Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/RC0uQCptQfJvessDjTeYZS2INKE.roa
File: RC0uQCptQfJvessDjTeYZS2INKE.roa (raw, json)
Hash identifier: v3n5Ejqov+/apOSPOIl2V2d+qbBTg3ckhXinZVGDhNM=
Subject key identifier: 44:2D:2E:40:2A:6D:41:F2:6F:7A:CB:03:8D:37:98:65:2D:88:34:A1
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0AC11F80A213C0316E3E2044BD633
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/RC0uQCptQfJvessDjTeYZS2INKE.roa
Signing time: Mon 02 Jan 2023 05:24:58 +0000
ROA not before: Mon 02 Jan 2023 05:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56373
IP address blocks: 82.177.12.0/23 maxlen: 24
82.177.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:ac:11:f8:0a:21:3c:03:16:e3:e2:04:4b:d6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=442d2e402a6d41f26f7acb038d3798652d8834a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dc:4b:e6:94:4e:c2:ab:a8:4b:7b:da:71:4b:
09:59:dd:88:9e:44:37:bb:0c:cc:9e:be:34:9c:c4:
b8:e3:90:3a:4c:e5:3e:79:48:b1:81:dd:04:e3:dd:
74:b7:0d:21:7c:2a:ef:88:f3:ec:f1:11:79:c3:ed:
27:dd:aa:bd:3a:ad:28:4d:08:19:af:91:6e:48:b6:
8e:55:90:51:07:77:39:f6:d1:fb:13:53:34:a5:43:
da:d6:65:60:14:17:b2:ab:67:2a:3a:65:91:50:4b:
e7:a3:b3:b4:b5:2c:90:1e:d9:89:b3:5f:5b:35:c4:
17:70:85:37:2c:38:3d:c7:03:f6:76:0e:b1:6f:56:
66:c0:f7:65:cd:f4:70:68:73:29:ec:32:1a:3f:1c:
7a:fa:17:bf:83:57:f0:77:85:68:14:35:33:91:a2:
9d:b0:f0:52:2c:f2:59:5f:b4:92:11:86:3f:ec:1f:
a8:78:82:64:bd:6e:89:c5:89:49:ee:56:e3:58:ec:
84:c1:e1:b3:56:3d:14:e3:4e:da:58:08:82:45:0a:
b6:35:15:ed:e3:73:53:07:fb:8d:f4:6e:c4:e6:35:
01:bb:1c:0f:c0:c6:1b:42:dd:f0:2b:41:88:01:80:
d1:42:57:68:7e:47:25:07:63:99:92:5c:1a:c3:6e:
31:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2D:2E:40:2A:6D:41:F2:6F:7A:CB:03:8D:37:98:65:2D:88:34:A1
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/RC0uQCptQfJvessDjTeYZS2INKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.12.0/23
Signature Algorithm: sha256WithRSAEncryption
43:be:aa:a6:35:99:42:f9:65:e9:c7:8d:4f:37:61:39:e8:1b:
a9:d9:56:57:88:eb:5e:77:50:32:5b:25:37:a7:52:43:bb:17:
ce:55:bd:71:bd:1e:4c:9a:e3:b4:d0:36:6a:d8:20:a5:27:50:
cf:0e:1e:b3:28:d6:2c:25:b6:76:f9:5b:4f:f2:c9:3b:70:a5:
2d:3a:21:64:23:9b:35:06:98:b5:f6:9b:c8:e5:d1:4c:2e:2a:
9c:6c:64:39:53:28:f6:cd:10:2a:e6:52:73:5a:a8:ff:2d:29:
ab:54:fc:4a:3d:70:8e:85:73:45:86:68:db:ed:52:37:b5:dd:
c8:b0:57:a7:0e:5d:19:c3:46:28:f5:f0:30:40:29:cd:99:27:
df:84:d5:80:33:21:c8:43:b2:78:10:8c:a1:a0:fd:e3:fb:11:
6e:f5:63:73:65:53:39:c0:06:05:46:eb:5f:36:58:65:ac:dc:
ae:5d:28:78:28:a5:b6:49:ea:bb:df:78:b5:82:4a:28:b8:20:
ab:22:fb:73:38:97:b3:92:7a:a7:ba:66:e0:92:83:74:62:25:
44:b9:78:9a:26:66:65:2b:f3:7a:40:b1:34:a5:37:c6:bc:31:
dd:47:a6:69:58:8f:8f:71:af:33:81:fd:89:75:96:ce:e1:43:
b1:c1:1f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:41 2025 by rpki-client