Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/o98Fxc50e3g1bFtHva_bOov4ONI.roa
File: o98Fxc50e3g1bFtHva_bOov4ONI.roa (raw, json)
Hash identifier: wzn9OQkDyEhk84V/Y+//zCpo9IIGjzXcKKuxZqGP7e4=
Subject key identifier: A3:DF:05:C5:CE:74:7B:78:35:6C:5B:47:BD:AF:DB:3A:8B:F8:38:D2
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019393D3C71DC10F5564F37C0289165788C8
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/o98Fxc50e3g1bFtHva_bOov4ONI.roa
Signing time: Wed 04 Dec 2024 22:39:10 +0000
ROA not before: Wed 04 Dec 2024 22:39:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213122
IP address blocks: 45.139.6.0/23 maxlen: 24
178.173.242.0/23 maxlen: 24
178.173.244.0/22 maxlen: 24
188.253.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:93:d3:c7:1d:c1:0f:55:64:f3:7c:02:89:16:57:88:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Dec 4 22:39:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3df05c5ce747b78356c5b47bdafdb3a8bf838d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:2c:0b:85:f3:52:7d:25:ec:b6:23:0d:91:
17:c7:58:0d:73:59:19:91:da:91:33:00:eb:66:06:
61:a2:ac:d2:e6:ae:6d:20:18:67:46:0a:0d:ce:d5:
78:3f:10:83:e9:55:0d:b1:6d:a0:d5:9a:1f:c2:c1:
a9:72:bd:4c:a1:de:ba:32:64:02:5b:0d:cd:e8:40:
df:50:ee:16:9c:df:d8:8e:0c:26:b2:3c:9e:a7:0e:
65:7d:33:b7:d1:95:e0:5a:53:ff:fc:c9:0c:ce:4f:
08:2c:36:58:42:7f:b3:eb:ff:d5:6c:c1:5a:8d:89:
0a:d3:c3:d8:d8:c2:52:58:c2:97:21:b2:9f:cc:67:
52:bd:b2:66:54:3b:c1:e4:cd:fe:62:33:c5:03:35:
f3:68:3f:6e:50:56:98:0e:ea:89:4e:e8:27:57:88:
e9:10:73:b1:f2:7b:30:ee:4d:6d:c7:3a:62:42:72:
62:39:6e:21:47:4b:24:a0:71:e5:f8:a6:f1:4d:8d:
a8:2d:78:6b:7c:cd:cd:e1:e8:2c:26:ba:1b:e5:a9:
bf:cf:df:29:02:20:32:fb:7c:50:7c:a0:76:b2:ef:
53:05:56:ce:6e:cf:80:a4:be:54:c9:7d:3e:4e:95:
d6:f9:7c:6c:50:90:8a:82:96:c3:ed:a9:cd:92:bf:
08:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DF:05:C5:CE:74:7B:78:35:6C:5B:47:BD:AF:DB:3A:8B:F8:38:D2
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/o98Fxc50e3g1bFtHva_bOov4ONI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
178.173.242.0-178.173.247.255
188.253.28.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:09:30:59:a8:cd:47:fe:e1:55:e3:ee:d0:09:8b:50:a5:6e:
93:39:bb:6c:75:93:9c:cc:5f:4a:8b:ac:fe:02:8d:56:69:de:
9e:71:41:68:12:3f:18:d0:e1:a5:3e:5e:22:5c:8c:64:1e:ee:
ef:0e:f2:d6:c0:82:55:96:60:6b:0b:ba:44:d3:a4:b2:7d:2e:
0c:21:76:41:73:ac:fb:5f:dc:da:6b:64:f2:3a:22:4c:77:28:
ec:ab:7c:80:50:af:71:0a:68:81:e3:94:0b:79:5d:f2:de:30:
6c:60:0a:b8:cf:fb:80:b6:24:ef:9c:76:14:a0:d7:ca:c0:de:
e7:ac:fa:ee:e1:34:d9:f4:46:cc:a1:ef:03:28:c8:5d:5f:14:
78:04:10:38:e7:7b:54:93:b4:ec:da:3f:78:fc:e0:2d:60:42:
a8:e5:41:b6:9f:9a:2b:09:70:f1:01:b6:78:e8:d7:76:2f:0e:
17:76:76:46:5f:0d:a9:bb:c6:ad:af:b4:2f:e5:e8:c6:76:9d:
9e:16:61:21:72:55:f7:37:f6:b5:e5:49:83:ab:2d:5f:b3:0a:
e7:1c:e1:95:9b:4f:a3:d8:d3:7c:4a:d8:d7:6a:76:07:af:c6:
c3:7c:b6:aa:26:2b:a6:3f:03:28:61:9f:5f:b2:20:6c:6b:69:
31:91:4f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:52:30 2025 by rpki-client