Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Dx5vScnIE_uCUNqNsqXddm566sc.roa
File: Dx5vScnIE_uCUNqNsqXddm566sc.roa (raw, json)
Hash identifier: 3QUqXg+CjKnVlWKuu/qW3x4aHbyzTq9K2muzJs2n4lM=
Subject key identifier: 0F:1E:6F:49:C9:C8:13:FB:82:50:DA:8D:B2:A5:DD:76:6E:7A:EA:C7
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0A4FBE25
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Dx5vScnIE_uCUNqNsqXddm566sc.roa
Signing time: Wed 30 Mar 2022 20:30:54 +0000
ROA not before: Wed 30 Mar 2022 20:30:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 92.119.12.0/22 maxlen: 24
45.87.172.0/24 maxlen: 24
45.87.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172998181 (0xa4fbe25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 30 20:30:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f1e6f49c9c813fb8250da8db2a5dd766e7aeac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:99:a9:2b:63:a0:c8:f4:d9:f7:5a:77:f2:30:
9b:dc:45:14:53:f7:33:f6:79:30:a8:6c:8d:79:88:
63:1b:0b:c5:53:34:1e:a6:70:f2:b7:40:a1:7b:f4:
a0:e3:d3:56:06:61:b0:9e:cf:7c:14:ce:2e:a2:fd:
bb:5c:59:2d:b5:8c:ea:8e:f7:64:cd:9a:0f:09:b9:
b3:b0:bf:70:4d:2e:95:7f:64:58:77:b1:4f:05:0a:
ef:7f:2f:3d:3f:57:3a:af:ca:d4:ca:a9:a0:81:21:
a6:d8:80:25:87:fb:0d:77:a9:39:96:84:32:08:86:
2c:4d:4e:23:73:18:93:62:a9:ad:57:b3:7c:76:fb:
6b:d3:a0:07:55:b5:26:49:49:74:95:23:97:87:76:
b2:ae:13:33:36:4c:7f:5e:a9:3d:6d:5f:38:79:58:
1c:e0:b2:1b:bf:f2:12:d3:fb:d5:1b:58:5c:75:c1:
be:17:f9:3f:4b:3f:6b:fc:9c:97:82:12:85:78:da:
d7:41:05:ea:5d:d7:5f:69:fc:03:27:a3:b0:0c:d2:
62:87:b4:62:04:a2:a8:f9:36:77:95:8f:cc:a5:c4:
11:b3:d5:3f:22:6a:ab:db:a3:31:04:b8:46:04:41:
06:f4:71:9a:19:ca:25:7d:2b:f2:78:d6:44:d1:77:
9c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1E:6F:49:C9:C8:13:FB:82:50:DA:8D:B2:A5:DD:76:6E:7A:EA:C7
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Dx5vScnIE_uCUNqNsqXddm566sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.172.0/23
92.119.12.0/22
Signature Algorithm: sha256WithRSAEncryption
60:a9:aa:ba:e8:df:a8:6a:e8:5c:f8:22:84:72:d1:57:b1:f2:
b0:12:b4:8c:73:d0:e1:4a:16:07:f1:d5:4e:35:b9:bb:52:28:
76:81:1d:3e:cb:3a:19:97:6e:91:da:3a:99:44:2d:eb:b2:c2:
51:b9:62:15:e7:fd:cd:ba:0e:ee:d5:0a:67:34:f9:e4:2c:eb:
f7:ab:dd:21:46:b4:16:ab:60:c7:86:a6:be:32:0c:de:cd:3e:
ab:ad:6d:20:93:7e:d7:12:1a:91:5d:e3:b3:a9:de:d8:54:a5:
cd:29:b2:06:38:21:06:d2:68:66:3d:83:88:13:32:e1:9a:18:
a5:05:a8:98:18:95:a1:d1:b8:78:fa:93:e4:71:10:43:aa:dd:
d5:35:55:45:2e:c8:76:84:b8:a1:80:68:08:ab:25:36:0d:14:
5b:00:33:70:02:0e:1a:2c:d8:10:aa:ec:7b:c2:3c:5c:58:85:
7f:62:ae:bb:72:4d:e9:f8:17:29:a7:59:56:90:03:0d:57:7b:
8e:37:d0:1f:2a:da:64:72:2a:90:48:ca:ef:72:84:89:e1:78:
b2:fd:49:7a:09:00:dd:e8:8e:4f:18:c7:d8:bb:15:ad:93:5d:
ec:07:af:99:b6:91:23:e5:ba:ac:bc:f6:0f:1c:0c:fd:65:fc:
29:b6:f0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:01 2025 by rpki-client