Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/1b-jMBjwKDEadnthLh30XudHrfg.roa
File: 1b-jMBjwKDEadnthLh30XudHrfg.roa (raw, json)
Hash identifier: HM1ehPXRQsbHE78tcyN2bIt/hNAxFzNKt0CmDn0Ihog=
Subject key identifier: D5:BF:A3:30:18:F0:28:31:1A:76:7B:61:2E:1D:F4:5E:E7:47:AD:F8
Certificate issuer: /CN=d32f876231dcb5dfd7af4523120565d98006474a
Certificate serial: 01843CD4377657A2966936126399139D33A1
Authority key identifier: D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/1b-jMBjwKDEadnthLh30XudHrfg.roa
Signing time: Thu 03 Nov 2022 09:30:51 +0000
ROA not before: Thu 03 Nov 2022 09:30:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59651
IP address blocks: 45.143.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3c:d4:37:76:57:a2:96:69:36:12:63:99:13:9d:33:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32f876231dcb5dfd7af4523120565d98006474a
Validity
Not Before: Nov 3 09:30:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5bfa33018f028311a767b612e1df45ee747adf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:15:7f:1c:08:41:c0:b3:a7:1f:fa:a5:27:94:
41:cf:5c:f1:3b:42:01:4a:54:63:8d:f8:64:c6:54:
98:6a:08:0e:c7:aa:bf:43:e3:c7:c1:8a:ec:9c:a4:
1c:50:ef:fa:89:ea:d7:5b:65:3b:63:1f:b8:26:6b:
e8:2e:d7:25:85:41:c8:52:af:c6:a7:8d:fc:00:21:
d1:dc:6b:8b:21:9e:a5:31:51:c3:bb:bc:61:27:70:
bf:43:26:e6:0f:d8:31:c8:ba:d8:db:3c:d1:65:c7:
9f:3a:b4:09:ea:59:3c:e6:a8:cd:12:c3:18:ef:01:
7a:3a:78:c5:4d:14:4a:b8:07:cf:04:68:a3:83:b7:
fd:d0:bf:4c:62:96:f5:7b:72:27:35:b7:e1:93:20:
c2:86:65:6a:ce:39:f2:ef:aa:42:cf:7a:9e:7a:67:
e9:c2:61:f9:d1:41:48:db:54:a4:47:1c:b0:c2:00:
fa:8b:56:3c:3b:a1:b8:20:0d:6f:30:c4:b5:d1:bc:
0a:46:be:2a:c5:fd:32:dd:7b:bc:d3:28:40:e7:e6:
89:7c:71:15:71:be:88:d9:57:62:bd:ec:ad:3c:4c:
b5:3f:94:60:06:e7:56:28:8d:64:d4:da:32:9b:6c:
ad:c8:82:67:ca:1d:01:99:9d:9b:26:b6:ca:8b:a9:
1c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BF:A3:30:18:F0:28:31:1A:76:7B:61:2E:1D:F4:5E:E7:47:AD:F8
X509v3 Authority Key Identifier:
keyid:D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/1b-jMBjwKDEadnthLh30XudHrfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/0y-HYjHctd_Xr0UjEgVl2YAGR0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.5.0/24
Signature Algorithm: sha256WithRSAEncryption
37:61:4b:25:e5:c8:3f:68:0f:20:50:d8:2d:8d:31:96:3a:cd:
68:6e:f5:27:90:b3:e6:94:a0:d5:70:eb:a5:ad:53:a0:4f:e5:
b3:63:2e:71:20:bc:93:39:af:1a:77:24:0b:ad:bb:ae:2a:17:
37:90:b8:74:4e:06:87:c8:07:cb:ca:6c:0a:2a:f7:80:7b:a9:
74:c0:25:a9:72:5f:1f:50:a1:1a:0c:da:f1:47:81:f1:0e:c8:
20:c0:a5:a6:74:0b:f2:56:52:80:97:b3:7c:6b:74:9f:31:1a:
f5:eb:98:34:1b:22:08:48:63:57:fa:2e:6c:b6:60:8a:a3:5c:
98:6e:91:f8:01:23:45:f4:77:e6:2f:8d:25:0a:6c:0a:f8:1d:
00:02:56:46:15:0a:dc:f4:1e:5c:bc:ba:fb:b1:86:e9:cf:8b:
9d:7f:86:75:94:86:2c:1c:5a:93:ea:df:e4:49:75:7f:59:67:
45:23:07:08:32:c7:71:0f:b9:28:56:d2:13:03:76:10:c4:27:
75:2b:95:d2:04:90:19:e4:88:a7:5a:e4:eb:63:83:fb:ab:46:
71:ef:f7:32:1e:7f:50:22:a5:d2:22:5d:2d:55:ab:91:e2:d2:
4f:94:6b:f6:59:44:20:69:d2:7c:84:dc:7c:92:1f:1d:fd:41:
36:69:af:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:24 2025 by rpki-client