Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/fMRK5NuaA_lf4-FQef2WkwPp_c4.roa
File: fMRK5NuaA_lf4-FQef2WkwPp_c4.roa (raw, json)
Hash identifier: T+szoNwkUPf+rL214NzzaC1ffxRh+kit/qSdbSh5Hpk=
Subject key identifier: 7C:C4:4A:E4:DB:9A:03:F9:5F:E3:E1:50:79:FD:96:93:03:E9:FD:CE
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 0189966549EC100DE87000BE670D1B66EB5E
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/fMRK5NuaA_lf4-FQef2WkwPp_c4.roa
Signing time: Thu 27 Jul 2023 08:09:27 +0000
ROA not before: Thu 27 Jul 2023 08:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 45.131.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:96:65:49:ec:10:0d:e8:70:00:be:67:0d:1b:66:eb:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jul 27 08:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cc44ae4db9a03f95fe3e15079fd969303e9fdce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6a:0e:70:81:5a:06:8d:e6:9f:86:33:d5:d0:
6c:31:8c:21:99:77:dd:8a:e1:c6:56:4d:a5:d4:d5:
3c:6c:5b:2f:f3:72:79:76:d3:7b:dd:2e:f1:c9:eb:
2f:55:36:31:70:44:16:22:98:ee:ec:ab:14:06:f9:
d6:40:c9:ea:c8:89:8e:c9:45:93:ef:c9:10:6c:d5:
bc:e7:7c:f5:4b:45:98:eb:77:16:87:b3:a0:11:ce:
58:c6:4d:99:f6:41:b1:62:21:8d:7f:b0:fb:00:dc:
36:f1:0a:13:f2:c3:7f:f0:a2:13:ea:77:af:27:0c:
0c:48:94:c6:6a:cb:89:49:e6:48:5d:db:78:16:95:
22:da:15:c6:51:e1:1e:ee:35:94:51:73:3e:99:a1:
3a:6e:58:96:ab:d4:9b:54:db:82:37:fa:39:d6:bb:
05:b2:42:54:be:04:e3:00:ae:7d:3e:d6:bb:28:2e:
c1:44:cb:90:44:89:e2:e9:02:af:8e:8a:dd:6f:91:
5f:d8:d8:f4:57:bb:70:1b:36:fa:3c:b0:2c:e6:40:
be:b3:98:39:b9:3a:3e:ee:79:d7:54:85:88:cc:83:
7f:82:68:fb:5a:54:5f:1b:b8:04:8a:07:3e:77:3b:
2f:ac:e3:54:92:79:0d:c2:8c:e2:98:d6:a0:3e:62:
81:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C4:4A:E4:DB:9A:03:F9:5F:E3:E1:50:79:FD:96:93:03:E9:FD:CE
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/fMRK5NuaA_lf4-FQef2WkwPp_c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.228.0/22
Signature Algorithm: sha256WithRSAEncryption
48:62:45:40:4c:0c:58:60:ea:7b:8f:2a:1d:19:56:96:27:73:
da:6a:fb:db:ff:ec:4e:62:e2:d7:1d:66:74:e1:4f:3a:a3:59:
57:07:cc:a4:ce:a6:49:cf:08:41:23:a8:69:2c:ba:3d:1a:8f:
2b:55:43:fe:7f:27:1e:85:f1:ec:54:9a:a3:a9:9a:b8:ed:7a:
c7:82:8e:10:ac:9e:97:9c:62:9b:f9:80:2d:8f:98:6f:25:90:
55:25:84:de:c5:5c:76:00:15:10:a8:2e:4d:4c:2a:50:79:46:
08:6f:39:08:e8:3f:e7:2f:9c:e6:0b:17:46:5e:62:e5:7f:ad:
5f:b9:13:d6:3f:66:24:af:b7:c5:bf:68:96:2e:b1:08:8f:e2:
96:e9:49:5f:c0:44:84:6a:c7:bc:8d:ed:10:32:17:45:5e:97:
5b:04:31:3e:22:f9:9a:ec:8e:25:49:5c:09:59:d2:a7:6e:36:
0b:4d:0b:a0:cb:b8:77:52:be:3d:09:d8:8c:d0:76:81:69:0e:
12:a3:91:2c:a9:26:8b:dd:4b:4d:0a:37:de:8e:e4:f1:6e:f5:
ac:da:5a:98:55:6c:60:7c:8d:49:52:e0:b6:2f:15:6e:8f:3c:
a4:9f:df:14:8c:53:a7:cf:e5:18:91:17:db:b2:03:89:80:3d:
fc:34:b3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:24 2025 by rpki-client