Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/zJptVTha7xt876iXQ8dlrXFBZ5g.roa
File: zJptVTha7xt876iXQ8dlrXFBZ5g.roa (raw, json)
Hash identifier: 0Ytn6lBmSju6wzg3Yg1b6LOxg1i7zH6vgXzS0eZ0w1c=
Subject key identifier: CC:9A:6D:55:38:5A:EF:1B:7C:EF:A8:97:43:C7:65:AD:71:41:67:98
Certificate issuer: /CN=72978d1d4e7782816ac42da4788e33cbb2487859
Certificate serial: 0184EC272B4750816C1A41137CDB72411587
Authority key identifier: 72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/zJptVTha7xt876iXQ8dlrXFBZ5g.roa
Signing time: Wed 07 Dec 2022 10:35:00 +0000
ROA not before: Wed 07 Dec 2022 10:35:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396426
IP address blocks: 45.141.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:27:2b:47:50:81:6c:1a:41:13:7c:db:72:41:15:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72978d1d4e7782816ac42da4788e33cbb2487859
Validity
Not Before: Dec 7 10:35:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc9a6d55385aef1b7cefa89743c765ad71416798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:1f:c1:0c:df:af:d6:cf:12:c6:7f:8e:a0:
65:f0:b4:5b:a9:59:5e:9e:19:d7:a4:54:d5:79:d2:
1d:42:cc:89:7b:3e:09:ab:05:bb:97:6c:28:42:e6:
2c:f3:35:e3:bd:5f:b0:68:6c:32:9a:6a:3e:a0:3e:
6d:34:11:65:06:6c:f2:04:4a:f4:4b:68:ea:71:55:
d5:3a:a7:1a:8f:b9:23:03:f1:53:7d:cb:f0:b4:4b:
01:97:e6:dd:69:94:b7:fc:31:c8:65:82:61:39:e4:
d9:e7:9a:51:91:7c:2c:a5:23:b3:3c:0a:01:95:5c:
b7:f6:6f:6c:93:b2:d8:c9:29:5c:cf:f6:e1:10:08:
ec:3f:67:35:a6:65:37:90:06:dc:10:27:db:40:89:
e5:dc:95:d7:b7:8d:88:52:ee:ad:17:55:18:3f:ba:
d9:d3:6f:ed:c3:35:ec:0d:00:de:f7:6b:80:fe:f2:
d9:a2:76:2d:ff:9e:a0:07:1c:e8:9d:5a:25:dd:41:
0d:d4:d6:65:48:e8:1d:69:de:37:04:1b:f4:f6:81:
71:00:6d:ca:1c:89:59:1b:b7:fa:0b:20:9c:c8:87:
61:0a:5c:48:c3:0a:7b:eb:fb:46:e9:16:f9:bf:fc:
24:ac:54:95:bc:a5:11:70:41:d7:3b:58:19:cd:e1:
b6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9A:6D:55:38:5A:EF:1B:7C:EF:A8:97:43:C7:65:AD:71:41:67:98
X509v3 Authority Key Identifier:
keyid:72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/zJptVTha7xt876iXQ8dlrXFBZ5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/cpeNHU53goFqxC2keI4zy7JIeFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.12.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:dc:59:61:74:3c:7c:30:bd:d7:25:d1:e1:86:2f:19:39:5e:
29:88:85:25:81:d1:80:01:9b:a7:4f:18:9d:fd:04:fd:e6:23:
fb:44:31:8b:f5:ed:e3:f0:fa:b5:81:03:0e:51:7b:5c:67:31:
af:57:88:e8:7b:75:ca:60:c8:e1:68:4c:ea:12:51:0e:80:6f:
99:cb:d8:15:12:c1:5c:df:ff:fe:bf:fa:90:2a:51:7c:37:8b:
cd:ee:fa:02:f5:e6:49:fc:42:e6:dd:0d:1e:6a:b8:31:2e:1c:
af:7c:f8:a8:75:f5:8a:70:93:ed:fe:57:63:4c:bd:b4:e1:e6:
3a:ec:fe:16:f1:90:8d:f0:3c:9a:0b:41:73:0c:51:b3:a6:79:
d4:10:90:c8:c9:7d:27:99:f1:89:26:09:7d:3e:54:a6:30:f6:
90:3d:2e:e9:6d:01:d9:11:2c:a8:47:7e:78:94:35:7a:84:68:
31:63:5e:e2:16:41:c4:83:ed:79:64:ba:70:89:73:30:d1:b3:
cd:ec:5d:fe:32:a4:ed:f9:3a:7e:3f:34:20:53:91:27:19:be:
1a:a9:6c:61:6d:89:a9:cb:4b:ee:b9:01:43:79:41:45:68:1e:
0e:30:90:57:5d:22:4c:c6:57:fb:2c:03:8e:86:72:df:43:c7:
3d:1c:14:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:58 2025 by rpki-client