Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2b222b-28cd-434a-ad7e-14926b560c35/1/iLeMLhkSxv_zals3XmPK_I0qCDA.roa
File: iLeMLhkSxv_zals3XmPK_I0qCDA.roa (raw, json)
Hash identifier: soWwCydlBNBeYhQCttt5syhF+dxs4b7qDztei47MhP4=
Subject key identifier: 88:B7:8C:2E:19:12:C6:FF:F3:6A:5B:37:5E:63:CA:FC:8D:2A:08:30
Certificate issuer: /CN=3788bd44d50150b51293a5ea5255528dbfc0bf58
Certificate serial: 017ED667
Authority key identifier: 37:88:BD:44:D5:01:50:B5:12:93:A5:EA:52:55:52:8D:BF:C0:BF:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4i9RNUBULUSk6XqUlVSjb_Av1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2b222b-28cd-434a-ad7e-14926b560c35/1/iLeMLhkSxv_zals3XmPK_I0qCDA.roa
Signing time: Sat 01 Jan 2022 05:05:30 +0000
ROA not before: Sat 01 Jan 2022 05:05:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.159.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25089639 (0x17ed667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3788bd44d50150b51293a5ea5255528dbfc0bf58
Validity
Not Before: Jan 1 05:05:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88b78c2e1912c6fff36a5b375e63cafc8d2a0830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f5:e5:f6:94:fe:af:bb:fd:ac:95:18:78:6e:
c1:0a:7d:75:d3:60:10:12:f1:5a:23:a8:55:be:60:
d1:30:af:1c:72:43:5a:83:98:17:b2:39:7d:0e:ec:
7b:06:53:7a:f3:27:bd:ec:5a:93:d1:81:5b:8f:a3:
5e:3b:a2:a8:4f:04:4b:85:2f:91:b2:0c:01:d0:1b:
31:4e:bd:0d:51:88:2d:6d:8c:cb:c5:fd:24:cf:f9:
f5:d8:f0:d3:62:08:20:5d:15:b1:8b:9c:f8:9a:e1:
3e:c0:d4:47:6a:73:f7:58:ff:fd:65:2b:46:b6:e9:
97:46:67:d3:be:93:67:8e:c7:cb:21:e8:8e:58:fc:
23:f4:d6:10:44:a0:b8:57:b2:d1:7a:5a:51:9c:e8:
d4:fd:db:b3:32:a1:c0:30:7b:da:23:34:48:ff:e1:
5e:99:31:2b:53:ed:9b:4f:b4:e5:22:b9:e4:03:d3:
26:53:d3:27:5d:4d:8c:bc:67:32:10:6e:2c:9c:49:
1c:c3:08:75:b3:c5:e2:8e:64:90:f7:2a:ae:aa:e4:
be:66:e7:c7:fa:a6:d6:d8:55:d4:b6:6c:b9:d2:ef:
ea:50:7f:96:26:a8:6a:91:33:1f:99:1d:d1:12:fb:
c0:46:67:82:62:99:2c:a1:a9:69:e8:f9:57:42:9c:
ce:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B7:8C:2E:19:12:C6:FF:F3:6A:5B:37:5E:63:CA:FC:8D:2A:08:30
X509v3 Authority Key Identifier:
keyid:37:88:BD:44:D5:01:50:B5:12:93:A5:EA:52:55:52:8D:BF:C0:BF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4i9RNUBULUSk6XqUlVSjb_Av1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b222b-28cd-434a-ad7e-14926b560c35/1/iLeMLhkSxv_zals3XmPK_I0qCDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b222b-28cd-434a-ad7e-14926b560c35/1/N4i9RNUBULUSk6XqUlVSjb_Av1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.92.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:5f:18:14:44:5a:ac:66:e0:90:e5:53:03:95:00:28:3e:79:
22:ba:43:88:b7:22:9d:3e:ac:f1:5f:85:49:fe:52:62:56:d3:
95:f0:c8:8c:d1:20:fd:dc:81:9c:17:b8:9f:99:5f:9b:39:c1:
0e:80:82:c0:3e:71:eb:ed:5b:f9:b2:0d:40:cd:2e:4a:4b:13:
3a:c3:67:47:67:a2:aa:bb:ba:48:0f:ef:14:06:9f:2b:2b:20:
d5:56:47:c2:f2:5a:7b:ca:95:01:8e:48:2c:aa:ba:b0:e9:ca:
3f:ec:b9:fa:06:d1:20:31:19:92:7c:02:73:96:5d:7d:86:01:
7d:23:5c:a0:b6:47:ba:6f:e6:dc:e4:c8:ce:b7:30:58:ea:bb:
50:71:05:c2:65:7a:46:9e:25:5c:aa:b9:a9:c0:91:bd:28:34:
b8:8e:d6:fb:db:82:d3:73:77:1f:ad:c5:1d:16:b3:be:af:e8:
65:34:0f:84:21:e6:3b:9f:f6:f4:9a:6b:90:94:56:38:d6:3d:
6d:9e:ec:33:a8:d2:38:db:06:fb:48:0e:32:b0:85:14:5c:b3:
a0:cc:6b:8e:44:b6:42:47:b3:a6:72:a5:af:1e:e2:cb:5b:2d:
45:03:8f:70:81:03:be:d3:4f:d7:df:40:9f:62:b7:c6:87:aa:
b3:25:39:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:11 2025 by rpki-client