Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a59fb5-2957-47f0-aeb1-f6fc289a68ac/1/m3c0QaIv-exv8dIcb66H5rgPh64.roa
File: m3c0QaIv-exv8dIcb66H5rgPh64.roa (raw, json)
Hash identifier: xX/g8oUtbNQXjz7xQn4pk5H6SL1CDg+dMsQed3/gZ9Y=
Subject key identifier: 9B:77:34:41:A2:2F:F9:EC:6F:F1:D2:1C:6F:AE:87:E6:B8:0F:87:AE
Certificate issuer: /CN=a57699cb6d240a6dd70ed2a188c8d7056b0be8ad
Certificate serial: 04E2DDB8
Authority key identifier: A5:76:99:CB:6D:24:0A:6D:D7:0E:D2:A1:88:C8:D7:05:6B:0B:E8:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXaZy20kCm3XDtKhiMjXBWsL6K0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a59fb5-2957-47f0-aeb1-f6fc289a68ac/1/m3c0QaIv-exv8dIcb66H5rgPh64.roa
Signing time: Sat 01 Jan 2022 14:05:47 +0000
ROA not before: Sat 01 Jan 2022 14:05:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57271
IP address blocks: 45.150.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81976760 (0x4e2ddb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57699cb6d240a6dd70ed2a188c8d7056b0be8ad
Validity
Not Before: Jan 1 14:05:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b773441a22ff9ec6ff1d21c6fae87e6b80f87ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:8d:05:bb:93:fb:c9:95:0a:a8:8e:48:9b:
5f:ae:fd:3f:45:c8:d7:23:51:bf:40:a0:dd:b4:12:
cb:24:78:b0:48:94:e9:7a:d0:82:5f:6b:59:3f:09:
4e:38:35:ab:65:8d:d4:3e:5c:fe:fe:a3:31:ff:cd:
c7:00:a6:bf:8e:9f:84:5b:5f:51:67:a5:05:4c:19:
ac:76:d4:f0:90:72:b7:eb:49:6c:f0:f2:02:38:2c:
ce:71:a8:33:07:d5:ba:c2:d4:4f:c6:5d:c0:8b:dd:
44:f9:d2:5b:33:64:03:7b:f4:ca:c3:d5:bf:c5:f3:
8f:ac:80:b7:cc:68:2f:c4:02:03:29:aa:fb:5d:69:
2e:92:36:11:c5:33:4d:4a:30:c9:4f:81:3f:08:46:
4f:9e:0b:02:80:74:d2:69:9c:65:23:66:d9:4a:34:
f3:c6:6a:67:4c:5e:a8:2f:dc:dc:8d:24:a5:c8:90:
08:40:37:1c:4f:b8:d2:c3:c0:ef:21:94:49:c0:69:
d8:c4:f7:d1:f3:87:3b:2c:f8:11:e2:d8:c3:04:16:
0d:4e:bc:f9:92:84:84:3f:3a:e9:ce:02:15:10:8c:
6f:0b:f6:c3:50:73:af:a6:f8:bc:9b:da:c6:cd:81:
d9:45:f7:29:1e:a1:13:1f:93:a6:64:3d:04:44:f5:
a7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:77:34:41:A2:2F:F9:EC:6F:F1:D2:1C:6F:AE:87:E6:B8:0F:87:AE
X509v3 Authority Key Identifier:
keyid:A5:76:99:CB:6D:24:0A:6D:D7:0E:D2:A1:88:C8:D7:05:6B:0B:E8:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXaZy20kCm3XDtKhiMjXBWsL6K0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a59fb5-2957-47f0-aeb1-f6fc289a68ac/1/m3c0QaIv-exv8dIcb66H5rgPh64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a59fb5-2957-47f0-aeb1-f6fc289a68ac/1/pXaZy20kCm3XDtKhiMjXBWsL6K0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.115.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:61:16:fa:be:ed:ce:92:e8:47:80:c5:03:42:22:83:b7:71:
0d:47:8a:2f:5f:f1:bb:cd:8b:81:97:ae:ca:7e:88:74:8a:9a:
35:1a:e0:5b:0c:83:ae:3c:13:25:64:08:84:13:ae:3a:d5:c4:
58:79:4f:66:89:0c:58:69:37:79:1b:5e:c8:7b:28:25:e1:6f:
f6:91:a8:ec:5b:58:07:61:67:c5:4d:94:70:46:21:95:56:b8:
05:07:33:90:7d:38:9e:1f:f6:6f:8c:b0:83:13:9a:14:b5:31:
13:55:c8:37:dc:31:1a:2d:7d:04:d6:c5:41:86:84:11:4a:0a:
4a:c1:5f:36:be:05:92:e0:b5:49:3c:a6:2a:0f:7c:d5:40:4d:
23:7f:c7:bf:cc:c9:48:bd:75:f1:42:2d:58:90:64:9b:61:c0:
b3:bd:f4:e8:65:6a:da:09:a5:a2:6d:dc:ff:ae:79:07:5b:0f:
b7:7c:23:7f:23:27:64:da:77:27:5c:67:35:37:bf:cc:2a:bd:
65:80:71:c4:e3:40:fd:c0:9b:9e:8e:a4:b2:10:6f:a5:4c:e7:
91:e1:6a:96:d8:6f:e1:26:4e:34:d5:d4:b4:fe:3b:01:8d:ea:
9f:44:97:2d:11:d7:b6:ed:03:cd:b0:bc:1e:74:3b:4a:d2:95:
c7:c6:80:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:57 2025 by rpki-client