Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/tc-dHeJjdNvHzU7qcxOIIFcuxQ0.roa
File: tc-dHeJjdNvHzU7qcxOIIFcuxQ0.roa (raw, json)
Hash identifier: nMYtep2QNx+FxLyMUi1cXyi94ZVpiulhsVa7qpFWr7Y=
Subject key identifier: B5:CF:9D:1D:E2:63:74:DB:C7:CD:4E:EA:73:13:88:20:57:2E:C5:0D
Certificate issuer: /CN=ec11b6d0ee6b9eccfe34ec506a275078c39eccb3
Certificate serial: 073527CD
Authority key identifier: EC:11:B6:D0:EE:6B:9E:CC:FE:34:EC:50:6A:27:50:78:C3:9E:CC:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7BG20O5rnsz-NOxQaidQeMOezLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/tc-dHeJjdNvHzU7qcxOIIFcuxQ0.roa
Signing time: Sat 01 Jan 2022 05:00:37 +0000
ROA not before: Sat 01 Jan 2022 05:00:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44092
IP address blocks: 45.156.60.0/24 maxlen: 24
45.156.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120924109 (0x73527cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec11b6d0ee6b9eccfe34ec506a275078c39eccb3
Validity
Not Before: Jan 1 05:00:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5cf9d1de26374dbc7cd4eea73138820572ec50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8f:48:ce:c3:a7:91:8d:a4:fa:af:bc:35:fa:
12:68:d5:10:92:d2:a4:37:b2:2c:7c:80:b2:c5:b8:
05:0d:13:1b:8a:08:85:fe:e6:2a:ff:2c:45:99:fe:
a3:c7:3a:f6:93:33:38:8d:a4:41:6d:6c:11:0b:c3:
b3:bb:2f:6e:ba:02:f6:8c:f5:b9:c3:11:b2:1c:7f:
a3:73:47:0a:b7:5d:90:0f:8b:d8:ff:f9:a2:86:20:
ec:bd:bb:a9:fd:ad:4b:8d:04:27:25:a3:99:92:87:
ad:75:39:20:83:c0:75:40:8e:29:5a:d2:ed:e0:94:
5e:a4:b1:21:c5:28:5f:5f:00:77:2a:56:5f:c1:8f:
37:45:da:f9:4f:25:19:df:55:6b:af:1b:16:6c:6c:
bf:84:c3:07:9e:0f:18:44:d8:e7:da:05:b5:fd:bb:
aa:fa:af:72:b5:93:2c:21:39:14:5f:6f:36:c7:df:
c7:9d:1b:b2:e5:ef:1b:93:9a:3d:e6:84:52:10:bf:
bb:1e:45:d5:3c:4d:60:4b:40:67:26:33:45:52:5b:
c0:1e:27:89:e0:fd:67:47:bb:5c:db:bf:b7:82:36:
14:9e:d1:72:fc:08:31:0f:d7:34:24:e8:fc:ed:89:
e5:f2:ac:32:e0:35:29:79:28:7c:16:d5:d3:b8:0a:
0e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CF:9D:1D:E2:63:74:DB:C7:CD:4E:EA:73:13:88:20:57:2E:C5:0D
X509v3 Authority Key Identifier:
keyid:EC:11:B6:D0:EE:6B:9E:CC:FE:34:EC:50:6A:27:50:78:C3:9E:CC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BG20O5rnsz-NOxQaidQeMOezLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/tc-dHeJjdNvHzU7qcxOIIFcuxQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/7BG20O5rnsz-NOxQaidQeMOezLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.60.0/24
45.156.63.0/24
Signature Algorithm: sha256WithRSAEncryption
61:39:69:c8:e7:33:14:8d:ba:5e:be:1f:4a:8b:e5:f7:ae:d8:
32:78:e0:4c:11:af:f6:c6:1b:33:b1:14:dd:cc:d2:0b:f9:b7:
87:2f:56:a9:41:49:3c:18:a0:42:1f:91:19:8f:eb:c5:93:89:
92:14:ed:de:03:ae:22:c0:a8:c2:2e:fb:05:11:05:f2:53:b8:
9f:0e:eb:3c:98:79:62:b4:c6:63:f7:ef:9a:49:fa:37:24:a5:
63:51:a0:64:8b:45:3c:e6:5f:43:9d:78:04:86:30:6a:a1:4b:
96:d1:1c:ff:4b:d8:ed:56:32:f2:0a:07:b1:45:99:06:cd:35:
a2:b7:8d:b2:ff:10:40:5b:4c:a6:72:c7:c8:02:93:28:df:b0:
a5:b0:84:28:d0:6b:b9:27:12:14:c4:71:f6:e1:7d:69:a3:ed:
44:73:6a:3c:f4:a3:15:11:f4:e5:92:0d:02:41:da:d5:cd:76:
89:28:f5:4f:bd:14:a4:eb:e9:dd:6a:f7:44:70:85:ca:9e:b7:
23:53:e7:56:23:9a:5f:c1:23:1a:aa:4a:30:bc:70:fd:78:11:
c1:7a:a9:70:2b:b6:a3:9e:41:91:00:e9:79:b6:66:a4:6e:39:
25:e6:b9:07:db:fd:73:0d:31:b3:c8:93:2c:90:6b:e1:44:e4:
e4:dd:ac:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:59 2025 by rpki-client