Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/Rbv0nE_rbcB9bXZDTg7Yh_tID_E.roa
File: Rbv0nE_rbcB9bXZDTg7Yh_tID_E.roa (raw, json)
Hash identifier: 3oHOcpXlQyMltxzY1KS6+bTYX28r3IUniNgzhUOop3w=
Subject key identifier: 45:BB:F4:9C:4F:EB:6D:C0:7D:6D:76:43:4E:0E:D8:87:FB:48:0F:F1
Certificate issuer: /CN=d32f876231dcb5dfd7af4523120565d98006474a
Certificate serial: 0184EBAB91B34F343C1ADD27DA53613DC38C
Authority key identifier: D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/Rbv0nE_rbcB9bXZDTg7Yh_tID_E.roa
Signing time: Wed 07 Dec 2022 08:20:00 +0000
ROA not before: Wed 07 Dec 2022 08:20:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 53850
IP address blocks: 45.143.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:eb:ab:91:b3:4f:34:3c:1a:dd:27:da:53:61:3d:c3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32f876231dcb5dfd7af4523120565d98006474a
Validity
Not Before: Dec 7 08:20:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45bbf49c4feb6dc07d6d76434e0ed887fb480ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fb:5c:11:7c:17:bc:d4:b4:7b:cd:c2:8c:9d:
a0:38:e7:f6:04:d8:25:9f:cd:bb:2c:58:4a:0a:aa:
41:73:03:f0:45:50:57:20:84:77:9c:92:e5:44:cd:
dd:87:04:e8:99:97:d4:63:4e:82:91:b9:21:83:46:
10:91:5c:9a:50:61:35:23:ec:15:fc:a2:1d:52:05:
d5:eb:14:df:58:13:98:ce:03:14:53:5b:9f:78:0c:
a1:f9:d4:2b:0f:0d:49:b6:13:1c:d1:ed:dc:aa:f4:
56:89:2f:f7:38:54:58:1c:49:a9:56:b8:d3:92:de:
26:fb:31:dd:a8:d7:67:b4:a5:3e:c6:96:98:4b:dd:
c5:a9:dc:66:5d:70:ba:84:27:51:f2:35:c7:eb:e0:
48:84:2c:2e:b5:83:b7:0b:e9:9b:13:3d:2f:af:b6:
ee:00:4b:62:30:60:5e:a3:9c:92:59:58:f1:19:00:
e7:59:17:b4:58:f2:4e:01:a5:33:d9:0f:31:12:69:
0e:2c:37:b0:f3:95:8c:28:8e:00:cc:00:33:c3:2d:
ac:55:ea:cd:7d:b1:71:e7:ea:b5:cf:13:bc:45:ca:
56:7b:45:ef:72:13:3c:4e:9e:9b:c9:00:4e:7b:2f:
55:87:d0:50:00:a0:27:6d:b7:3b:02:08:85:b4:77:
59:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BB:F4:9C:4F:EB:6D:C0:7D:6D:76:43:4E:0E:D8:87:FB:48:0F:F1
X509v3 Authority Key Identifier:
keyid:D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/Rbv0nE_rbcB9bXZDTg7Yh_tID_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/0y-HYjHctd_Xr0UjEgVl2YAGR0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.6.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a9:e0:55:a7:11:75:a0:f9:2b:6b:1a:63:48:d6:00:7b:9c:
3d:67:21:2f:ad:84:b0:22:21:89:50:89:81:69:71:fd:f7:af:
94:75:eb:e7:70:08:ca:25:f0:e5:e9:bc:20:5a:c8:32:64:13:
b3:b4:e0:d6:e6:a3:65:fc:35:b9:26:20:7e:b8:bc:45:18:3d:
b1:f2:4f:e1:85:42:6e:13:b8:e4:35:d2:5a:6c:96:fc:19:ed:
48:9a:cf:47:2d:97:f1:1c:04:c4:6d:ba:4e:51:44:8e:56:f6:
64:63:ae:35:3d:9f:ea:8f:d8:3a:0d:39:42:9d:d7:74:f9:d7:
82:cb:88:aa:d7:6c:83:0b:9a:8f:da:c0:29:0f:77:21:66:26:
aa:20:a4:32:2b:14:1c:04:11:b8:a7:5a:fb:26:65:74:db:8d:
bd:61:75:54:6b:82:10:c7:5f:e3:43:04:9a:62:73:7a:f0:34:
a8:dc:33:3a:be:2d:ca:3f:eb:ef:98:37:84:1b:85:83:ca:84:
cd:a3:85:14:57:a7:e9:90:41:65:65:dc:45:6d:88:f4:ee:87:
41:7c:ff:a3:ea:cf:df:0b:e2:43:81:d7:b5:3f:a6:f7:33:73:
31:74:92:e5:ac:73:56:7e:f2:b0:dd:08:9a:1e:a4:b8:db:42:
13:aa:a2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:44 2025 by rpki-client