Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/28a378-894c-44ca-a171-df0282a12ce3/1/DxuqlxnOSQveGCkaB9bIQLTxqbQ.roa
File: DxuqlxnOSQveGCkaB9bIQLTxqbQ.roa (raw, json)
Hash identifier: Uiqz8ejRNHk99Nf1WF1SvNKryaSzQFnsDYGPlN2rvsA=
Subject key identifier: 0F:1B:AA:97:19:CE:49:0B:DE:18:29:1A:07:D6:C8:40:B4:F1:A9:B4
Certificate issuer: /CN=ce35f27df3e37f53f0abf743eec1d516648d2dd8
Certificate serial: 065DA54B
Authority key identifier: CE:35:F2:7D:F3:E3:7F:53:F0:AB:F7:43:EE:C1:D5:16:64:8D:2D:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjXyffPjf1Pwq_dD7sHVFmSNLdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/28a378-894c-44ca-a171-df0282a12ce3/1/DxuqlxnOSQveGCkaB9bIQLTxqbQ.roa
Signing time: Sat 01 Jan 2022 13:07:25 +0000
ROA not before: Sat 01 Jan 2022 13:07:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203744
IP address blocks: 45.131.117.0/24 maxlen: 24
45.131.116.0/24 maxlen: 24
45.131.116.0/22 maxlen: 22
45.131.118.0/24 maxlen: 24
45.131.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106800459 (0x65da54b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce35f27df3e37f53f0abf743eec1d516648d2dd8
Validity
Not Before: Jan 1 13:07:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f1baa9719ce490bde18291a07d6c840b4f1a9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:02:07:2e:76:54:7b:7d:a7:61:28:e3:6a:
00:e7:7c:ec:57:eb:5a:e0:6c:47:52:32:29:b3:06:
c2:7c:80:70:d2:08:30:20:be:12:8b:4c:7e:6b:80:
8e:0d:5f:9a:24:bd:61:09:28:6c:2e:a9:b7:45:19:
a6:e5:e2:6e:04:5f:f7:11:ae:1c:6d:fa:ea:bc:5b:
4c:d8:a2:55:e2:e7:e3:46:7d:4c:e8:6c:fe:c3:6a:
d5:ee:eb:b5:2d:70:bc:69:34:56:d9:ed:2b:c3:64:
02:93:aa:41:f3:aa:9b:ee:50:15:2d:2b:25:ce:b7:
80:9d:6d:82:9d:90:95:7e:a7:c2:d8:ba:60:0c:66:
d3:93:97:51:58:61:76:d1:cc:52:19:c4:23:37:02:
c1:42:77:81:d3:6b:dc:35:07:a9:55:8a:c4:88:7e:
5f:73:b3:62:7b:f0:7f:c0:ed:9f:a5:89:4e:18:1f:
2a:97:e5:fb:2a:b8:13:3c:ea:b5:b5:5f:da:59:5d:
04:64:7b:57:55:79:37:dc:fc:1b:41:cb:c6:2d:f0:
d3:bf:63:94:ea:c3:82:fb:bb:a3:52:34:04:60:ae:
f5:6e:b6:74:78:cf:8a:5e:52:61:ab:14:49:2c:04:
9e:be:7c:44:77:a8:d1:04:6b:cb:ca:b7:3f:6c:ee:
41:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1B:AA:97:19:CE:49:0B:DE:18:29:1A:07:D6:C8:40:B4:F1:A9:B4
X509v3 Authority Key Identifier:
keyid:CE:35:F2:7D:F3:E3:7F:53:F0:AB:F7:43:EE:C1:D5:16:64:8D:2D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjXyffPjf1Pwq_dD7sHVFmSNLdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/28a378-894c-44ca-a171-df0282a12ce3/1/DxuqlxnOSQveGCkaB9bIQLTxqbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/28a378-894c-44ca-a171-df0282a12ce3/1/zjXyffPjf1Pwq_dD7sHVFmSNLdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.116.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:0d:e1:e3:07:31:f9:88:f4:7f:e0:f7:9d:3c:9c:ff:48:f8:
f9:2c:0a:59:d4:59:e6:4c:d2:86:03:9a:fe:de:83:6a:f2:5b:
c4:c4:2a:96:60:0b:db:07:9f:7d:8f:56:3c:ac:84:b6:00:9c:
d9:76:ca:20:a7:a8:da:11:0a:4d:c3:bc:82:b8:7f:5b:31:75:
9b:90:93:db:11:88:bc:fe:2d:28:03:4b:99:91:06:e2:76:a1:
80:64:b2:60:26:1e:99:25:e5:67:c7:c8:d7:6d:a4:80:d2:a7:
18:03:ff:95:58:0b:0f:bc:83:3d:34:12:8f:21:e2:66:08:73:
c3:58:66:79:a6:6c:0d:ba:82:2b:d9:47:71:d5:55:e3:9d:e5:
6c:a1:e8:d4:0c:cb:94:a1:97:ab:12:1e:40:cb:ab:fc:60:fb:
5f:83:af:59:b3:ea:73:63:65:59:e4:c7:79:f7:4b:33:e4:67:
64:11:d2:55:de:ba:88:7b:2e:85:d5:48:ab:d3:3a:ca:87:3c:
82:3c:98:62:5b:3a:25:a3:3e:da:d4:b9:9b:65:7b:d4:a7:83:
6d:0b:10:4f:b3:c7:2e:b0:09:b1:b8:a0:f5:41:b7:e6:6a:41:
9f:00:0e:49:e3:da:0f:f3:ee:e0:9e:be:a9:d0:c9:58:96:6f:
c2:fe:b0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:05 2025 by rpki-client