Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/6fxGtTDTG7HSk7E-D0neG54fnlY.roa
File: 6fxGtTDTG7HSk7E-D0neG54fnlY.roa (raw, json)
Hash identifier: bTs6Jsdmjg4aPbDPPxscEAllVOl+BUOtENrRpXu4lkc=
Subject key identifier: E9:FC:46:B5:30:D3:1B:B1:D2:93:B1:3E:0F:49:DE:1B:9E:1F:9E:56
Certificate issuer: /CN=c3abdcc49f7d9033b52904679f3c9b783d8c1358
Certificate serial: 018CC5DBFEE12842E2004F74D1F59254A9E4
Authority key identifier: C3:AB:DC:C4:9F:7D:90:33:B5:29:04:67:9F:3C:9B:78:3D:8C:13:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6vcxJ99kDO1KQRnnzybeD2ME1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/6fxGtTDTG7HSk7E-D0neG54fnlY.roa
Signing time: Mon 01 Jan 2024 16:29:38 +0000
ROA not before: Mon 01 Jan 2024 16:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43581
IP address blocks: 45.155.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:fe:e1:28:42:e2:00:4f:74:d1:f5:92:54:a9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3abdcc49f7d9033b52904679f3c9b783d8c1358
Validity
Not Before: Jan 1 16:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9fc46b530d31bb1d293b13e0f49de1b9e1f9e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4e:35:22:6e:bf:44:35:ae:e7:e3:14:d0:34:
28:fd:e1:23:99:97:85:34:2c:82:fd:fb:49:16:95:
51:7c:cd:f1:35:e1:67:e9:67:a4:e3:47:fb:26:a7:
34:3f:e6:4b:2d:d8:c1:43:00:46:b0:be:f0:93:01:
29:45:3c:e8:0c:59:c2:cf:60:99:2e:c3:1b:f6:04:
ec:9b:51:3c:1e:d2:e4:6a:b0:33:e8:24:9e:75:46:
76:89:aa:04:dc:25:0e:d1:da:29:d2:34:8f:cf:63:
f8:21:aa:2a:88:24:8d:fe:61:95:4f:6b:75:fa:27:
cf:26:7c:8f:43:4a:9e:6f:5d:ef:c8:8c:ee:9a:f9:
f5:16:53:c8:54:29:70:b8:6f:bb:7d:a0:2e:19:0b:
f4:2f:b1:60:70:42:ba:39:7f:fa:27:5c:2c:4c:93:
32:2e:68:bd:e2:59:f3:05:95:bb:70:87:d2:88:8f:
09:4b:08:49:d6:9d:8a:52:17:28:37:7b:46:d7:91:
1d:50:dc:44:b7:9f:fc:f8:a9:52:e7:58:0b:f8:54:
21:55:52:16:1b:c0:da:6b:c5:a2:0a:fd:36:1c:48:
2d:99:4a:fe:db:c3:4c:3c:af:c7:66:a4:d7:38:e7:
68:14:7d:a6:15:2b:8d:f6:ec:0c:f4:d0:59:47:b3:
6c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FC:46:B5:30:D3:1B:B1:D2:93:B1:3E:0F:49:DE:1B:9E:1F:9E:56
X509v3 Authority Key Identifier:
keyid:C3:AB:DC:C4:9F:7D:90:33:B5:29:04:67:9F:3C:9B:78:3D:8C:13:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6vcxJ99kDO1KQRnnzybeD2ME1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/6fxGtTDTG7HSk7E-D0neG54fnlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/w6vcxJ99kDO1KQRnnzybeD2ME1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.207.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:b2:57:bb:da:e1:7a:dc:a3:fb:11:1a:05:86:50:6d:2f:c4:
e9:42:18:4e:77:1a:35:37:f5:07:28:26:ca:27:52:7d:aa:22:
22:4f:6e:73:c0:15:4e:4c:5b:6e:1d:53:d4:a5:38:5e:00:d0:
f2:ed:35:5e:f1:d5:5e:15:12:40:16:e4:18:79:46:88:3f:71:
a8:44:5b:e7:f3:d4:fc:34:b0:4e:4d:53:c1:47:bb:47:0d:74:
e8:1f:50:86:b6:8f:69:b2:76:f0:b3:58:e6:7e:05:fe:ab:b8:
83:73:ac:38:74:c6:f9:0d:66:1c:71:b6:f4:2b:75:69:9f:91:
c0:9c:b0:60:d0:78:45:2e:6a:76:66:4b:59:20:82:e8:53:57:
32:c3:12:3b:55:51:36:d3:54:96:1d:11:b6:93:bb:12:a6:2c:
28:af:a6:7d:a6:80:ca:57:f4:0d:dc:63:3c:b6:ed:29:0d:82:
d4:c9:b3:7f:be:94:97:d7:47:0a:18:73:fa:b3:db:46:87:14:
0d:0d:44:2f:31:27:ab:de:db:4e:a6:77:4c:2a:04:bc:e6:84:
5e:fa:f6:95:13:ed:eb:be:92:bd:38:08:a5:ab:ee:02:50:5c:
6e:4e:cd:e2:97:05:67:d3:a1:6a:e1:47:9d:b2:26:ec:8f:53:
b9:bc:41:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:23 2025 by rpki-client