe:3a:fd:9c:3e:e8:3c:54:49:10:65:
bc:31:48:37:1c:6a:50:58:5a:b0:56:54:be:92:81:
0f:6c:17:79:52:f1:c7:ee:19:52:c0:1b:e9:78:4c:
60:3e:44:ee:3d:b8:5d:09:a1:67:60:9b:9f:4f:60:
18:c8:c1:7a:ed:84:05:c5:f0:2b:3a:19:16:62:d3:
14:90:24:a1:4e:ca:7d:8a:b5:a7:eb:94:b9:c6:c2:
a0:6b:48:e8:a3:e6:a3:05:4f:1f:66:3e:25:87:85:
3e:bc:72:fd:a7:c7:3b:ab:91:31:66:a2:b7:01:bc:
38:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8A:6F:DA:ED:C0:5E:B7:6D:CB:E7:EB:1E:C3:55:25:77:26:44:4B
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/2Ipv2u3AXrdty-frHsNVJXcmREs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.163.0/24
Signature Algorithm: sha256WithRSAEncryption
72:bd:36:4f:9c:18:7b:2c:f4:bb:f5:2b:d0:34:06:9a:0a:01:
b1:71:50:49:95:90:1a:2f:69:75:fb:8e:ce:fd:fe:39:6a:c7:
66:75:47:92:95:7f:dd:b4:b9:f3:f6:2b:10:3b:24:fd:a9:57:
a2:85:e7:54:5e:f2:69:94:58:f3:d2:2d:a4:e3:14:98:6b:a8:
aa:4b:a6:92:3c:74:9d:96:b7:e3:74:26:c0:18:ee:07:12:cd:
d3:95:49:dc:6c:87:3a:a6:fb:81:95:4d:03:d6:46:8c:a1:ab:
89:3d:73:f7:e4:48:19:0d:a0:14:c8:28:d1:69:22:0c:2e:dc:
50:f5:93:dd:5f:2b:61:8a:c1:0a:60:b8:4d:9f:2c:3d:d4:69:
47:4b:70:4d:ab:be:01:77:45:ba:67:28:b2:5c:22:d9:61:3c:
05:3d:ea:81:cb:25:1d:36:a9:6e:87:c5:9f:0e:34:8f:69:63:
99:16:b7:79:53:f1:0d:28:34:0f:7b:1c:75:b9:8b:6c:a6:f9:
4c:3c:c3:a4:b7:ee:8e:e2:cd:38:18:0e:9d:b6:63:dd:40:d2:
c0:a7:09:b0:cc:db:56:f4:8c:fb:6d:3d:a8:33:12:e6:4b:f4:
fd:84:31:7c:d1:62:98:88:c2:1d:c4:84:7b:0b:bf:37:07:e0:
22:29:09:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:55:58 2025 by rpki-client