Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6fbd83-1547-4e2e-a3e0-d6e9c93984a1/1/vE-1YqZxwXHyM_gEbCfUHP2VALw.roa
File: vE-1YqZxwXHyM_gEbCfUHP2VALw.roa (raw, json)
Hash identifier: MHDbkp1DMwZekz1fik7FmCyhIFrcnGW9/VrdOdx8evc=
Subject key identifier: BC:4F:B5:62:A6:71:C1:71:F2:33:F8:04:6C:27:D4:1C:FD:95:00:BC
Certificate issuer: /CN=b2bce3c3e816c3b2c9dfa8be2d5dbd21d5ce834d
Certificate serial: 0182DE5947FBE2605C141FD113F4AC66BC91
Authority key identifier: B2:BC:E3:C3:E8:16:C3:B2:C9:DF:A8:BE:2D:5D:BD:21:D5:CE:83:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/srzjw-gWw7LJ36i-LV29IdXOg00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/6fbd83-1547-4e2e-a3e0-d6e9c93984a1/1/vE-1YqZxwXHyM_gEbCfUHP2VALw.roa
Signing time: Sat 27 Aug 2022 08:09:29 +0000
ROA not before: Sat 27 Aug 2022 08:09:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 45.139.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:de:59:47:fb:e2:60:5c:14:1f:d1:13:f4:ac:66:bc:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bce3c3e816c3b2c9dfa8be2d5dbd21d5ce834d
Validity
Not Before: Aug 27 08:09:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc4fb562a671c171f233f8046c27d41cfd9500bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:03:da:cd:4d:3d:46:0b:16:f1:1c:6c:52:28:
57:93:5f:a6:f8:cc:36:b7:b8:c2:fa:87:5a:39:7f:
2b:a8:c9:41:e6:27:9d:0b:cb:8d:b9:ae:12:0c:a4:
11:5a:dd:41:50:74:8f:d3:56:74:0e:f3:3a:1f:16:
a7:07:45:4d:c5:1c:e2:ea:e9:22:6a:b3:70:5c:c3:
c0:ae:2d:5d:f0:10:47:b9:07:6e:48:ce:0b:db:5d:
b9:49:85:4f:8b:4e:31:f3:94:12:16:e1:c2:31:fe:
70:02:84:c9:36:b5:89:b8:17:9f:3b:86:8c:7c:f9:
be:d0:ed:d0:0a:c7:92:84:15:6c:e8:8b:d5:6c:38:
69:65:bd:41:93:09:88:6f:dd:38:9f:0b:71:5c:0f:
4d:b4:45:b1:e7:35:36:a7:dd:55:94:7a:13:7e:44:
31:a2:53:ed:5e:1c:d9:96:7f:2e:ba:84:9c:1c:7d:
dd:6d:d7:a2:65:7b:3b:3d:ab:7f:68:dd:6c:01:da:
1d:35:3a:e6:5f:9c:23:8f:d1:46:c2:e0:6e:20:d1:
77:38:8a:6c:9e:a8:9d:d1:4b:ad:16:d7:f4:29:10:
12:3c:b2:c3:09:1b:9d:d6:6f:2d:38:10:e9:f2:1f:
3b:be:09:25:fe:4d:1c:cb:fb:3c:c6:8c:8b:42:d6:
e3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4F:B5:62:A6:71:C1:71:F2:33:F8:04:6C:27:D4:1C:FD:95:00:BC
X509v3 Authority Key Identifier:
keyid:B2:BC:E3:C3:E8:16:C3:B2:C9:DF:A8:BE:2D:5D:BD:21:D5:CE:83:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srzjw-gWw7LJ36i-LV29IdXOg00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6fbd83-1547-4e2e-a3e0-d6e9c93984a1/1/vE-1YqZxwXHyM_gEbCfUHP2VALw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6fbd83-1547-4e2e-a3e0-d6e9c93984a1/1/srzjw-gWw7LJ36i-LV29IdXOg00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.123.0/24
Signature Algorithm: sha256WithRSAEncryption
22:91:bf:d5:14:1c:de:7e:d3:5a:6b:70:81:d6:74:95:03:9b:
ff:d8:83:3b:32:10:8e:b9:29:88:df:dd:f5:f1:dc:cd:fc:30:
d2:b9:0a:6a:55:da:20:cf:58:d1:26:f2:1a:ae:6e:c0:ec:1b:
62:74:e6:e8:ba:4e:57:5a:c5:00:05:a3:77:ec:ec:23:9a:05:
91:39:d2:da:74:12:da:25:05:ff:7a:46:9f:e1:1a:31:44:03:
75:53:76:f1:26:41:45:66:82:7b:dd:67:c7:b9:fa:16:45:d0:
d4:cc:c8:21:bb:d9:85:b4:9d:cb:df:3a:60:72:90:b6:50:47:
24:f4:5e:52:88:81:af:6a:f3:0f:dd:99:72:f3:e7:33:e6:6c:
50:bf:25:e0:58:bc:ad:46:44:ab:48:77:bf:ac:61:7c:40:d4:
3b:d7:1f:a1:bc:7b:cf:62:a5:5a:3b:14:8e:41:23:8a:80:0e:
04:18:74:d1:47:4e:26:a3:0c:27:ba:7f:6c:0b:2b:05:e1:02:
a4:cb:79:bc:23:7f:f2:8b:b6:75:f3:b9:b7:85:f6:9c:c9:30:
49:ec:f1:74:ff:3a:b9:08:99:85:02:52:db:ae:7b:ac:e0:67:
3c:5f:da:ca:ca:c0:22:54:4f:cd:2a:cc:33:6c:1f:3c:1d:cc:
02:f8:fa:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:36:21 2025 by rpki-client