Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/pecKnf0d9IGQ25_H1zMQXxXKLNg.roa
File: pecKnf0d9IGQ25_H1zMQXxXKLNg.roa (raw, json)
Hash identifier: vFy/bsDGvVl8habvsU85G4+rZWpivZL9ZbFR6RVn4Iw=
Subject key identifier: A5:E7:0A:9D:FD:1D:F4:81:90:DB:9F:C7:D7:33:10:5F:15:CA:2C:D8
Certificate issuer: /CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Certificate serial: 018BF0C9892BCFB5F016A34F8B2C3E1C39EB
Authority key identifier: 64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/pecKnf0d9IGQ25_H1zMQXxXKLNg.roa
Signing time: Tue 21 Nov 2023 07:30:21 +0000
ROA not before: Tue 21 Nov 2023 07:30:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209015
IP address blocks: 45.10.201.0/24 maxlen: 24
45.10.200.0/24 maxlen: 24
45.10.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:c9:89:2b:cf:b5:f0:16:a3:4f:8b:2c:3e:1c:39:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Validity
Not Before: Nov 21 07:30:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5e70a9dfd1df48190db9fc7d733105f15ca2cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:37:72:f0:b2:9c:53:f8:31:ae:1b:8f:6e:14:
4a:a1:a5:5d:28:c6:af:b2:c2:9f:bc:37:85:e1:4a:
be:c0:9c:cd:df:1b:1e:4f:71:74:a4:e0:f9:64:7c:
38:7d:d8:e7:be:f2:bf:cd:d0:76:92:e2:d2:57:ce:
fe:fe:37:50:a8:14:33:ff:ab:e3:d5:38:98:02:ce:
39:f8:82:8b:90:af:93:5a:aa:8f:89:81:68:57:40:
2e:54:85:26:6c:d3:b4:48:6a:a3:4e:5b:c9:1d:5b:
00:2b:53:65:56:fe:62:e6:00:03:87:51:50:e7:98:
49:3c:6a:6f:17:da:2d:bc:ce:cd:74:d2:10:3b:57:
c2:f9:97:5a:fa:7d:79:70:d3:78:4f:d2:cb:39:85:
6d:97:9a:b4:57:6d:7c:07:d3:6c:ca:45:76:43:05:
a1:fe:ad:06:6f:2d:8b:ff:12:11:67:71:d5:46:17:
4e:7c:45:f3:26:73:1b:a5:7d:32:2c:8e:02:64:0e:
55:bf:46:33:61:c3:b5:db:a7:2d:f7:6c:da:1e:7b:
4c:3f:64:4b:93:9f:0c:84:d5:cc:e0:f1:04:aa:72:
46:db:53:59:b5:d8:d3:6e:f9:18:7e:e6:44:c5:7e:
d9:3e:4e:d4:62:12:fd:27:23:5d:63:26:5e:aa:47:
94:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E7:0A:9D:FD:1D:F4:81:90:DB:9F:C7:D7:33:10:5F:15:CA:2C:D8
X509v3 Authority Key Identifier:
keyid:64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/pecKnf0d9IGQ25_H1zMQXxXKLNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.200.0/23
45.10.203.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:bf:43:61:5d:ce:4a:56:bb:74:78:19:52:71:e1:11:4a:33:
6b:01:cf:47:6b:a7:19:87:ef:8c:cc:77:3d:eb:61:bb:66:87:
a4:09:0f:07:10:b6:24:fd:23:43:d4:9a:09:95:f0:00:04:90:
c3:e6:be:cb:b1:d1:a2:95:bc:62:69:11:8e:5e:24:ce:ca:a6:
dc:b2:a9:46:6b:9c:e4:42:98:36:42:5a:7d:c0:52:7c:dc:74:
aa:3b:3c:29:9c:83:f8:92:a3:ab:42:d7:85:46:e3:bd:00:0e:
8b:f9:e8:df:0c:71:62:f0:0d:7a:24:8b:5f:74:3a:a5:09:31:
7f:bb:a5:3b:67:44:36:32:f0:5a:43:57:c5:9e:4b:7b:08:77:
ee:96:f7:cf:e0:9d:4d:e1:70:df:67:b3:75:af:a6:1e:83:b1:
08:d3:27:9c:0d:ee:e5:e4:4a:bd:ed:02:98:31:fe:f7:59:1b:
6e:c1:01:61:8e:ab:24:d0:ff:c8:0b:cd:d2:82:76:d3:cc:e0:
10:2e:75:0c:63:4b:9a:c8:7b:cb:e5:5c:34:b0:84:65:71:b6:
49:fd:2a:53:b8:74:71:e9:d1:aa:06:88:e5:9b:73:fb:27:ca:
f8:56:35:0d:c6:83:04:26:e3:ca:72:5c:e1:92:3a:19:04:09:
94:e3:c6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:23 2025 by rpki-client