Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efc75a-cf92-4c4a-9441-aca5a4414212/1/0VPF_se6BtjoYHWbXQWBAsf1Xeo.roa
File: 0VPF_se6BtjoYHWbXQWBAsf1Xeo.roa (raw, json)
Hash identifier: v9oEgexxnA0gWhssC/gE2RFjA2hdpTWdm+j6IXQ6dVc=
Subject key identifier: D1:53:C5:FE:C7:BA:06:D8:E8:60:75:9B:5D:05:81:02:C7:F5:5D:EA
Certificate issuer: /CN=0f4b9919cace992eef71a440a123dba3df2a9485
Certificate serial: 0187337628195A45BC8DFF27B3733C729ECA
Authority key identifier: 0F:4B:99:19:CA:CE:99:2E:EF:71:A4:40:A1:23:DB:A3:DF:2A:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0uZGcrOmS7vcaRAoSPbo98qlIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efc75a-cf92-4c4a-9441-aca5a4414212/1/0VPF_se6BtjoYHWbXQWBAsf1Xeo.roa
Signing time: Thu 30 Mar 2023 16:59:54 +0000
ROA not before: Thu 30 Mar 2023 16:59:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 45.132.216.0/24 maxlen: 24
45.132.217.0/24 maxlen: 24
45.132.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:33:76:28:19:5a:45:bc:8d:ff:27:b3:73:3c:72:9e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4b9919cace992eef71a440a123dba3df2a9485
Validity
Not Before: Mar 30 16:59:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d153c5fec7ba06d8e860759b5d058102c7f55dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:33:cc:1c:a5:b2:b2:00:e0:82:1d:d6:34:41:
ec:c2:37:fb:11:c0:13:6c:73:67:7a:d2:63:8b:b7:
76:37:fe:3f:7d:81:f9:13:82:28:0f:f4:1c:fe:a2:
56:88:8f:9f:89:b1:8a:52:1f:a7:e6:4d:c7:59:38:
31:51:42:eb:36:41:2b:15:c9:03:15:68:01:da:4a:
82:ea:b7:94:52:29:1c:ff:2e:6b:92:1c:3c:cd:cb:
0d:36:70:48:43:8f:db:2c:87:60:ab:05:17:0e:3f:
62:51:f3:e5:e2:f5:c6:6c:e2:62:5b:3b:42:87:a5:
4b:f4:ce:29:d1:82:ac:24:af:7f:97:9a:b1:47:e1:
07:68:80:1b:44:90:f4:95:54:ea:76:43:95:ad:82:
9a:45:e9:10:0d:fe:57:91:10:ee:43:ce:4c:32:ee:
00:42:36:5d:c4:bc:72:d6:55:17:1b:14:84:f3:b9:
2b:58:2f:52:cf:e9:0b:89:e7:1a:eb:1a:45:c3:54:
47:db:ea:8f:8e:08:b5:70:98:c6:9c:c3:b2:e5:e4:
f3:6a:ee:58:6a:61:f0:29:cc:99:b0:16:0e:44:d3:
e0:48:d1:17:54:60:c6:50:cf:85:7e:37:24:fa:f4:
11:7e:77:c2:2e:d6:fa:f4:7c:ce:b7:0f:3d:d1:75:
62:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:53:C5:FE:C7:BA:06:D8:E8:60:75:9B:5D:05:81:02:C7:F5:5D:EA
X509v3 Authority Key Identifier:
keyid:0F:4B:99:19:CA:CE:99:2E:EF:71:A4:40:A1:23:DB:A3:DF:2A:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0uZGcrOmS7vcaRAoSPbo98qlIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efc75a-cf92-4c4a-9441-aca5a4414212/1/0VPF_se6BtjoYHWbXQWBAsf1Xeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efc75a-cf92-4c4a-9441-aca5a4414212/1/D0uZGcrOmS7vcaRAoSPbo98qlIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.216.0-45.132.218.255
Signature Algorithm: sha256WithRSAEncryption
3a:d1:1e:c2:d2:2a:b1:95:50:91:22:9d:dc:27:f9:ea:89:70:
1c:5e:a0:44:35:a8:43:e9:6d:a0:f7:52:9c:d5:86:31:b0:74:
34:d5:4b:6d:1b:cd:14:78:99:36:ae:1a:00:a8:9c:db:a9:db:
ca:3d:04:54:07:90:9c:1b:cb:7a:70:8b:98:48:5e:1e:33:b9:
28:de:ac:30:08:c7:aa:c7:8b:e5:c6:9e:c7:da:a1:4d:8e:1e:
59:e9:08:8c:eb:ed:40:af:34:d7:fe:2e:f8:77:e4:53:b1:6c:
ee:c3:f1:12:29:89:92:76:7d:82:2b:41:96:2d:26:c9:1b:b1:
6e:b1:80:ed:e0:fe:3d:80:ec:d3:f2:32:dc:2c:b6:a3:7c:e7:
dd:cf:4c:de:5e:0d:4e:67:da:b0:bc:5f:8b:6b:35:c5:46:f6:
68:90:69:66:ab:d1:2c:43:72:ee:fa:1c:59:ba:e6:4d:12:77:
08:7c:41:35:3e:5d:15:b0:e1:e3:6e:89:61:2f:0d:47:2b:43:
96:43:1d:15:2a:37:56:8b:a2:5e:a8:41:90:18:00:57:cf:b9:
52:33:f1:be:bf:41:85:4f:32:c4:92:e5:01:45:e0:19:c7:bd:
2f:88:1f:56:a0:d6:d7:57:1b:e8:6b:08:f7:8a:97:d4:0b:20:
58:8a:23:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:59 2025 by rpki-client