Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/44bc9c-47ac-42f5-9744-c468c44fa589/1/GtCx5xZpmVIgnD-dp9W2su2K8dI.roa
File: GtCx5xZpmVIgnD-dp9W2su2K8dI.roa (raw, json)
Hash identifier: Z7Cjfu/N8D0Hr5ZRSQYAOdFhVjc+20lPjOsh1QaqffA=
Subject key identifier: 1A:D0:B1:E7:16:69:99:52:20:9C:3F:9D:A7:D5:B6:B2:ED:8A:F1:D2
Certificate issuer: /CN=b09d2f65d7228de6ee9784ed8b6ade655f5ee778
Certificate serial: B6BE
Authority key identifier: B0:9D:2F:65:D7:22:8D:E6:EE:97:84:ED:8B:6A:DE:65:5F:5E:E7:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ0vZdcijebul4Tti2reZV9e53g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/44bc9c-47ac-42f5-9744-c468c44fa589/1/GtCx5xZpmVIgnD-dp9W2su2K8dI.roa
Signing time: Mon 17 Jan 2022 15:05:39 +0000
ROA not before: Mon 17 Jan 2022 15:05:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41155
IP address blocks: 45.91.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46782 (0xb6be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b09d2f65d7228de6ee9784ed8b6ade655f5ee778
Validity
Not Before: Jan 17 15:05:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ad0b1e716699952209c3f9da7d5b6b2ed8af1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2e:cf:56:6a:8b:4c:0b:0b:46:15:a1:f5:9b:
e8:90:41:45:84:58:f3:13:78:39:29:9b:d5:49:b9:
23:1b:9e:23:b5:62:58:f5:0c:ac:f6:a7:e7:84:84:
a7:c2:5d:a6:c3:9d:86:dd:02:8d:03:9d:d3:39:ac:
a8:c3:42:47:e0:31:94:ce:84:11:43:a5:74:17:db:
74:8d:b4:1e:44:6a:4b:4e:6f:0a:96:c6:70:c0:66:
28:ed:12:e6:07:c3:b7:26:22:b8:fe:c4:69:f0:6e:
3b:15:e6:33:a7:55:54:94:d2:5a:3d:a6:9f:db:96:
11:31:0d:69:2e:0f:a2:bd:02:24:2b:50:45:98:3e:
6c:ca:6c:be:41:bd:4c:f6:73:62:6b:89:a8:b6:de:
55:7a:97:7a:63:53:42:08:f1:3e:9f:eb:2f:af:39:
0c:37:e7:65:69:38:21:c2:ca:22:d3:5f:58:b7:a3:
f4:8d:06:ce:6c:0f:f6:7f:77:d3:53:15:0a:9d:5a:
76:44:0b:21:a9:aa:9d:70:12:34:f1:e5:1a:06:7c:
65:64:9b:20:2e:28:25:ea:3b:29:7f:ae:c8:36:ce:
ba:77:b5:99:52:3c:d6:97:38:0f:ff:53:9e:28:fd:
ac:67:5b:f1:2c:32:bd:c6:7f:02:99:c1:5e:cb:9e:
31:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D0:B1:E7:16:69:99:52:20:9C:3F:9D:A7:D5:B6:B2:ED:8A:F1:D2
X509v3 Authority Key Identifier:
keyid:B0:9D:2F:65:D7:22:8D:E6:EE:97:84:ED:8B:6A:DE:65:5F:5E:E7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ0vZdcijebul4Tti2reZV9e53g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/44bc9c-47ac-42f5-9744-c468c44fa589/1/GtCx5xZpmVIgnD-dp9W2su2K8dI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/44bc9c-47ac-42f5-9744-c468c44fa589/1/sJ0vZdcijebul4Tti2reZV9e53g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.151.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:f7:82:31:46:96:5f:58:7b:94:b6:28:16:6a:0f:3e:8b:26:
4e:86:ed:80:60:d8:43:7b:8a:6e:0d:83:4b:c1:2d:ea:31:05:
b4:1d:e5:1c:a1:f2:f2:70:3c:b1:f3:28:8b:9a:88:77:02:2d:
a5:95:33:f3:7c:a1:54:6a:41:03:7c:71:5d:00:93:ce:e5:94:
6d:81:f5:eb:0c:36:13:39:61:80:93:cf:e5:e2:ea:f9:ec:6e:
5f:48:37:57:09:66:2d:e9:cc:f6:2c:2f:2b:fc:35:3f:a4:c6:
e3:19:b1:94:6e:ac:a3:c3:f7:f7:eb:aa:90:be:ac:8e:0d:63:
ab:ed:b0:65:82:65:9f:09:ba:02:c6:94:98:4f:6d:b1:e9:74:
9b:8f:4b:ee:1c:5c:30:b6:7f:f2:ad:ec:30:7c:55:52:7d:56:
d0:6c:bb:80:96:22:b3:a5:03:49:97:7a:e4:70:90:6f:bd:2d:
14:c3:20:9c:12:5e:ef:a6:44:94:0f:be:14:f8:4e:03:cc:83:
39:87:5c:d9:50:37:cf:8a:a4:de:3c:ac:3d:3b:57:b4:1d:b6:
b8:bb:db:6d:11:ae:be:1d:9a:7d:09:33:bd:47:ab:bc:ba:7a:
4f:cb:99:91:0e:41:c2:cd:56:63:d5:23:56:fa:26:09:c3:ce:
5c:79:4b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:25:03 2025 by rpki-client