Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/qVbLxD6_SnJ9Ri3pG5iIDWaQaJw.roa
File: qVbLxD6_SnJ9Ri3pG5iIDWaQaJw.roa (raw, json)
Hash identifier: 142k1dwWmO41dPYJ6ktmqZ1l3qPDCF5mevF4VBGoyEo=
Subject key identifier: A9:56:CB:C4:3E:BF:4A:72:7D:46:2D:E9:1B:98:88:0D:66:90:68:9C
Certificate issuer: /CN=d32f876231dcb5dfd7af4523120565d98006474a
Certificate serial: 01856CC16408A53CD2010A4A81D2C02D8744
Authority key identifier: D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/qVbLxD6_SnJ9Ri3pG5iIDWaQaJw.roa
Signing time: Sun 01 Jan 2023 09:54:51 +0000
ROA not before: Sun 01 Jan 2023 09:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 45.148.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:64:08:a5:3c:d2:01:0a:4a:81:d2:c0:2d:87:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32f876231dcb5dfd7af4523120565d98006474a
Validity
Not Before: Jan 1 09:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a956cbc43ebf4a727d462de91b98880d6690689c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:30:4d:99:5c:6f:31:20:1f:21:be:5d:94:c0:
6b:a8:ea:90:b9:e0:96:2f:58:eb:8f:40:c5:b5:85:
74:a2:40:17:11:8c:ad:7a:14:07:91:81:eb:76:33:
91:37:64:91:20:94:1c:f6:36:f8:1c:aa:fe:7c:40:
ac:1c:70:28:93:b4:d0:bb:1a:c2:e5:77:48:1d:64:
7d:d6:cf:03:e6:ff:6d:e8:f9:0c:38:f5:c0:42:85:
6f:a4:e4:66:09:09:3e:ca:43:ea:13:63:f0:3a:34:
2d:42:48:5f:b8:e4:8c:e3:e9:d6:b5:15:0b:ed:d9:
3f:be:1c:53:93:2a:e6:96:cf:24:65:c1:c9:67:b5:
53:a0:7f:a7:1b:48:f1:de:59:8f:ce:0f:9b:55:bb:
54:7d:ea:7e:6d:a6:c8:7e:cf:55:3d:59:c2:46:36:
08:42:21:03:3f:72:25:16:6b:cd:3f:db:4f:7c:09:
d0:7d:d5:15:85:f2:d2:0b:e6:39:17:ad:ec:77:7e:
be:73:fb:97:52:30:b0:a3:74:4f:ba:9a:00:3e:4a:
23:5a:b4:b1:1c:71:83:8a:c0:00:64:2e:0b:24:7f:
12:1c:f9:4e:3f:8e:64:27:dd:f2:cc:1d:9c:26:2e:
5e:87:df:08:37:28:b2:4d:f8:5d:68:20:8b:86:79:
f6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:56:CB:C4:3E:BF:4A:72:7D:46:2D:E9:1B:98:88:0D:66:90:68:9C
X509v3 Authority Key Identifier:
keyid:D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/qVbLxD6_SnJ9Ri3pG5iIDWaQaJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/0y-HYjHctd_Xr0UjEgVl2YAGR0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.233.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ef:bd:20:a4:3d:60:6c:4c:f1:2b:60:09:f7:37:e2:6a:30:
ae:ab:6d:70:dc:e0:67:8e:51:91:60:14:b0:22:e5:f0:43:7a:
90:8b:1c:51:92:40:d3:8b:62:72:3f:51:b5:e4:6d:cd:42:7d:
b4:78:cf:2e:da:22:d7:76:72:ff:eb:74:a2:91:3d:5d:fe:6a:
75:dd:a9:96:68:cd:1b:f2:5b:f9:9b:bc:d7:cc:c7:9a:d0:e7:
3f:ef:9c:eb:21:90:6b:47:b1:f3:2b:90:f2:ee:36:66:67:32:
37:f0:86:e8:ca:91:a5:d0:90:76:3e:9f:55:c4:28:93:62:25:
be:09:c0:f4:7e:fd:2c:a5:d6:b6:fd:71:17:94:84:13:f8:57:
d8:84:4b:a2:35:6c:2d:08:9e:d9:3c:99:77:ca:f3:71:0f:ff:
94:71:26:31:3c:71:99:98:d6:15:13:63:54:6a:58:d6:f6:3c:
a0:b4:cc:ba:64:55:60:db:d8:cc:f4:5e:f0:45:13:35:d6:ff:
38:d6:87:07:1d:ac:2b:95:f2:30:99:4a:e1:ae:2b:8a:db:2d:
ab:7c:9f:48:d0:5b:0e:fd:5a:86:0a:39:28:71:05:ce:e2:80:
11:6b:31:cf:e6:13:74:e7:44:55:c1:40:b9:cc:54:48:75:cf:
59:59:2b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:33 2025 by rpki-client