Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/4409b8-a81e-429a-97a2-46c391508436/1/rjDeyXKAKHS7Z1qz9KwWH1UfG-Y.roa
File: rjDeyXKAKHS7Z1qz9KwWH1UfG-Y.roa (raw, json)
Hash identifier: GbCVOU0w2MYQ4miKZ6kSpQowKAdfEAn0mgjS3FY8chI=
Subject key identifier: AE:30:DE:C9:72:80:28:74:BB:67:5A:B3:F4:AC:16:1F:55:1F:1B:E6
Certificate issuer: /CN=0795d47b63a0fe19d3f001845bcfe201c8e60aa3
Certificate serial: 0183E64791AD6B4798DB90A019A05B84F4EB
Authority key identifier: 07:95:D4:7B:63:A0:FE:19:D3:F0:01:84:5B:CF:E2:01:C8:E6:0A:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5XUe2Og_hnT8AGEW8_iAcjmCqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/4409b8-a81e-429a-97a2-46c391508436/1/rjDeyXKAKHS7Z1qz9KwWH1UfG-Y.roa
Signing time: Mon 17 Oct 2022 14:09:53 +0000
ROA not before: Mon 17 Oct 2022 14:09:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22653
IP address blocks: 45.91.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e6:47:91:ad:6b:47:98:db:90:a0:19:a0:5b:84:f4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0795d47b63a0fe19d3f001845bcfe201c8e60aa3
Validity
Not Before: Oct 17 14:09:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae30dec972802874bb675ab3f4ac161f551f1be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e6:95:0a:38:66:22:5c:c3:79:f7:4f:6f:c1:
b0:ad:bd:69:22:71:e3:1b:7a:7b:f9:8a:61:7c:7c:
96:0b:de:b9:90:1a:0a:81:01:1e:82:ca:f2:22:21:
50:dc:b1:31:65:72:7d:fb:3b:67:83:3b:19:d4:78:
9b:21:4e:8b:86:cf:b3:d4:4f:b9:05:3a:c1:77:9d:
22:ef:de:ba:b6:5f:21:44:4a:c2:89:0f:3d:de:b3:
14:c4:c7:96:be:f1:66:2f:c0:44:b6:79:37:8f:03:
bb:a3:91:5d:c2:a3:e9:36:04:8d:60:f8:f1:f0:31:
ed:3f:43:15:37:a7:f4:51:a5:80:ea:b0:cb:12:d4:
06:1b:fa:43:d9:77:72:aa:94:dc:05:64:ed:e6:28:
f3:00:9f:5b:68:69:ca:84:e0:20:08:e4:59:60:a9:
0c:93:ec:b4:12:4e:1c:b6:0a:92:ee:fb:71:2e:59:
43:68:28:d0:10:15:1c:90:d0:e3:54:15:b5:48:3c:
7f:9b:e1:8d:36:da:89:00:2c:b8:74:73:cc:b2:63:
81:5d:14:da:40:e3:a2:c7:66:c0:fb:a4:63:ff:cc:
5b:3e:5c:9b:d8:1e:b5:5c:9c:97:84:68:39:5c:cc:
63:d3:03:76:88:46:3c:c2:b5:3f:a2:15:b5:af:2b:
64:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:30:DE:C9:72:80:28:74:BB:67:5A:B3:F4:AC:16:1F:55:1F:1B:E6
X509v3 Authority Key Identifier:
keyid:07:95:D4:7B:63:A0:FE:19:D3:F0:01:84:5B:CF:E2:01:C8:E6:0A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5XUe2Og_hnT8AGEW8_iAcjmCqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4409b8-a81e-429a-97a2-46c391508436/1/rjDeyXKAKHS7Z1qz9KwWH1UfG-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4409b8-a81e-429a-97a2-46c391508436/1/B5XUe2Og_hnT8AGEW8_iAcjmCqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.192.0/24
Signature Algorithm: sha256WithRSAEncryption
10:23:95:d3:e0:61:ab:9b:39:f4:36:18:68:47:15:55:81:02:
20:f1:b7:9d:16:8a:76:23:ed:7c:4c:24:24:a8:25:21:70:37:
58:24:06:79:75:ea:97:f8:5d:b6:42:34:11:14:fe:48:e3:cb:
77:42:af:f0:e6:a9:31:27:b2:a3:fe:65:14:4d:27:97:8c:e8:
25:57:da:df:ea:5c:58:d7:98:65:db:38:11:ae:3f:76:f8:f4:
0a:ab:65:b8:5f:50:a2:b8:01:fe:2d:45:c3:87:1e:4a:6b:bf:
ae:77:fe:a4:21:27:da:f9:52:69:52:f3:a9:77:6d:e3:42:65:
77:74:a1:82:ac:27:7c:1c:87:c3:d8:1a:4d:89:f9:9c:8f:e4:
84:c0:f6:e7:2a:10:de:43:99:98:8b:e7:44:ce:6d:7e:49:99:
8b:4a:70:d6:3b:bb:d2:2a:7c:c0:78:5f:a1:f0:4e:59:c0:e5:
58:1f:d7:8b:cc:74:f7:17:83:8c:e4:a2:0a:51:e9:8b:91:c4:
5e:8f:79:8a:99:6a:4f:49:25:53:5a:dd:99:b7:3e:84:50:14:
96:3a:f3:21:af:70:4b:19:ad:bb:57:8f:4c:3c:c9:8d:f4:c3:
f7:8e:ac:a5:cb:6c:5d:71:22:18:60:e3:b6:e0:75:6d:99:ce:
e0:ac:a6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:12 2025 by rpki-client