Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/zC2MbyKuEZO6uYgg6kMLJfWl_K4.roa
File: zC2MbyKuEZO6uYgg6kMLJfWl_K4.roa (raw, json)
Hash identifier: nBAdeHgGJ/0f3mIKwQxg3KzYparYyxvJUVgWdZSAcdk=
Subject key identifier: CC:2D:8C:6F:22:AE:11:93:BA:B9:88:20:EA:43:0B:25:F5:A5:FC:AE
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 01DECE52
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/zC2MbyKuEZO6uYgg6kMLJfWl_K4.roa
Signing time: Tue 08 Mar 2022 09:10:50 +0000
ROA not before: Tue 08 Mar 2022 09:10:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 18345
IP address blocks: 45.84.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31379026 (0x1dece52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Mar 8 09:10:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc2d8c6f22ae1193bab98820ea430b25f5a5fcae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:71:84:94:24:2f:43:15:a2:4d:e7:71:2c:df:
31:c1:87:f4:ec:6a:4e:9c:61:6d:fc:49:e4:7e:d0:
f5:68:1d:f4:0b:32:c8:d1:12:2f:b1:11:b4:61:be:
7b:fc:52:df:f4:9c:95:7f:f8:4e:68:7e:f8:f5:0b:
e0:10:ba:07:37:60:0f:c7:0f:a3:59:43:b1:bf:9f:
2c:ee:9d:b1:3b:67:43:cd:a4:05:30:54:c3:80:0e:
79:fa:7c:3a:b2:63:3e:da:3e:46:20:e6:ea:aa:d8:
8e:e0:65:47:c1:4b:4b:81:96:5e:b1:15:8e:8c:44:
35:a6:1f:3e:c4:c1:a5:30:16:fe:6a:67:6b:e0:4d:
6c:55:9a:de:4d:40:8f:6c:51:96:65:8b:23:59:a3:
44:2f:26:19:f8:e1:5f:0e:6c:88:88:95:95:62:6d:
9b:58:55:88:9b:f6:52:2e:f6:04:41:7b:d9:52:dd:
fd:f3:f0:bd:2c:ba:e3:ee:80:92:f5:bb:e2:d2:af:
ee:23:61:67:99:5e:b4:cd:e2:d7:2f:6f:9f:55:05:
36:43:36:a6:cb:b2:43:3e:8a:4f:7d:74:27:bf:6c:
bd:9a:c7:bf:bb:e5:23:30:dc:9f:47:4d:06:a6:5f:
91:db:78:90:84:8e:b6:35:f0:d7:f7:17:e4:58:04:
5a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2D:8C:6F:22:AE:11:93:BA:B9:88:20:EA:43:0B:25:F5:A5:FC:AE
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/zC2MbyKuEZO6uYgg6kMLJfWl_K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.56.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:bc:e7:1c:47:68:67:6e:a3:a3:25:eb:3c:1a:cf:60:38:b5:
25:e7:c5:95:42:be:19:2a:4c:80:99:06:55:2f:d5:f4:0f:fa:
57:d7:b7:75:f7:1d:3b:ab:98:61:3d:ed:c1:56:c5:1b:d9:36:
ca:51:35:42:a7:d5:ff:3f:63:cd:70:ab:0d:57:c5:f8:03:3f:
3d:cb:f5:6e:b3:59:1c:21:20:8f:46:de:7c:9a:b4:ad:c3:a8:
db:d1:ae:f9:11:0d:21:58:94:f1:77:ca:4b:5c:02:df:a9:01:
b5:d0:df:36:ac:79:04:97:82:cd:22:61:c0:04:85:08:03:38:
f6:18:c4:b9:58:b7:10:17:92:42:d8:43:90:c8:63:d3:5f:f6:
07:50:b7:02:16:1d:2b:23:40:7b:cc:65:10:b2:dc:10:7a:2d:
9e:27:90:3e:85:b9:1d:5c:d3:70:d8:1f:63:5a:a8:0e:7d:28:
be:ae:31:ec:64:76:07:84:4a:89:1f:52:5e:ef:a9:d5:98:45:
87:27:e7:7a:75:20:09:0d:81:8a:12:7d:21:78:55:b6:92:ea:
67:a3:4f:c0:a4:ae:dc:c7:7a:ee:97:dd:d6:60:a6:11:2e:80:
87:ae:e7:17:cd:a8:9a:81:c8:11:eb:41:d3:8e:d6:3a:1e:a0:
21:1f:f5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:30 2025 by rpki-client