Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/chKGM1DwiefQCspYP1CoPFOHAXA.roa
File: chKGM1DwiefQCspYP1CoPFOHAXA.roa (raw, json)
Hash identifier: 8BJd8AO7427F5nCTQAUMoutzT6KB63XjTjvg7oSqEM4=
Subject key identifier: 72:12:86:33:50:F0:89:E7:D0:0A:CA:58:3F:50:A8:3C:53:87:01:70
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01856F8C585225D832BC791A2A03144AB345
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/chKGM1DwiefQCspYP1CoPFOHAXA.roa
Signing time: Sun 01 Jan 2023 22:55:46 +0000
ROA not before: Sun 01 Jan 2023 22:55:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399746
IP address blocks: 45.158.57.0/24 maxlen: 24
45.158.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8c:58:52:25:d8:32:bc:79:1a:2a:03:14:4a:b3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 22:55:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7212863350f089e7d00aca583f50a83c53870170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:98:d5:32:2b:66:99:d3:a2:91:72:59:60:ae:
2a:7b:43:95:ac:96:cd:f4:04:87:58:2a:10:9b:27:
89:e2:fb:3e:5a:55:df:e9:3b:9e:72:57:d4:ef:28:
6b:e6:35:5b:1b:25:ba:7f:4f:bf:9f:b3:4c:51:ba:
31:23:70:28:a2:71:40:73:bb:75:1d:29:bf:3e:97:
da:00:75:b6:e5:3f:df:db:64:d4:e2:c5:ce:82:06:
53:68:8f:2a:d3:d5:ba:fc:49:1e:c1:72:e8:92:31:
a7:3f:4b:03:89:02:4e:53:12:f0:9c:12:ee:2c:8e:
9a:c3:57:79:2d:f0:0a:45:a4:4e:a5:9e:01:a5:75:
78:a5:87:91:db:3c:b4:dc:64:e9:49:f5:e5:46:db:
75:b9:24:06:f7:78:41:91:06:d8:06:1b:52:0a:06:
9a:23:0a:df:ce:ff:cf:f2:2a:1b:fb:f2:b7:58:e4:
bf:04:fd:99:9d:59:29:a9:86:19:28:6d:88:10:8f:
4f:7c:ef:97:68:76:8a:a4:86:3d:ec:9b:1d:1d:79:
e0:f3:5c:61:49:43:a8:07:fe:db:52:21:b1:20:6c:
bf:1a:8b:06:ef:7a:51:12:aa:0b:cd:82:80:73:34:
34:31:41:6a:be:b8:61:85:52:cd:31:51:d3:c0:1f:
a0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:12:86:33:50:F0:89:E7:D0:0A:CA:58:3F:50:A8:3C:53:87:01:70
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/chKGM1DwiefQCspYP1CoPFOHAXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.56.0/23
Signature Algorithm: sha256WithRSAEncryption
73:8d:85:39:1e:3e:b0:84:a0:fa:36:db:9c:a8:84:ae:d1:a3:
ac:72:4e:0e:68:62:c9:cb:d6:6d:7a:78:9c:ec:f6:b6:3b:8d:
84:c8:3a:44:a4:07:72:ba:f3:94:35:50:ed:fe:6d:58:83:91:
e1:2a:1e:55:9e:b3:66:f8:43:69:b4:33:0a:ad:9e:8f:23:99:
1e:ba:27:4f:3f:a4:1c:ae:3d:6f:fc:d7:b7:74:82:2a:f7:63:
eb:5f:f2:10:8c:6a:5a:78:ff:11:1a:e1:16:06:39:0c:b2:96:
7a:92:ad:f4:39:96:a5:43:52:d1:1f:56:da:22:c8:b9:2b:10:
59:ed:77:fb:17:78:b9:b5:4c:30:68:4c:51:4c:c7:81:27:df:
18:56:0f:f4:cf:e2:97:2f:65:2d:91:f2:c2:a5:77:bd:9a:4a:
2c:c9:05:27:b3:e6:81:27:d2:80:e4:39:de:94:bf:cd:7b:7e:
dc:06:c3:cc:ed:38:a7:b1:df:ec:1e:bb:7a:d5:dc:af:e8:36:
99:be:6a:ea:2f:4f:24:93:df:49:19:84:cc:df:21:a2:9e:d3:
b2:b7:7c:80:68:5d:a5:2b:c0:38:51:62:7d:9c:aa:a8:33:14:
cc:fa:d4:97:f4:a3:95:b9:52:f4:00:56:94:fe:82:a0:74:5a:
9e:ad:53:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:41 2025 by rpki-client