Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/cl7_fXm2Uc5Ss_3k2OWyGg06yS4.roa
File: cl7_fXm2Uc5Ss_3k2OWyGg06yS4.roa (raw, json)
Hash identifier: FwmtyPrpEyI9SG5OxcsKhVdAQs/AipmPmWnz6NTb1lI=
Subject key identifier: 72:5E:FF:7D:79:B6:51:CE:52:B3:FD:E4:D8:E5:B2:1A:0D:3A:C9:2E
Certificate issuer: /CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Certificate serial: 01856F79A1423F341E1EC37A97F054604DA9
Authority key identifier: 00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/cl7_fXm2Uc5Ss_3k2OWyGg06yS4.roa
Signing time: Sun 01 Jan 2023 22:35:20 +0000
ROA not before: Sun 01 Jan 2023 22:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61135
IP address blocks: 45.155.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:a1:42:3f:34:1e:1e:c3:7a:97:f0:54:60:4d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Validity
Not Before: Jan 1 22:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=725eff7d79b651ce52b3fde4d8e5b21a0d3ac92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fc:78:04:61:e8:bd:a7:94:9e:de:d0:ce:a9:
74:d7:b4:2d:f5:db:a7:a0:66:dd:01:61:97:05:58:
67:d2:9e:1f:a2:4c:51:6b:3a:cb:cf:9c:a4:38:60:
b3:ba:88:3d:6d:66:c8:03:a7:83:69:b7:b7:06:e4:
2b:df:a6:46:3b:f2:6f:d4:19:d1:a5:ea:70:07:d9:
07:3a:6d:90:e4:80:15:26:3a:69:7e:d5:03:53:7d:
f9:79:3f:cd:3b:81:ca:aa:c7:90:f5:f6:43:c1:32:
39:48:9a:5d:5e:7c:06:0c:e0:52:3d:d9:85:41:17:
62:36:eb:1e:31:ff:77:e8:08:38:74:57:66:9b:f2:
68:fa:be:43:13:29:0b:1f:2c:d5:e3:e2:95:53:e5:
ea:09:c2:03:cc:81:35:06:d3:55:88:2d:3f:2d:ca:
df:a3:34:bc:40:fc:c7:ca:f5:65:3f:84:70:b3:7f:
7c:72:7d:11:1a:b4:0d:99:97:18:7f:9e:10:e2:8e:
88:3a:0d:a1:ca:d6:62:d3:25:a7:4e:87:a9:14:22:
c0:aa:71:a4:be:a8:8e:82:30:c5:0e:fb:58:cf:92:
b3:63:55:9b:f6:a3:0a:68:40:cd:10:ee:42:7a:ba:
c3:c4:d6:49:4f:d0:08:a0:73:5f:38:0a:58:6f:e1:
5b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5E:FF:7D:79:B6:51:CE:52:B3:FD:E4:D8:E5:B2:1A:0D:3A:C9:2E
X509v3 Authority Key Identifier:
keyid:00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/cl7_fXm2Uc5Ss_3k2OWyGg06yS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/ABOK9m601Vf6Szk5xsvZYakSNWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.158.0/24
Signature Algorithm: sha256WithRSAEncryption
67:61:35:2c:1a:b6:c0:3c:1b:c8:bb:45:05:04:3f:6b:1f:4f:
d3:cc:9e:e0:89:a0:27:14:d4:9c:94:01:b9:24:52:26:46:a1:
2d:06:06:71:bb:13:4b:47:37:ac:29:e4:e9:5c:1f:27:de:77:
bc:20:08:18:ed:49:18:62:b1:92:76:33:8f:7b:54:24:df:17:
69:0a:15:c5:2d:cd:56:ea:47:5d:27:4f:ed:8b:6f:a6:b7:79:
c9:e0:47:4c:16:ec:c9:a0:82:2e:f9:f0:ad:6d:73:f3:64:c3:
2c:78:d3:9d:b0:9f:02:9f:e7:e3:54:33:24:c8:36:a5:9c:9d:
3a:00:cc:08:b3:68:a6:3f:49:81:6d:12:45:4c:20:cf:4b:d2:
da:f3:ee:71:b0:96:33:4e:ac:0f:b9:66:d9:67:4a:35:a3:39:
ab:03:6c:ea:ed:cc:3c:2e:b3:6c:2e:15:ee:7f:d2:2e:d9:a0:
02:40:59:bc:85:7d:5f:23:7c:1e:0f:f7:53:2b:66:06:ca:f8:
45:fd:8d:6d:c0:69:79:87:60:53:d6:4b:8e:80:78:be:ea:e2:
ab:41:1e:74:2d:48:4b:c7:1c:01:52:9e:7b:1b:74:ee:09:87:
17:99:ab:57:f5:e5:0e:5e:02:fc:cb:02:ca:64:55:ca:1d:c5:
8f:3a:27:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:19 2025 by rpki-client