Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/4xgGmLupLCCOWibLWyTNt3tn2zM.roa
File: 4xgGmLupLCCOWibLWyTNt3tn2zM.roa (raw, json)
Hash identifier: 8li+L8FQV0upTOisMTv/deuSwNavKp5noDHku9tJs8k=
Subject key identifier: E3:18:06:98:BB:A9:2C:20:8E:5A:26:CB:5B:24:CD:B7:7B:67:DB:33
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 01823531A8EF4FC06E99F60D80CE5EE93B9B
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/4xgGmLupLCCOWibLWyTNt3tn2zM.roa
Signing time: Mon 25 Jul 2022 11:50:23 +0000
ROA not before: Mon 25 Jul 2022 11:50:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 194.150.204.0/24 maxlen: 24
45.95.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:35:31:a8:ef:4f:c0:6e:99:f6:0d:80:ce:5e:e9:3b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Jul 25 11:50:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3180698bba92c208e5a26cb5b24cdb77b67db33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cb:53:3d:b1:68:65:dd:d0:49:30:b7:b4:a6:
8d:58:f8:b9:40:00:2f:b3:7e:ad:9f:f4:58:40:80:
20:c6:3e:ea:64:f5:c8:90:77:3a:2f:0a:b9:a8:7a:
20:c2:5a:44:b1:8f:8d:ed:ef:c7:ff:14:18:76:c6:
bb:c5:8a:32:7b:b6:a2:da:d1:29:e2:b6:66:8e:40:
0d:0e:6e:a5:fe:eb:2c:95:46:0e:a6:2d:62:e9:84:
c5:00:1a:29:cb:e3:fe:fe:df:87:53:a5:3f:93:c8:
a8:ea:77:c6:9f:4e:8c:76:2c:9c:28:eb:11:dd:97:
d1:b8:20:a1:23:ab:de:71:76:44:ec:45:00:7d:1a:
61:13:ef:e9:1e:ef:58:12:e8:2c:9d:99:11:3f:59:
a6:a9:72:24:49:51:d1:af:10:2b:39:4a:a6:78:dc:
0c:48:98:2b:0f:be:d5:8e:9f:98:dc:c2:f4:bf:c2:
52:36:1e:53:94:c1:48:aa:7d:35:77:9b:28:56:90:
9e:d6:8f:93:bf:03:a4:26:92:3d:25:0e:7d:0c:ee:
39:39:84:8b:95:51:fa:aa:ab:6f:2c:3d:94:70:c3:
76:ec:a5:46:10:a7:19:1e:1b:32:6f:47:6e:cf:3b:
f2:55:14:f6:01:cf:8d:dc:5d:74:e7:0d:1f:49:e1:
61:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:18:06:98:BB:A9:2C:20:8E:5A:26:CB:5B:24:CD:B7:7B:67:DB:33
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/4xgGmLupLCCOWibLWyTNt3tn2zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.64.0/24
194.150.204.0/24
Signature Algorithm: sha256WithRSAEncryption
98:5a:38:02:2a:18:3f:46:70:9c:f6:34:7a:50:64:e0:51:97:
00:e6:fd:ec:46:c2:39:95:02:82:1d:00:8c:c1:56:a1:a5:a8:
35:a5:fb:cb:aa:95:ec:b3:2c:e6:3f:7d:86:54:50:4a:fa:e4:
b6:c5:c3:6d:f3:b8:bd:cf:89:fc:41:23:23:96:f3:0c:d1:f2:
c3:6b:23:26:0e:9f:15:da:19:19:e0:25:83:01:ef:0e:39:2b:
8f:de:0e:d1:04:c5:55:7b:cd:b2:52:f2:a6:48:0e:fb:72:23:
dc:5c:bd:60:79:6a:fa:6c:79:97:6e:51:8e:6f:57:48:0a:35:
d7:aa:7c:94:0a:cd:3b:82:96:06:de:57:63:67:4b:c4:a4:ec:
d4:0b:ae:5c:55:21:20:6b:9e:ed:80:7e:24:53:1c:9a:e9:f2:
ae:3d:87:ba:b8:10:62:6d:92:13:6a:17:ac:cb:37:7c:80:cf:
41:25:53:bf:6b:e9:76:dd:19:57:22:e0:02:a9:46:97:52:91:
45:d5:4b:80:af:fc:6e:9d:71:d3:9c:9e:ce:df:0d:0b:a0:16:
48:fb:d7:8a:a6:80:11:07:66:d6:3f:fd:57:5c:8d:46:13:65:
23:c6:6f:af:80:94:6e:24:a5:b7:0b:26:6c:94:96:8c:9d:8d:
8b:9b:89:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:02 2025 by rpki-client