Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/5SR6SiiM6G5FvlDYHagmh-s9tQM.roa
File: 5SR6SiiM6G5FvlDYHagmh-s9tQM.roa (raw, json)
Hash identifier: thee1Pr9017rdwqwSx/iq1k5iCDHtvMDcQa3ecM6Aeo=
Subject key identifier: E5:24:7A:4A:28:8C:E8:6E:45:BE:50:D8:1D:A8:26:87:EB:3D:B5:03
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 018339E9D8CB1344B02C7A96E260ADA2C81E
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/5SR6SiiM6G5FvlDYHagmh-s9tQM.roa
Signing time: Wed 14 Sep 2022 02:52:50 +0000
ROA not before: Wed 14 Sep 2022 02:52:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52041
IP address blocks: 45.87.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:39:e9:d8:cb:13:44:b0:2c:7a:96:e2:60:ad:a2:c8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Sep 14 02:52:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5247a4a288ce86e45be50d81da82687eb3db503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2b:82:c8:e4:08:66:37:3c:29:8c:9a:88:52:
58:df:9d:20:21:e9:8d:71:b4:76:7b:fe:73:04:3c:
9b:ea:ad:f8:d9:c6:88:42:0a:8c:d6:7b:d7:68:4a:
82:d6:0a:00:54:03:7f:4d:44:0b:b8:24:4c:4c:86:
f9:88:0c:bb:99:3d:f5:12:1d:a2:6f:85:8f:ee:88:
9c:88:7d:83:c0:3f:bc:66:8c:e4:21:ff:03:0d:f9:
bd:9d:0b:a3:12:2e:a5:54:a8:17:28:56:12:a2:be:
17:3a:ef:4c:df:23:92:0a:0e:f5:ae:77:f3:71:9d:
44:b6:15:5f:78:70:35:6a:33:08:64:76:37:38:d5:
ab:a3:0f:97:2b:45:68:73:5b:9a:01:2c:68:49:23:
71:a5:6c:dd:c5:9f:9b:e6:be:b4:55:15:5a:79:18:
7d:4d:06:a6:ad:2d:20:85:af:75:22:56:bb:43:73:
b2:43:b8:e3:13:3a:56:1a:80:32:0f:a8:a5:44:16:
c5:36:d4:02:ef:b1:f7:2a:3f:b3:3e:89:0a:09:c0:
ac:e0:da:8f:45:5b:42:05:46:50:9b:26:4c:ed:65:
a8:4a:1f:39:0c:9a:86:a9:f8:67:da:1e:90:e0:b6:
49:02:bc:a0:c4:50:35:8a:74:f1:ee:31:8c:75:a5:
14:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:24:7A:4A:28:8C:E8:6E:45:BE:50:D8:1D:A8:26:87:EB:3D:B5:03
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/5SR6SiiM6G5FvlDYHagmh-s9tQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.175.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:f1:54:4f:42:81:68:38:32:e3:af:22:86:a5:f9:c0:d3:e0:
b6:0b:19:a8:62:40:92:1d:c0:84:6c:8a:b2:93:81:1d:00:99:
e6:d0:d1:43:7c:17:19:0f:58:9f:9d:76:96:76:c6:0a:a6:ed:
db:74:99:03:15:5a:8d:81:76:cb:95:1d:d1:68:8d:ff:4d:4b:
ce:3d:46:e7:6c:29:1b:d6:f7:22:2a:d6:37:71:f1:f3:ab:ce:
5c:44:99:b2:4f:93:80:b9:cd:a6:95:e1:39:71:e2:a3:ee:f1:
db:94:3b:e6:30:eb:a8:7c:b8:8e:6f:5b:51:e4:3c:8e:24:1d:
eb:a9:c7:72:01:18:d0:77:bc:53:d1:29:ae:22:55:3e:3d:17:
9f:40:f6:54:23:96:52:a2:dd:f8:c6:ed:fe:6e:e2:cf:4c:91:
83:fc:6b:91:3a:f7:b9:a1:cb:52:4a:bb:1c:a9:67:fd:73:49:
2c:0a:9c:fc:f3:58:a3:24:10:d2:2a:2c:ac:56:14:1a:ae:e3:
5b:e6:be:e3:02:1d:e7:88:09:81:68:52:8a:6f:46:2a:28:83:
15:fe:c2:b6:23:79:92:16:9a:47:85:60:84:47:7c:c9:60:6e:
04:17:9f:2c:75:ac:d2:74:36:67:8d:65:f3:03:7b:b6:89:4f:
11:3a:b9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:35 2025 by rpki-client