Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/cdf1b9-809e-4cb8-ae81-dec0a7ec2b3d/1/fUvRfHgLN-RLqnYruptcFJcw8QU.roa
File: fUvRfHgLN-RLqnYruptcFJcw8QU.roa (raw, json)
Hash identifier: VvaCxRypa+s1mEvRgfhh80lUh529/4r8zHXLciztm/c=
Subject key identifier: 7D:4B:D1:7C:78:0B:37:E4:4B:AA:76:2B:BA:9B:5C:14:97:30:F1:05
Certificate issuer: /CN=16c2526c3ef133d2559e8425068559f34f007572
Certificate serial: 074242E9
Authority key identifier: 16:C2:52:6C:3E:F1:33:D2:55:9E:84:25:06:85:59:F3:4F:00:75:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FsJSbD7xM9JVnoQlBoVZ808AdXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/cdf1b9-809e-4cb8-ae81-dec0a7ec2b3d/1/fUvRfHgLN-RLqnYruptcFJcw8QU.roa
Signing time: Sat 01 Jan 2022 14:00:24 +0000
ROA not before: Sat 01 Jan 2022 14:00:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206065
IP address blocks: 45.144.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121783017 (0x74242e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16c2526c3ef133d2559e8425068559f34f007572
Validity
Not Before: Jan 1 14:00:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d4bd17c780b37e44baa762bba9b5c149730f105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:38:50:69:a6:cb:5f:87:10:61:06:a9:60:ad:
83:39:24:f3:30:19:ed:97:96:87:ec:e6:8d:72:e9:
b1:2f:ac:cc:b3:82:f4:36:1b:99:a2:c0:26:ce:67:
d9:60:9a:f3:3b:e0:72:48:8f:4a:c6:32:0a:cb:59:
a5:bd:4f:78:f9:72:9f:58:57:53:80:6a:5c:36:38:
5e:70:bc:7e:ef:03:b0:af:71:30:cb:29:6f:1e:01:
d5:91:f7:b2:a4:fe:c2:90:0f:a3:85:ec:92:08:e8:
99:92:49:37:23:07:88:b9:56:fa:65:ca:f6:44:7e:
e0:0d:f2:ad:8d:54:73:a3:a9:dc:f8:41:40:a2:74:
17:6f:11:1d:f8:4e:83:bd:a5:af:c5:4b:31:a7:3d:
90:93:ad:22:94:00:e1:16:eb:33:b0:cc:b1:d4:7a:
18:87:2d:4e:8e:91:b3:29:09:fd:54:62:07:1a:8f:
9c:27:85:5e:84:f2:4a:85:fb:14:fe:c0:51:dc:79:
20:56:e8:65:f7:2b:51:cd:47:86:24:51:09:0e:88:
e0:a4:99:f9:0e:1a:6c:81:84:96:96:47:2c:a6:db:
36:3b:81:e2:78:bd:ac:e5:a6:58:9b:7a:c1:b5:d9:
f2:5f:ca:bf:6d:70:1f:30:dc:1a:ab:4d:14:59:b9:
7f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4B:D1:7C:78:0B:37:E4:4B:AA:76:2B:BA:9B:5C:14:97:30:F1:05
X509v3 Authority Key Identifier:
keyid:16:C2:52:6C:3E:F1:33:D2:55:9E:84:25:06:85:59:F3:4F:00:75:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsJSbD7xM9JVnoQlBoVZ808AdXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cdf1b9-809e-4cb8-ae81-dec0a7ec2b3d/1/fUvRfHgLN-RLqnYruptcFJcw8QU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cdf1b9-809e-4cb8-ae81-dec0a7ec2b3d/1/FsJSbD7xM9JVnoQlBoVZ808AdXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.124.0/22
Signature Algorithm: sha256WithRSAEncryption
88:b7:cf:61:1e:82:5d:17:2e:4a:eb:cd:00:c4:fe:ea:af:51:
c2:d9:13:2d:5a:17:d8:ba:fe:c5:d2:a4:f6:09:aa:7e:fb:9b:
4b:fa:b1:d2:81:30:f4:03:fb:b8:63:df:7e:ab:8f:a6:5c:f8:
2c:b6:da:e4:0b:8e:68:c5:df:89:af:f2:5e:95:bb:13:bc:20:
ff:06:a5:f7:bf:cd:65:6f:22:1a:c1:b2:d0:91:81:6f:3f:99:
96:4c:3f:22:67:d4:dd:89:56:de:f0:46:d8:44:79:5c:bf:68:
95:a2:63:2e:97:a5:f7:ec:a5:6a:df:eb:12:77:df:2c:5c:65:
94:25:2e:eb:e7:9f:a9:bd:63:9a:16:66:94:ca:5d:f8:e3:b0:
40:26:f5:5b:24:6e:c3:9b:2e:95:1f:4b:7c:0d:05:d7:23:1e:
b3:62:89:d2:3a:43:1d:1a:cd:94:c9:a5:ba:0c:6d:95:16:3e:
f2:af:6a:14:e7:f7:0a:a9:1a:e9:9d:53:4f:a7:35:ad:ea:3b:
6a:1a:77:cf:78:3b:31:dc:57:0b:58:b5:da:68:31:db:a3:74:
06:1c:a6:46:67:b5:f3:2a:34:37:08:4b:c5:35:48:13:59:b2:
76:ef:1b:79:ed:a0:7f:fa:19:7e:99:50:49:d3:24:6e:43:3a:
9d:3e:70:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:16 2025 by rpki-client