Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/oN0WelBvVHoDNn6MSCR1ffPawNc.roa
File: oN0WelBvVHoDNn6MSCR1ffPawNc.roa (raw, json)
Hash identifier: /z2GwcElywL9UZacGK0S1dHMUc0YUevhnZJ8XA4oyGk=
Subject key identifier: A0:DD:16:7A:50:6F:54:7A:03:36:7E:8C:48:24:75:7D:F3:DA:C0:D7
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 018AFB56B3CC7F53FB00A0F8AA0BF9CBAA1B
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/oN0WelBvVHoDNn6MSCR1ffPawNc.roa
Signing time: Wed 04 Oct 2023 15:37:57 +0000
ROA not before: Wed 04 Oct 2023 15:37:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 45.90.248.0/22 maxlen: 22
194.31.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fb:56:b3:cc:7f:53:fb:00:a0:f8:aa:0b:f9:cb:aa:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Oct 4 15:37:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0dd167a506f547a03367e8c4824757df3dac0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:24:26:bf:81:d9:d4:0c:8f:fd:b9:1f:bd:
76:6a:15:a7:8a:c8:81:34:20:0a:de:9a:ee:7f:95:
bc:7e:b1:ac:bb:97:9f:55:c9:4b:3c:a8:40:7d:48:
c5:d7:f2:06:a3:6f:c5:b2:c9:79:ca:ba:d3:f2:50:
51:19:2e:04:43:c4:8e:d3:c7:e5:53:6f:75:dd:f7:
5d:0a:2c:62:fb:6b:8d:87:f0:3a:c2:e0:46:37:5b:
8b:9d:3f:31:0f:7c:20:0a:03:cb:a7:22:dc:83:db:
50:1e:af:01:e3:40:54:82:90:25:0b:0c:3e:5a:8e:
4f:65:18:97:33:56:b0:3a:d9:f7:6c:3b:f6:c8:49:
bb:9f:af:a6:2a:a9:07:0b:84:30:7a:84:bf:9c:bb:
74:3b:29:3d:62:66:00:9a:87:62:3b:b4:bf:0f:6d:
1e:dc:50:33:b3:3b:da:33:41:09:89:21:c1:7a:62:
fc:9b:23:88:57:48:81:b0:a4:46:33:f9:5f:ec:e5:
b1:1b:05:38:97:4b:61:fe:e3:62:a9:b1:f0:fc:90:
26:fc:b3:f3:37:9f:2c:83:74:29:de:ce:72:70:97:
0a:d9:32:5a:2f:89:b0:78:2f:0d:cb:05:70:21:c2:
3c:86:4d:55:9b:7a:f1:25:76:86:63:f6:a5:e0:88:
1f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DD:16:7A:50:6F:54:7A:03:36:7E:8C:48:24:75:7D:F3:DA:C0:D7
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/oN0WelBvVHoDNn6MSCR1ffPawNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.248.0/22
194.31.180.0/22
Signature Algorithm: sha256WithRSAEncryption
85:d6:c0:10:32:eb:9a:b2:6d:01:f0:32:4d:17:6c:61:f3:d3:
0f:f7:0b:46:48:ac:5b:f1:ad:19:7a:8f:21:79:5a:48:25:c1:
e3:e3:0e:1c:d1:3f:50:72:5f:bd:93:bf:13:27:01:de:df:bb:
b6:33:a9:72:8a:5b:47:bc:8d:ad:9f:0d:be:67:b7:d7:af:de:
59:ba:ef:da:a5:67:b7:e6:d4:c7:52:da:9e:29:00:e3:b1:6f:
cf:a4:ff:49:c5:7d:e3:42:81:e0:17:b2:bf:67:b5:81:a8:3a:
7b:64:e0:c1:7b:1e:c3:b6:c1:ae:15:d0:18:49:54:71:2a:47:
ee:d8:1d:58:c6:13:9d:05:c4:a2:a3:2a:0c:7a:8c:79:dd:05:
87:ee:1d:6f:52:98:a4:d4:d0:57:b6:05:a4:5f:4c:5d:e0:db:
22:36:a3:af:f6:d2:53:95:16:34:ab:dd:43:d8:7b:e7:c1:83:
1c:22:c4:1f:51:80:91:ec:b0:e2:2f:c1:8c:3f:af:1a:7f:ca:
dd:f0:50:1a:9e:db:5a:d8:97:53:23:82:6e:ac:88:1f:8f:5e:
e7:31:1b:da:a4:39:73:02:0a:04:7f:1d:d4:f6:b6:9b:86:ba:
a7:4a:96:3f:37:e3:ea:ae:90:e3:d4:36:c5:78:cf:cc:79:e3:
59:52:06:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:19 2025 by rpki-client