Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cf3a25-5175-4dbf-907e-bd31614d58a3/1/BaTRKi3dPthDCfkXYdsSS2dAn-c.roa
File: BaTRKi3dPthDCfkXYdsSS2dAn-c.roa (raw, json)
Hash identifier: QQwVVzE3GqxGKq9CvgU4ZvJ6bu2I2e1EgIP30llSn1k=
Subject key identifier: 05:A4:D1:2A:2D:DD:3E:D8:43:09:F9:17:61:DB:12:4B:67:40:9F:E7
Certificate issuer: /CN=c7dd7e874e6aa46bac994a6b10206bd924f769cd
Certificate serial: 01857169BE71CAA3C63797033E24BFCFB786
Authority key identifier: C7:DD:7E:87:4E:6A:A4:6B:AC:99:4A:6B:10:20:6B:D9:24:F7:69:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x91-h05qpGusmUprECBr2ST3ac0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cf3a25-5175-4dbf-907e-bd31614d58a3/1/BaTRKi3dPthDCfkXYdsSS2dAn-c.roa
Signing time: Mon 02 Jan 2023 07:37:13 +0000
ROA not before: Mon 02 Jan 2023 07:37:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59745
IP address blocks: 45.151.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:be:71:ca:a3:c6:37:97:03:3e:24:bf:cf:b7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7dd7e874e6aa46bac994a6b10206bd924f769cd
Validity
Not Before: Jan 2 07:37:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05a4d12a2ddd3ed84309f91761db124b67409fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f9:b6:16:31:7a:1e:a3:3a:dc:37:9f:e6:19:
1b:e0:d3:22:67:45:d0:d7:99:7b:31:0a:38:5a:74:
ed:0f:a0:44:11:c6:d4:9d:f4:09:92:fa:1c:f5:09:
85:fa:71:ea:88:50:70:44:40:cd:e8:36:93:84:f0:
bd:c2:23:61:d5:7b:41:6a:5a:7c:50:a1:80:11:b0:
17:5c:79:bb:54:22:c7:0d:07:23:28:40:a8:fc:a9:
07:03:ea:24:cf:46:f1:5c:97:f5:8e:28:f5:36:37:
3e:a3:e7:89:6e:81:92:37:68:81:b4:57:a5:4c:d4:
79:07:9c:f8:b8:98:1d:88:f4:22:b4:69:e2:63:c5:
c2:31:08:5a:ea:1a:a0:28:df:f0:e5:33:a1:df:87:
be:db:33:06:12:7e:b2:03:ce:68:1c:6f:db:4b:8e:
7a:dd:07:ba:09:9e:84:6d:6a:3e:de:87:1d:11:a4:
d1:eb:90:b4:52:76:51:11:10:81:f8:ce:51:8a:1f:
94:2b:93:78:b8:0b:9c:58:dc:fd:ed:82:c0:60:74:
ae:a6:1f:91:31:07:c7:44:8b:ce:9f:20:3d:46:8c:
79:39:73:69:05:3c:1a:90:b5:43:f9:ab:34:29:45:
21:93:89:e7:1b:c6:3c:60:b5:3b:a1:7c:57:1a:4c:
3c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A4:D1:2A:2D:DD:3E:D8:43:09:F9:17:61:DB:12:4B:67:40:9F:E7
X509v3 Authority Key Identifier:
keyid:C7:DD:7E:87:4E:6A:A4:6B:AC:99:4A:6B:10:20:6B:D9:24:F7:69:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x91-h05qpGusmUprECBr2ST3ac0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf3a25-5175-4dbf-907e-bd31614d58a3/1/BaTRKi3dPthDCfkXYdsSS2dAn-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf3a25-5175-4dbf-907e-bd31614d58a3/1/x91-h05qpGusmUprECBr2ST3ac0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.92.0/22
Signature Algorithm: sha256WithRSAEncryption
64:c0:0b:7e:40:06:49:68:22:f8:b8:f5:db:18:6e:2f:ee:5b:
92:a5:1f:56:c1:12:bb:50:a2:7d:99:03:1b:51:0a:8b:7a:1a:
5a:0d:07:c1:d5:f6:4b:09:fc:d2:56:aa:f2:6b:70:1f:7f:d2:
5f:82:76:40:56:0a:81:90:96:b4:bc:52:63:44:ac:a4:96:b0:
8b:8d:b3:ce:3c:bd:54:19:03:7a:d3:66:5b:52:7a:0a:99:cf:
4a:3b:d6:6c:ed:45:96:6a:c9:eb:4e:7b:4f:bb:fa:6a:6e:af:
54:98:67:71:44:4f:23:ef:85:30:12:df:d4:8c:79:4b:68:d0:
c1:fd:57:89:dd:a2:a0:73:8b:5a:e7:57:2a:f6:11:3f:f6:5a:
7f:61:32:cc:76:16:e1:81:82:d9:a7:3f:7e:33:6d:a3:90:32:
e0:d5:fa:1a:5b:e8:39:a5:60:cb:45:52:89:5b:b3:7d:b4:a0:
4a:65:18:49:90:f1:b4:1f:d5:f6:88:43:04:b4:bf:30:cd:08:
ee:98:cc:fb:2c:32:37:5e:e3:4c:90:1d:77:20:ab:cf:8e:92:
bf:95:38:5b:7d:31:d3:5e:37:f7:01:56:6d:90:2b:14:61:4d:
b6:02:6b:2f:a2:6e:cb:32:57:00:71:cd:df:4b:f0:75:af:49:
56:05:47:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:34 2025 by rpki-client