Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/iwq_L2GlcG7Fbwn_fLEEfLlPeO4.roa
File: iwq_L2GlcG7Fbwn_fLEEfLlPeO4.roa (raw, json)
Hash identifier: C+N37EwpmUEb/tZJc52ow3xNW73MYELi4scsdiZNerw=
Subject key identifier: 8B:0A:BF:2F:61:A5:70:6E:C5:6F:09:FF:7C:B1:04:7C:B9:4F:78:EE
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 018F99DF12D6C18B817DD4830CA60A4EE3CE
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/iwq_L2GlcG7Fbwn_fLEEfLlPeO4.roa
Signing time: Tue 21 May 2024 06:38:04 +0000
ROA not before: Tue 21 May 2024 06:38:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4648
IP address blocks: 45.91.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:99:df:12:d6:c1:8b:81:7d:d4:83:0c:a6:0a:4e:e3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: May 21 06:38:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b0abf2f61a5706ec56f09ff7cb1047cb94f78ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:a0:e2:ac:7e:43:80:ca:9d:3e:b3:3b:cc:
a1:f6:dc:20:b2:f7:4e:58:71:c7:6e:24:65:f4:fa:
fd:57:ab:8f:00:48:36:92:02:8a:a0:fe:10:b5:ba:
57:37:c1:e2:22:ec:85:77:65:c1:93:9c:4e:b1:df:
22:ca:72:ff:f2:4f:83:e3:1b:e0:7a:2d:61:56:0c:
14:43:7b:8b:b0:0d:2f:34:a4:05:3e:83:12:4a:87:
9c:70:72:a7:bd:d0:d7:51:b0:db:5e:c6:48:42:42:
1f:ed:ce:b4:b8:7e:7a:40:b4:e4:1e:1e:6e:d3:ee:
fa:79:1b:0c:0a:d4:97:54:03:23:15:25:48:1e:6a:
e2:8c:c2:57:0a:77:9a:a0:02:68:d5:2c:b0:f3:d4:
e8:02:49:83:fc:98:30:1d:e5:22:55:3c:76:08:15:
3e:7f:d2:20:24:c1:d7:af:61:7f:60:fd:30:16:b5:
6c:2c:1c:98:d1:5d:77:84:6f:27:05:68:09:14:62:
04:d6:e3:29:10:49:ef:26:ed:93:27:11:be:02:6b:
03:5a:a5:4a:36:79:cc:83:b4:9f:cd:ad:9c:7b:d7:
b9:ff:2b:ae:72:35:24:c2:2e:d6:6e:3f:23:a0:1c:
04:54:78:44:1e:0f:b0:61:9e:76:f2:06:c3:6d:22:
64:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0A:BF:2F:61:A5:70:6E:C5:6F:09:FF:7C:B1:04:7C:B9:4F:78:EE
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/iwq_L2GlcG7Fbwn_fLEEfLlPeO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.117.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:b9:30:df:9b:f5:98:78:04:22:43:51:16:b5:dd:a6:2e:a4:
69:1b:4c:e2:7b:0a:55:d3:31:38:c5:79:08:b9:3b:df:82:2a:
32:fe:16:15:08:ff:8f:79:a9:56:90:54:3e:39:e7:d0:8e:0f:
71:16:f6:a2:ae:9e:99:95:d1:f6:34:dd:3f:9f:78:d3:48:ac:
03:f3:d4:55:6e:c2:00:73:87:24:3c:86:14:53:b1:32:be:17:
7e:1d:35:4b:e6:9b:e9:92:52:fa:2b:c3:e1:84:1d:1b:da:e2:
7e:b6:ec:7b:0c:46:42:4b:e9:78:da:2b:47:bc:a2:07:81:91:
bb:ba:9f:02:92:ec:b4:73:a8:25:a5:d6:6d:b7:e3:50:32:40:
2b:4b:f4:fc:9c:e5:75:dc:16:84:99:0c:b1:25:dc:81:14:f7:
1c:cc:9b:f7:83:a8:fd:c8:43:68:a9:4a:cc:94:af:fe:6e:7f:
51:24:19:9b:1b:a0:da:f4:8a:c8:a1:a4:df:d0:f3:d9:78:7f:
0e:fe:d5:18:00:75:c1:90:6c:30:76:9e:5b:3e:bc:39:af:75:
81:d7:fb:0f:8e:c0:87:d7:3b:f4:94:be:53:d6:33:d0:42:4a:
ad:75:32:66:de:0c:da:8b:3e:8d:3b:84:94:5b:7e:02:e6:bc:
83:f9:d9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:09 2025 by rpki-client