Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/35NcbHO2AyvrE8ft-s_0zJVh90U.roa
File: 35NcbHO2AyvrE8ft-s_0zJVh90U.roa (raw, json)
Hash identifier: IYyg6QhSb+gaEy1zKhcfTZe58Tw/XGocyTGc/VIvKM0=
Subject key identifier: DF:93:5C:6C:73:B6:03:2B:EB:13:C7:ED:FA:CF:F4:CC:95:61:F7:45
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 0182448947036828F566A06DAA5ACD9ED6EE
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/35NcbHO2AyvrE8ft-s_0zJVh90U.roa
Signing time: Thu 28 Jul 2022 11:20:23 +0000
ROA not before: Thu 28 Jul 2022 11:20:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 45.143.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:44:89:47:03:68:28:f5:66:a0:6d:aa:5a:cd:9e:d6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Jul 28 11:20:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df935c6c73b6032beb13c7edfacff4cc9561f745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:64:8c:74:e0:83:9b:d1:e8:31:a1:31:4d:af:
dc:0c:a9:98:6d:b1:02:44:2b:89:11:1e:81:fc:05:
33:cf:77:ec:5f:af:06:db:31:bd:ae:58:6d:f7:6f:
59:64:13:34:d6:43:06:e8:10:60:42:09:30:86:2a:
f9:80:26:6f:88:00:9f:35:58:f0:3a:3b:06:36:10:
7e:87:48:14:99:a0:ee:f6:99:3a:b4:98:12:55:7f:
40:d5:27:aa:70:10:6d:8a:05:c7:15:5a:d1:1f:ea:
2e:29:b6:ee:05:17:f2:16:30:c6:18:d0:93:f1:35:
38:f4:db:27:ca:c2:dd:b7:59:22:b1:a1:4c:0c:a3:
12:f9:5b:97:f6:76:e1:08:71:e8:f7:1d:f0:6d:35:
c0:34:42:e7:c8:4a:1a:4a:7f:18:e7:61:9a:30:be:
35:91:4d:15:3a:92:90:e9:35:7d:26:3c:c6:7a:63:
7e:5e:b4:a2:b4:5c:cf:e8:6a:13:bc:3b:5d:73:1e:
76:95:51:1c:e0:ef:1e:71:2e:93:af:c3:45:7a:d2:
5f:be:e8:52:81:02:bf:36:f9:f8:e4:2e:31:b3:82:
9f:75:b2:63:30:9f:21:01:e3:ae:77:9a:58:03:91:
60:96:8c:26:89:31:75:b9:a4:81:96:70:08:ed:8f:
9f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:93:5C:6C:73:B6:03:2B:EB:13:C7:ED:FA:CF:F4:CC:95:61:F7:45
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/35NcbHO2AyvrE8ft-s_0zJVh90U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.11.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:54:12:ef:6f:40:38:9d:2e:00:a2:7c:f0:84:30:36:84:79:
3c:02:62:43:3f:ad:2c:9a:0e:d3:10:67:3e:a3:ac:b2:04:5d:
19:58:60:b3:ad:4f:70:f1:0c:5e:5a:cd:eb:90:d8:8b:61:58:
db:86:c7:f4:49:29:7c:8e:40:9a:b1:20:b2:20:67:e6:78:6e:
47:87:17:d5:ea:08:d2:5e:9b:bb:a2:4c:1b:ed:98:5a:2a:60:
ac:80:c9:b5:65:ec:1a:96:b3:ad:31:22:f9:51:a4:39:d8:cc:
7b:90:aa:0c:bc:d0:fc:36:b5:a3:3b:30:57:af:27:71:0d:d8:
02:eb:f7:2c:08:15:68:e3:56:0f:e4:88:59:35:49:04:29:31:
47:d8:70:f8:7c:f7:68:cc:b6:f5:fd:7f:fd:98:45:53:09:bb:
e6:cc:9c:bd:66:50:4c:ff:8f:ea:7a:64:e3:c4:6f:f3:7e:9c:
2a:84:3d:c8:1a:db:c5:bc:b8:17:ee:34:65:45:ed:6c:0b:52:
71:0d:87:1b:98:6b:7f:b4:67:a9:54:da:b5:25:5b:12:cb:9f:
de:95:59:9e:53:48:3c:0c:30:78:e9:f5:35:b5:43:68:39:45:
68:b0:0a:58:60:27:05:fa:b2:0f:c6:e9:49:31:ee:aa:ab:4d:
53:e7:81:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:42 2025 by rpki-client