Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/I4GMWHgmIhdxAu2nKbQmEFGszEM.roa
File: I4GMWHgmIhdxAu2nKbQmEFGszEM.roa (raw, json)
Hash identifier: JOeV2j2Sn9x3Z+F01JEUCOwhjQq+B5CkQ70IrU/uOSI=
Subject key identifier: 23:81:8C:58:78:26:22:17:71:02:ED:A7:29:B4:26:10:51:AC:CC:43
Certificate issuer: /CN=37a8b5a1895c5088205095c2f7a5efe91d539e45
Certificate serial: 0181F75275EA298B297A5BFC9CDD947E06DA
Authority key identifier: 37:A8:B5:A1:89:5C:50:88:20:50:95:C2:F7:A5:EF:E9:1D:53:9E:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6i1oYlcUIggUJXC96Xv6R1TnkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/I4GMWHgmIhdxAu2nKbQmEFGszEM.roa
Signing time: Wed 13 Jul 2022 11:29:45 +0000
ROA not before: Wed 13 Jul 2022 11:29:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 45.128.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:52:75:ea:29:8b:29:7a:5b:fc:9c:dd:94:7e:06:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a8b5a1895c5088205095c2f7a5efe91d539e45
Validity
Not Before: Jul 13 11:29:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23818c58782622177102eda729b4261051accc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6a:a7:70:77:ad:f9:80:08:73:0a:58:06:28:
46:e4:71:96:95:fa:c0:30:6f:1e:81:02:d2:18:ee:
46:b9:a1:7a:ba:a2:f4:84:dc:a3:d4:b7:5d:53:3f:
bf:e3:ec:ca:e0:e2:19:7e:42:d2:9f:f3:c9:cb:aa:
39:e2:27:1e:fc:3a:3b:7d:18:19:a0:de:47:42:24:
f8:42:9c:7e:cf:0c:cd:e5:08:ba:8d:d0:95:8a:66:
50:ab:d1:f7:a2:41:b2:92:9a:d8:73:0a:5f:09:73:
48:bb:6f:11:12:a2:ac:9c:5f:16:47:d7:92:8f:21:
74:41:48:f5:de:4b:30:d7:ca:9c:d0:74:2b:2b:71:
55:24:43:c6:84:15:64:38:35:c6:20:19:27:cc:ac:
8b:4f:17:44:61:9c:c0:15:be:e5:91:b0:0a:5f:89:
42:8b:8f:0a:3a:7e:d1:8e:ab:06:74:e5:2c:09:80:
ef:6c:33:28:7a:30:87:2d:44:f4:94:7a:9a:5b:6a:
b2:f7:91:39:f9:05:6d:17:0f:f2:24:dc:89:2c:69:
33:08:79:19:39:2a:43:43:19:88:0e:9e:46:99:b2:
73:cc:c4:3c:94:bf:0e:c8:60:ca:5c:7b:d0:e0:5d:
80:bd:86:da:0e:fd:63:dc:9b:d2:ec:7f:5a:00:3a:
39:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:81:8C:58:78:26:22:17:71:02:ED:A7:29:B4:26:10:51:AC:CC:43
X509v3 Authority Key Identifier:
keyid:37:A8:B5:A1:89:5C:50:88:20:50:95:C2:F7:A5:EF:E9:1D:53:9E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6i1oYlcUIggUJXC96Xv6R1TnkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/I4GMWHgmIhdxAu2nKbQmEFGszEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/N6i1oYlcUIggUJXC96Xv6R1TnkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.235.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ee:b2:33:53:38:b5:d0:3f:be:6d:40:ea:f8:87:72:7a:48:
42:49:8c:f1:a3:76:b1:65:65:4b:71:dd:20:ce:cb:db:7e:f2:
2f:31:d8:b4:c7:26:7f:64:85:0d:89:d7:f8:41:54:ec:60:4b:
5c:ac:7a:17:7f:9d:96:ba:72:db:08:55:1b:2c:f7:53:22:b1:
7e:ee:07:84:fd:66:c9:e4:67:a2:51:39:06:f6:90:c5:63:fb:
2a:87:77:16:69:ba:b2:b2:a1:eb:c0:bc:ec:49:69:78:18:a4:
0d:93:de:f3:c5:20:89:fe:40:88:66:73:61:b7:cc:3d:6e:14:
ad:46:75:04:5f:8f:d3:29:09:c4:b7:ae:8e:32:86:8f:ee:e9:
d8:98:d4:29:2e:e6:3e:9e:1b:96:c9:45:33:f2:18:98:05:c2:
ff:85:19:cd:81:93:5c:98:fe:8f:9d:49:65:e3:fd:c1:b0:d3:
a3:a2:fb:8f:89:6a:ad:d3:71:84:91:84:bd:38:12:01:42:c8:
81:55:8d:8f:20:1d:70:4d:7b:df:c7:2f:65:33:a9:b3:3d:b2:
44:ec:af:6f:9a:17:84:2f:4d:f7:29:82:35:1d:8e:69:f1:e7:
dd:e9:51:bf:cb:ff:07:d6:c6:2c:c3:75:5e:5d:9b:e2:a3:9d:
1a:82:cc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:32 2025 by rpki-client