Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/SlKc3S0erKQ-6v9KqV5GVetPpHk.roa
File: SlKc3S0erKQ-6v9KqV5GVetPpHk.roa (raw, json)
Hash identifier: eQbhKZTKn1a35Woco/tpsJrzbtpjKCD1mWcAkWeKYVA=
Subject key identifier: 4A:52:9C:DD:2D:1E:AC:A4:3E:EA:FF:4A:A9:5E:46:55:EB:4F:A4:79
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 01846D9E02B4CB698C950B9E4E419EC527BB
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/SlKc3S0erKQ-6v9KqV5GVetPpHk.roa
Signing time: Sat 12 Nov 2022 20:53:02 +0000
ROA not before: Sat 12 Nov 2022 20:53:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 45.132.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6d:9e:02:b4:cb:69:8c:95:0b:9e:4e:41:9e:c5:27:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Nov 12 20:53:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a529cdd2d1eaca43eeaff4aa95e4655eb4fa479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0b:e1:73:48:f3:5f:02:2a:ed:a2:e4:46:d3:
30:04:a9:0c:e4:ba:c8:be:d7:14:69:24:ff:2b:ba:
93:57:f7:6c:ff:58:af:b1:2f:36:6f:08:81:aa:33:
9d:f3:56:07:c3:20:61:d1:0c:e1:eb:4c:1a:9a:6e:
49:a1:ac:12:15:7a:19:37:fe:77:e7:ae:4f:94:20:
fa:e3:09:cc:b0:b4:91:37:61:a7:fd:33:64:e1:21:
41:7b:e9:a0:88:1f:a7:4f:75:f8:45:82:c1:c6:27:
8f:35:0b:0d:08:60:45:1a:2b:fd:1b:af:7a:4b:6a:
b1:7d:5d:a7:cb:d6:5b:2e:f2:66:fd:47:7c:66:6b:
cf:7d:15:54:33:7d:d3:54:04:9c:65:83:6c:8d:07:
7f:83:d0:b9:9a:77:f3:d3:34:ba:40:50:95:5a:5e:
62:22:c2:dc:0c:71:da:12:06:86:8e:9a:15:1b:f3:
11:16:76:70:50:80:18:6c:5f:dc:e1:3a:44:1c:c5:
f3:5b:0a:e4:79:4a:94:c5:f1:48:5d:2c:bd:49:ba:
15:04:60:c7:cf:04:39:eb:c8:50:24:43:e6:45:eb:
bf:1f:c1:d1:53:6f:90:55:19:fd:12:41:3b:89:41:
86:0a:33:9a:5a:2a:7c:2d:98:ba:26:d2:44:3f:f0:
3d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:52:9C:DD:2D:1E:AC:A4:3E:EA:FF:4A:A9:5E:46:55:EB:4F:A4:79
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/SlKc3S0erKQ-6v9KqV5GVetPpHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.207.0/24
Signature Algorithm: sha256WithRSAEncryption
81:c0:5e:9e:2b:b9:b7:cf:95:d4:ca:22:f1:0e:5c:53:47:c3:
1c:d1:9e:2b:1f:b7:e8:b4:26:2d:96:33:25:52:54:8b:09:ea:
79:d3:e6:e4:5e:0c:33:d6:a3:30:bd:5e:9e:c4:67:a3:41:1d:
48:e8:f9:02:68:46:b5:33:ad:26:8c:80:04:73:bc:04:b3:d0:
3a:e3:dd:38:14:16:5d:a1:b8:dc:38:3b:f9:83:c2:5b:19:ad:
1d:03:9b:3f:d7:3d:d3:1e:75:3d:44:eb:ea:c0:ba:c2:91:7e:
d6:e0:25:e6:d5:8f:14:cd:59:32:e6:46:3a:9d:4b:9b:ee:a8:
0b:13:d1:4b:64:7c:c9:c8:e1:3d:72:00:ff:02:a5:0b:b4:55:
01:8a:a3:c4:1e:9e:bd:67:2e:77:06:97:43:2f:d6:a5:45:13:
1d:ed:8f:d8:80:0d:2c:99:6e:b6:5b:3c:26:36:72:32:41:2f:
b7:58:58:30:c0:02:8a:41:82:12:ff:e1:79:92:da:b0:1e:1d:
e1:fb:b5:de:14:88:10:57:68:05:ca:d2:d3:40:18:c4:df:84:
e0:8b:d9:b6:04:96:37:bd:47:c9:9f:2f:17:56:69:b1:6b:d9:
72:39:18:7e:7d:f6:f1:70:c3:1b:43:32:d3:b4:54:91:c3:e9:
a8:6f:96:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:09 2025 by rpki-client