Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efc75a-cf92-4c4a-9441-aca5a4414212/1/u6nPKpyrCb-eXkiZ4CGFJQM2OMM.roa
File: u6nPKpyrCb-eXkiZ4CGFJQM2OMM.roa (raw, json)
Hash identifier: InmhyqLIOqfRjp/2cYF3tmDH/Fne/E4SUINMBlfPzRU=
Subject key identifier: BB:A9:CF:2A:9C:AB:09:BF:9E:5E:48:99:E0:21:85:25:03:36:38:C3
Certificate issuer: /CN=0f4b9919cace992eef71a440a123dba3df2a9485
Certificate serial: 01873376293A4DFFD3716F69CB411DBAE409
Authority key identifier: 0F:4B:99:19:CA:CE:99:2E:EF:71:A4:40:A1:23:DB:A3:DF:2A:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0uZGcrOmS7vcaRAoSPbo98qlIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efc75a-cf92-4c4a-9441-aca5a4414212/1/u6nPKpyrCb-eXkiZ4CGFJQM2OMM.roa
Signing time: Thu 30 Mar 2023 16:59:54 +0000
ROA not before: Thu 30 Mar 2023 16:59:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56913
IP address blocks: 45.132.218.0/24 maxlen: 24
45.132.216.0/24 maxlen: 24
45.132.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:33:76:29:3a:4d:ff:d3:71:6f:69:cb:41:1d:ba:e4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4b9919cace992eef71a440a123dba3df2a9485
Validity
Not Before: Mar 30 16:59:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bba9cf2a9cab09bf9e5e4899e0218525033638c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:be:57:c9:97:db:8e:78:57:f0:cf:88:a2:
91:93:2e:e2:b1:dc:cf:41:af:c4:cc:d3:6f:93:27:
2e:10:f6:53:da:c1:0b:a6:92:15:65:48:69:6e:c2:
61:25:cd:be:b6:22:e3:7e:cf:03:56:14:a1:65:95:
bd:5f:e3:ad:22:b2:c0:19:41:ce:e7:83:34:6d:58:
e3:04:e3:82:87:e7:86:21:40:75:ed:c9:da:b9:91:
0e:6d:b4:b1:4e:fa:f2:b1:30:54:67:e9:90:5e:c9:
b5:0d:9c:ae:f8:85:a4:59:65:a6:51:bb:a5:50:3a:
c9:57:c8:e3:1e:e8:1e:db:96:c0:0c:86:10:e0:50:
69:37:88:a5:1c:4a:ab:0d:8d:93:44:16:ed:dd:01:
d0:37:e5:2f:45:2a:6c:ae:78:11:f4:2d:d9:77:52:
38:27:97:a9:cc:1d:ee:dd:15:21:e9:43:c6:46:c9:
f1:1e:b2:03:3c:fa:32:3c:7e:50:3b:52:9a:8e:18:
75:68:2f:00:92:03:b7:f2:14:eb:4e:d8:37:ac:cb:
68:36:ea:a3:27:68:ad:80:31:35:5b:70:d6:43:2e:
ea:ab:a4:38:25:34:00:9c:4f:21:26:44:5c:ca:b1:
4c:6f:8c:56:d0:7d:ba:fb:8e:fb:e9:17:14:48:37:
99:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A9:CF:2A:9C:AB:09:BF:9E:5E:48:99:E0:21:85:25:03:36:38:C3
X509v3 Authority Key Identifier:
keyid:0F:4B:99:19:CA:CE:99:2E:EF:71:A4:40:A1:23:DB:A3:DF:2A:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0uZGcrOmS7vcaRAoSPbo98qlIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efc75a-cf92-4c4a-9441-aca5a4414212/1/u6nPKpyrCb-eXkiZ4CGFJQM2OMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efc75a-cf92-4c4a-9441-aca5a4414212/1/D0uZGcrOmS7vcaRAoSPbo98qlIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.216.0-45.132.218.255
Signature Algorithm: sha256WithRSAEncryption
1a:ef:bb:94:ab:57:d0:bf:d3:6b:8b:93:b6:9e:1d:fd:f8:cd:
13:1b:6b:2c:cd:16:86:3e:14:ba:2a:e3:5d:8b:49:48:a0:d0:
74:8e:37:ec:0e:cc:6a:5c:cc:3c:8e:f3:7d:18:f5:ab:90:5f:
f0:d6:8b:9c:11:1b:68:f1:44:b2:f1:8c:a5:13:31:a6:29:84:
1c:ee:07:19:ed:3f:33:04:70:57:18:e2:58:ce:7e:70:be:36:
c5:c6:e0:c1:f0:2c:eb:3f:c8:21:32:b9:4c:da:56:10:72:66:
89:6b:ab:8f:bd:b8:59:2a:5d:73:ac:89:ca:06:dd:d7:ee:c1:
7e:af:f9:fe:b0:82:fe:21:13:e7:9a:3b:14:7d:38:cb:c1:dd:
9a:a6:75:26:b7:12:4e:cc:9c:4a:78:f1:41:26:b1:ad:5e:80:
38:fd:72:72:f2:63:d1:1f:3b:f1:87:19:75:51:4f:b7:3c:52:
ae:62:16:75:69:1d:c7:f2:1d:b7:4f:32:0b:ab:03:00:91:88:
54:c1:6d:c4:f7:ed:65:b9:83:01:2c:2d:f3:8f:4f:ba:24:78:
e0:76:55:ce:d5:cc:61:17:e6:7d:8d:aa:b4:72:3e:92:2c:b4:
cf:96:ba:12:e1:d4:4c:39:a6:65:c2:ca:69:fa:cb:95:7f:65:
09:c2:53:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:57 2025 by rpki-client