Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/vUgrX6MhhGbms9JxDMx3dvNsWcU.roa
File: vUgrX6MhhGbms9JxDMx3dvNsWcU.roa (raw, json)
Hash identifier: GVne4KZAoemtGGWA7Zcts+TPDIz7FTBCGpzAlEWKv8Y=
Subject key identifier: BD:48:2B:5F:A3:21:84:66:E6:B3:D2:71:0C:CC:77:76:F3:6C:59:C5
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 018C0FFF57D69031FC7647D07F401F44B22D
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/vUgrX6MhhGbms9JxDMx3dvNsWcU.roa
Signing time: Mon 27 Nov 2023 08:57:21 +0000
ROA not before: Mon 27 Nov 2023 08:57:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399498
IP address blocks: 45.86.188.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0f:ff:57:d6:90:31:fc:76:47:d0:7f:40:1f:44:b2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Nov 27 08:57:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd482b5fa3218466e6b3d2710ccc7776f36c59c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4a:20:e6:6f:53:27:2e:0d:de:f4:d8:a3:a2:
78:a8:98:2c:ee:d7:1b:52:97:fe:89:8a:45:08:ed:
91:e7:bf:1e:8b:5f:53:7d:f8:4d:0d:40:53:f6:67:
cf:d0:8f:fb:a8:6a:7d:22:71:6e:71:f0:36:b3:0c:
78:d4:a2:f5:da:a9:8d:b3:cc:fb:14:fb:6e:7f:72:
70:0e:90:c5:13:1f:43:4a:20:41:ec:67:bd:f4:9d:
df:ea:26:b9:14:40:6a:66:41:98:1f:ec:2e:85:23:
b6:ee:0f:ce:49:97:e9:7a:8a:ba:06:9a:49:37:65:
8c:60:f0:32:51:51:25:64:57:bc:91:77:96:4e:41:
7d:57:94:0d:89:bd:d6:8b:f0:fd:9f:26:ac:9c:71:
d3:51:d8:6b:e9:ed:72:d3:c5:59:62:50:f8:d6:ee:
ec:26:a1:fe:ae:3b:60:32:d2:52:2f:2b:99:3b:11:
1f:40:01:f8:4f:11:f1:1f:92:0a:02:0a:ef:ac:14:
06:d0:1a:b9:74:5e:08:98:d2:cd:26:b6:63:44:89:
c0:f3:e1:52:76:a1:f5:f7:6c:32:94:ca:b8:e5:e3:
90:21:53:06:57:d2:8a:9e:75:b7:53:6f:4f:f6:5b:
2f:3d:6b:19:7e:01:9c:22:55:6d:83:4f:0c:d8:63:
57:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:48:2B:5F:A3:21:84:66:E6:B3:D2:71:0C:CC:77:76:F3:6C:59:C5
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/vUgrX6MhhGbms9JxDMx3dvNsWcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.188.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:89:2b:07:58:c2:51:31:58:17:2f:67:e6:c4:33:0b:b8:00:
1a:d1:6d:54:e3:de:e4:a0:8c:94:eb:5a:bc:fa:d1:8f:af:9d:
eb:3c:f3:2e:3f:e8:5d:77:bf:f1:79:a3:33:10:01:1a:44:0d:
71:a8:11:7c:b5:49:35:f1:54:de:c6:0b:7f:20:e7:10:73:d7:
50:6c:29:eb:48:1b:ca:eb:f5:0c:31:19:32:8d:7b:3d:6c:8a:
0a:36:83:c7:35:31:cd:b3:01:73:e2:a7:50:ed:ef:ba:50:36:
57:6e:02:a1:a6:97:b7:b4:0a:07:cd:95:5f:3a:fc:a2:39:dc:
bf:e5:57:83:e8:54:ef:88:23:cf:6a:ab:75:91:56:91:da:78:
bd:bc:9e:96:66:42:c1:6b:ba:9c:7f:49:ce:55:91:d0:c6:ca:
5e:88:2e:d9:88:1b:a6:bf:e6:48:d2:6a:4f:93:36:16:3b:a8:
b7:26:81:fe:88:3b:f6:df:d3:db:94:e4:eb:16:cb:16:34:99:
42:9d:27:2c:8d:0e:c8:fd:33:b6:9c:00:dd:27:28:48:8c:ef:
a0:d0:64:27:26:05:59:43:a8:c0:0d:cd:63:9a:1c:3b:ff:46:
db:19:4a:4e:1b:f5:e2:66:51:e5:14:fc:da:2e:ec:4a:f8:36:
c1:79:dc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:08 2025 by rpki-client