Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c459c2-028c-4776-a3bc-81e3c9e7a06e/1/e5GTpqJ-CMvv0uVJPVUC3tiJoFs.roa
File: e5GTpqJ-CMvv0uVJPVUC3tiJoFs.roa (raw, json)
Hash identifier: ImMzPhHWGfBL9cZhSAdxqvtKb+xCHXjOhwsjbs7KtGM=
Subject key identifier: 7B:91:93:A6:A2:7E:08:CB:EF:D2:E5:49:3D:55:02:DE:D8:89:A0:5B
Certificate issuer: /CN=a126de23c6d7ef87b0fdff8098f05c7b7bc347ae
Certificate serial: 018D56A08F8BA73C226048D934A0ECB5DA31
Authority key identifier: A1:26:DE:23:C6:D7:EF:87:B0:FD:FF:80:98:F0:5C:7B:7B:C3:47:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSbeI8bX74ew_f-AmPBce3vDR64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/c459c2-028c-4776-a3bc-81e3c9e7a06e/1/e5GTpqJ-CMvv0uVJPVUC3tiJoFs.roa
Signing time: Mon 29 Jan 2024 19:09:39 +0000
ROA not before: Mon 29 Jan 2024 19:09:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 45.146.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:56:a0:8f:8b:a7:3c:22:60:48:d9:34:a0:ec:b5:da:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a126de23c6d7ef87b0fdff8098f05c7b7bc347ae
Validity
Not Before: Jan 29 19:09:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b9193a6a27e08cbefd2e5493d5502ded889a05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8f:1a:2b:03:da:28:17:49:2a:a3:2f:40:c1:
1b:b2:b1:fd:7c:df:b0:18:7e:17:4e:93:0f:aa:e3:
10:5d:fb:dd:30:6c:b9:f0:df:cb:dd:61:b6:7f:b8:
6b:a2:a9:38:9a:ed:78:7d:ec:3d:48:c1:ed:42:e0:
14:be:f8:f0:e7:60:53:e8:3a:3b:9d:68:e7:7c:00:
93:f8:ff:3f:f9:2d:19:e6:a1:8f:94:96:a9:ac:5d:
1a:45:8a:e7:4f:e2:d3:d0:80:71:43:6c:de:51:5f:
f9:b1:a7:84:25:24:ba:58:14:94:73:c4:6d:3b:74:
6d:40:f1:3d:4a:ad:6d:6d:a3:33:b9:b4:6f:33:02:
ac:fe:bc:6f:59:38:17:a7:35:be:a8:a0:1a:9e:2c:
e0:73:2a:4c:c5:c5:60:1c:db:9e:22:f3:a6:e0:c9:
0c:19:d8:1c:53:4d:79:71:6e:7c:c3:b9:74:79:d5:
34:92:2f:c6:02:8d:e8:f2:62:85:53:db:f0:fc:40:
51:f7:16:dd:e7:e9:bb:b1:05:61:e0:af:ee:a0:be:
cf:dc:a5:29:40:a2:c7:80:28:2d:c4:48:c0:37:55:
1f:32:d7:35:6f:ce:39:19:f1:19:d0:ab:ea:9c:23:
05:f9:dd:7b:a9:8b:9c:d0:f4:15:bd:cf:cb:16:ea:
f7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:91:93:A6:A2:7E:08:CB:EF:D2:E5:49:3D:55:02:DE:D8:89:A0:5B
X509v3 Authority Key Identifier:
keyid:A1:26:DE:23:C6:D7:EF:87:B0:FD:FF:80:98:F0:5C:7B:7B:C3:47:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSbeI8bX74ew_f-AmPBce3vDR64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c459c2-028c-4776-a3bc-81e3c9e7a06e/1/e5GTpqJ-CMvv0uVJPVUC3tiJoFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c459c2-028c-4776-a3bc-81e3c9e7a06e/1/oSbeI8bX74ew_f-AmPBce3vDR64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.100.0/22
Signature Algorithm: sha256WithRSAEncryption
66:80:92:94:71:06:08:03:57:dd:5a:8e:70:d4:0b:be:a5:54:
2d:03:bc:aa:2a:e8:cf:17:b8:e7:08:4e:fa:9f:76:e8:18:c7:
a2:d3:a5:a2:a6:0f:52:0a:df:16:08:3e:c6:bb:d5:a7:30:d2:
3d:39:7b:c4:5e:9c:a9:dd:b7:34:58:09:83:44:5d:bd:72:18:
b7:54:b4:ed:13:62:0e:4a:2d:04:58:6e:21:94:9c:ff:ac:62:
dc:9a:8d:18:27:43:dd:9b:2e:68:cf:9e:96:50:a3:1f:52:15:
b8:c0:c3:0a:7d:f9:c3:e5:9f:a4:08:e1:27:e2:51:06:95:54:
eb:5c:2c:10:1d:42:ad:a1:2c:55:f6:b5:bd:28:e7:e5:35:37:
aa:93:06:ea:ff:b1:82:70:21:92:99:04:03:0b:3d:43:10:48:
c7:72:1c:0b:0c:69:12:dd:53:5a:e2:e8:0e:96:b7:f5:23:7d:
db:38:5c:32:04:85:89:d2:8b:7f:0e:09:8d:f8:92:a9:e4:11:
e2:3d:18:81:ae:3e:a5:77:66:5d:40:13:d0:3c:1c:a5:77:e3:
c1:db:53:fa:44:1b:5b:57:42:62:4f:31:8a:39:fb:cf:da:56:
1c:65:fe:a5:04:2f:70:8b:8e:0a:69:df:01:1a:e9:12:75:01:
c1:71:c1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:40 2025 by rpki-client