Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/kuOHPQAOod4hRoscefzPkxvyThI.roa
File: kuOHPQAOod4hRoscefzPkxvyThI.roa (raw, json)
Hash identifier: M2VOHxELmw7r1qZKuJ2+9mAZ7c8/lYJuyx5tQ8/gWw0=
Subject key identifier: 92:E3:87:3D:00:0E:A1:DE:21:46:8B:1C:79:FC:CF:93:1B:F2:4E:12
Certificate issuer: /CN=d32f876231dcb5dfd7af4523120565d98006474a
Certificate serial: 0185EEE90BCFB8E0C8BAD41295F232C50382
Authority key identifier: D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/kuOHPQAOod4hRoscefzPkxvyThI.roa
Signing time: Thu 26 Jan 2023 16:28:48 +0000
ROA not before: Thu 26 Jan 2023 16:28:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26548
IP address blocks: 45.148.232.0/23 maxlen: 23
45.148.233.0/24 maxlen: 24
45.148.234.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ee:e9:0b:cf:b8:e0:c8:ba:d4:12:95:f2:32:c5:03:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32f876231dcb5dfd7af4523120565d98006474a
Validity
Not Before: Jan 26 16:28:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92e3873d000ea1de21468b1c79fccf931bf24e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f4:d0:89:1e:92:05:db:9f:06:aa:2e:5f:ee:
f2:1f:98:9b:bc:2f:f2:56:6c:92:df:9c:f0:69:a2:
27:fc:7e:42:9d:58:bd:74:ab:89:c4:cf:2e:a5:3f:
ba:5f:65:30:a3:99:f7:43:00:6f:14:4c:e2:8e:59:
dc:fd:23:ce:c3:f3:cf:59:56:b4:07:ba:63:f6:e5:
19:f2:54:0e:57:80:d7:f3:b9:7c:3a:89:a4:1b:61:
eb:1e:02:24:08:b0:0d:c5:44:30:5c:dc:b6:d4:5c:
47:d8:fd:5d:08:dc:05:0d:d8:e8:3f:02:2c:a0:61:
77:07:51:b9:13:b6:03:b6:1b:5f:c5:54:13:6a:6a:
b1:37:f3:ca:32:41:e6:a0:9d:9d:d9:f1:33:ec:f7:
98:7e:49:d9:a8:e0:08:bd:b3:74:0a:3b:5f:df:98:
2d:5b:56:8a:10:ee:f1:85:e5:9f:d6:2c:84:69:38:
92:96:5f:8a:9c:00:91:ff:82:f5:29:b5:c8:5a:e1:
c3:4b:4f:b7:85:d3:6f:ae:5a:0b:06:3d:1f:cc:1a:
e2:f1:b7:61:97:a7:84:31:5b:21:e2:a1:44:94:96:
e3:3e:1f:1d:b5:a1:7f:38:d5:bc:b5:81:d6:3f:44:
bc:41:0e:96:e6:b1:06:84:12:58:6f:5c:21:af:b0:
22:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E3:87:3D:00:0E:A1:DE:21:46:8B:1C:79:FC:CF:93:1B:F2:4E:12
X509v3 Authority Key Identifier:
keyid:D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/kuOHPQAOod4hRoscefzPkxvyThI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/0y-HYjHctd_Xr0UjEgVl2YAGR0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.232.0/22
Signature Algorithm: sha256WithRSAEncryption
54:ca:71:ae:be:ac:57:0c:64:b6:7a:11:12:c3:0f:f4:f3:8d:
ce:d0:92:b6:d9:46:4a:ab:bf:47:9b:18:94:ab:02:74:7e:73:
79:19:69:30:5e:6d:88:f4:36:25:f3:4c:7c:c0:c0:83:1a:3c:
75:19:f2:14:ac:b8:96:4a:cc:8c:c9:73:1c:9f:7a:2a:28:9c:
24:ac:89:3d:d2:9a:0d:11:92:00:9b:68:84:1d:74:30:be:4b:
a0:60:40:5b:d3:0b:c1:28:0f:fb:9d:96:03:29:bf:c5:15:e1:
94:5d:90:ed:e9:5d:7e:d2:76:71:77:3f:0d:a7:e0:c7:0f:13:
4d:fa:0e:0b:f7:48:b3:df:85:bd:ac:c4:a7:fd:9f:4d:82:ce:
65:4f:79:ff:f5:71:b9:89:39:73:1b:0c:65:d9:69:fc:8b:92:
4a:1a:ef:23:8f:d3:ee:c9:f8:d2:7e:d9:a5:be:51:b0:45:b1:
8a:a3:26:95:88:b6:ca:6c:62:41:3d:83:4a:56:7d:d9:67:50:
41:65:78:d5:01:de:85:46:98:79:3a:c1:29:2b:91:99:33:e6:
e6:ff:f6:8a:06:5d:07:43:56:01:fb:fa:87:aa:e1:c2:a0:78:
6c:cf:e6:6e:8a:9e:e9:44:84:13:fc:2c:f3:65:34:f8:ff:9f:
c1:88:e5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:39 2025 by rpki-client