Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/1htdhZIfJd60z1wm_Xdh9tBJiUc.roa
File: 1htdhZIfJd60z1wm_Xdh9tBJiUc.roa (raw, json)
Hash identifier: h9YTcARzx5Xb7QDaD87CmWrQsApslj6qs2xWyGt7YXw=
Subject key identifier: D6:1B:5D:85:92:1F:25:DE:B4:CF:5C:26:FD:77:61:F6:D0:49:89:47
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 01825A0219CFBF9BD631242D2B2B9FE1F891
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/1htdhZIfJd60z1wm_Xdh9tBJiUc.roa
Signing time: Mon 01 Aug 2022 15:24:23 +0000
ROA not before: Mon 01 Aug 2022 15:24:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 4842
IP address blocks: 45.88.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5a:02:19:cf:bf:9b:d6:31:24:2d:2b:2b:9f:e1:f8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Aug 1 15:24:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d61b5d85921f25deb4cf5c26fd7761f6d0498947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cb:48:f0:77:39:c9:c8:43:74:64:fd:ba:e4:
e0:b9:14:96:14:13:5a:81:60:00:e9:31:01:bc:aa:
e1:ac:e5:9a:e4:cb:f7:e2:df:3b:ea:ae:f4:18:ac:
ad:08:bd:02:b7:c5:14:59:28:68:df:a2:a0:8e:fc:
2a:d0:c2:37:68:f6:ea:f7:66:12:1a:d8:17:02:58:
7f:c4:fa:91:c0:79:db:89:35:2a:77:66:71:f6:17:
02:be:01:82:9d:bf:75:e7:a5:af:3d:43:39:c8:a6:
1b:68:92:f7:13:16:bb:6d:cd:cb:4a:db:c2:49:17:
08:4e:39:0e:01:2c:44:51:ee:11:81:b0:12:ba:bd:
b8:8e:6d:ce:98:8d:6b:06:21:1f:7b:e6:1f:86:1a:
09:9e:4d:b3:0e:af:f1:ea:fb:f4:ea:30:b4:27:68:
a3:f7:d0:df:7b:df:3c:c5:50:66:73:2f:52:1d:aa:
9b:34:50:b9:da:da:58:9d:bb:53:17:53:b6:03:a2:
9f:42:41:d6:12:f4:27:68:79:5c:26:fc:df:67:bb:
6e:4c:78:02:77:65:d2:59:25:2a:1e:20:ad:ea:2d:
0c:be:84:e8:49:5a:73:13:84:5b:3e:b5:09:0f:e3:
b0:f7:2b:6c:cd:8d:28:d3:50:fc:34:2d:36:c2:bb:
c9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1B:5D:85:92:1F:25:DE:B4:CF:5C:26:FD:77:61:F6:D0:49:89:47
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/1htdhZIfJd60z1wm_Xdh9tBJiUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.11.0/24
Signature Algorithm: sha256WithRSAEncryption
91:3c:e9:9c:9a:f6:09:19:e9:39:d4:22:0f:91:55:c9:54:43:
b2:f0:14:da:40:49:33:b2:19:82:0b:87:9a:3b:3f:40:fa:c4:
fb:d2:3c:5d:63:d8:ac:bd:c6:d9:54:0a:51:19:55:2b:06:96:
60:fe:29:45:fd:7c:25:07:fb:b3:40:05:f7:54:fc:71:c5:51:
ba:dc:7e:9f:cd:e4:c3:53:bb:eb:bd:f6:45:be:27:59:fe:39:
35:0a:05:fe:0d:44:90:bf:b2:92:d9:9f:d1:cc:2a:d0:a5:6d:
fe:7d:71:e9:3d:78:48:c9:c1:7f:df:99:42:5c:ef:1c:03:c9:
98:84:ec:c8:a8:86:08:8d:81:68:d5:a0:09:1b:7d:51:87:bd:
23:24:71:29:d4:71:38:54:36:95:b9:50:b9:01:02:57:6c:cd:
20:fa:c6:c3:dc:1e:1b:b3:75:0d:22:0c:aa:5d:a5:a9:1e:d4:
a5:1c:77:28:de:8d:1e:c9:12:2e:ea:ec:51:e5:18:82:74:1d:
1e:64:62:0f:8b:80:14:8a:5f:e8:80:59:3c:a8:95:73:9d:0d:
8f:c6:b2:ab:4b:c1:af:79:b7:22:11:8f:bd:9b:0c:78:df:5d:
15:13:bd:07:86:3f:eb:70:ba:3d:4e:d0:3d:d8:55:4b:20:9d:
5f:32:73:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:47 2025 by rpki-client