Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/EVnUPVwAtpypl7WyGCL8NYtbcig.roa
File: EVnUPVwAtpypl7WyGCL8NYtbcig.roa (raw, json)
Hash identifier: enl/RvF60fj5JsdmWvMhI6uUTeBgW1A7C1frBXwjC7w=
Subject key identifier: 11:59:D4:3D:5C:00:B6:9C:A9:97:B5:B2:18:22:FC:35:8B:5B:72:28
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0185714C15BEF48C17D42F798E1CDFA59136
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/EVnUPVwAtpypl7WyGCL8NYtbcig.roa
Signing time: Mon 02 Jan 2023 07:04:49 +0000
ROA not before: Mon 02 Jan 2023 07:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202358
IP address blocks: 45.148.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:15:be:f4:8c:17:d4:2f:79:8e:1c:df:a5:91:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Jan 2 07:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1159d43d5c00b69ca997b5b21822fc358b5b7228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:18:ba:78:bc:b7:29:d2:db:f6:47:c4:52:cc:
dd:28:c3:c7:69:11:6c:36:e9:9e:8b:e2:af:b5:11:
a3:b2:76:b8:ca:06:d9:cf:2b:e8:ac:f4:7e:f4:18:
3f:34:d9:ab:96:fe:29:d7:36:72:41:cc:cf:79:c2:
f9:9d:13:79:97:f0:09:54:4e:15:88:ca:a1:3f:95:
33:41:69:27:76:08:5b:c7:68:67:de:d1:88:84:f9:
98:9b:02:fa:dc:3e:99:fd:ba:0b:ab:98:d9:05:36:
fe:09:6b:b2:39:da:10:7b:fa:eb:c0:54:10:4f:06:
35:a3:bf:ec:0f:1c:df:a5:32:01:d8:c0:e5:33:23:
6b:c6:dc:0e:b5:1a:cd:02:1c:e5:39:44:d6:bd:c1:
08:dc:eb:d8:9a:9b:6d:d8:62:22:c1:b5:a0:2b:e8:
80:16:50:d8:6b:01:be:3e:9a:70:9e:7d:ab:a6:98:
6c:81:da:ba:6e:c0:11:e6:f2:77:3a:41:4f:79:28:
10:8f:71:c8:0f:0e:fc:b1:f4:7c:60:db:44:8d:c1:
28:71:66:85:3f:44:cd:54:8a:aa:44:43:48:2b:29:
9d:cf:b0:b9:c8:8b:cd:89:23:7b:f7:7f:9d:58:9f:
29:8a:b4:8d:af:a6:f1:a2:eb:41:77:f5:ff:75:af:
63:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:59:D4:3D:5C:00:B6:9C:A9:97:B5:B2:18:22:FC:35:8B:5B:72:28
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/EVnUPVwAtpypl7WyGCL8NYtbcig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.142.0/24
Signature Algorithm: sha256WithRSAEncryption
18:3c:eb:c8:b4:b8:a0:be:4e:a9:e7:ed:5f:2c:0a:d6:e9:bd:
cb:16:67:16:f1:b2:2f:6d:78:9a:c5:b6:cd:d7:0a:43:5c:2b:
28:28:9d:72:9d:95:af:d6:c1:54:9c:c0:2f:bc:94:55:5a:af:
c4:75:e2:e0:ad:cb:8e:9b:d4:b7:a2:fe:70:a5:5e:22:a0:78:
57:4f:ca:bf:7f:d1:ad:73:5b:b6:b2:05:be:69:91:bf:ad:a3:
d3:01:cb:5f:b2:01:b0:73:5e:e4:2f:46:87:35:bc:05:86:43:
0e:b2:fa:b8:08:d6:82:4f:c7:11:bd:ab:b0:d1:d3:03:63:67:
cf:0b:06:f7:e9:75:74:f1:a1:e7:f4:f1:f8:d8:72:4e:ca:29:
3c:94:8f:d8:69:08:43:5c:85:ad:80:9b:af:fc:21:05:02:93:
24:90:c4:fb:27:3b:79:1b:c7:6d:cd:34:9f:04:71:1f:72:85:
7e:d5:c5:00:98:99:c9:f3:a0:75:71:d9:16:d1:65:7a:7c:b2:
97:c0:f7:22:34:08:90:68:0e:d7:84:7e:70:98:cd:71:b6:86:
c3:c1:64:de:46:c0:d0:a0:13:b8:23:bf:68:9c:4f:27:11:6f:
34:ba:e8:03:74:fb:20:1c:08:fe:95:a5:2b:4f:f0:ec:e1:c4:
18:91:b5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:33 2025 by rpki-client