Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/D28pnTmzkjiBhBi2aPQMAy4YPm4.roa
File: D28pnTmzkjiBhBi2aPQMAy4YPm4.roa (raw, json)
Hash identifier: XJX+5fZX6UH6ADU2RjbCT/1XswHYq+huyL6qPRL+PUU=
Subject key identifier: 0F:6F:29:9D:39:B3:92:38:81:84:18:B6:68:F4:0C:03:2E:18:3E:6E
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 01856FA71A18A4591CD18A2E10EFD606F0D5
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/D28pnTmzkjiBhBi2aPQMAy4YPm4.roa
Signing time: Sun 01 Jan 2023 23:25:00 +0000
ROA not before: Sun 01 Jan 2023 23:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 45.139.1.0/24 maxlen: 24
45.139.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:1a:18:a4:59:1c:d1:8a:2e:10:ef:d6:06:f0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Jan 1 23:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f6f299d39b39238818418b668f40c032e183e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6b:72:96:4b:28:f4:03:3d:59:b2:f5:49:90:
07:eb:21:d9:29:ef:38:e6:91:1b:0f:ac:21:f7:f5:
f6:1c:af:a5:55:93:f1:a7:57:f7:04:2e:bb:9d:80:
7e:65:a3:28:45:38:9e:27:fe:5e:8d:dc:7e:08:c3:
21:2e:fe:1e:0b:47:14:a6:8d:1f:39:94:3f:a6:cf:
4d:37:07:8c:d5:51:8b:9b:3e:d5:b3:35:63:d7:a5:
fd:98:03:45:87:81:3b:e9:51:c5:c5:ee:ad:9b:b8:
4b:80:e0:68:a6:c2:ac:27:e8:05:4e:04:7d:8f:84:
67:6b:24:2c:c3:83:a2:b0:fd:fb:ff:a2:a1:57:98:
b2:72:14:b1:32:11:4f:9c:64:f8:6b:4c:bb:0d:89:
f3:c9:ab:eb:5e:86:53:d9:bb:6a:7e:86:4b:f8:05:
01:d8:d3:21:b5:14:14:99:c7:d0:9b:a2:4a:ed:64:
7b:71:fe:bb:ac:30:6b:da:c7:11:0a:cb:a0:23:57:
59:9c:f2:74:25:1b:64:6d:86:44:3c:78:ab:57:be:
1c:d9:3c:e6:51:e4:32:73:a6:4f:3d:7e:2a:72:b8:
6b:c3:2f:74:51:ce:f5:15:d3:a7:c4:e0:0f:73:22:
51:e3:97:65:59:b3:6f:d3:84:8b:93:71:08:75:d9:
d8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6F:29:9D:39:B3:92:38:81:84:18:B6:68:F4:0C:03:2E:18:3E:6E
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/D28pnTmzkjiBhBi2aPQMAy4YPm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.0.0/23
Signature Algorithm: sha256WithRSAEncryption
93:4d:89:e5:91:82:29:a2:7b:49:82:9e:34:d2:3c:ce:9b:fd:
6b:c1:31:9c:12:e4:2a:3a:ca:32:5b:f0:35:1d:fe:15:e3:6c:
2d:12:c2:82:ae:6c:64:f3:d6:d3:8d:38:33:f2:0f:05:93:18:
59:a3:ab:79:53:26:a4:1b:eb:63:82:84:d2:38:dd:62:01:45:
e8:a9:4c:25:38:37:64:31:71:c6:da:6d:93:72:3b:fa:94:08:
bd:f0:e6:bd:79:1f:67:83:be:89:96:dc:6e:60:4d:35:87:93:
26:65:f7:84:43:5f:ae:f9:79:74:b1:87:a8:06:1a:7b:a7:91:
13:e0:7e:45:5c:0f:94:35:38:5f:41:86:07:fa:0d:15:06:28:
fc:ce:06:1d:16:1b:c6:96:7c:e0:9f:90:13:f0:c3:ce:1f:d6:
46:f5:43:c8:11:8b:2b:14:25:b6:c3:c5:cc:ab:ae:fc:c9:32:
96:84:8a:49:bf:68:16:43:95:94:a7:d2:04:b9:38:0f:0b:a1:
d3:57:95:9a:dd:88:03:69:fb:c8:49:e2:63:fc:65:d1:88:1c:
5f:7d:67:1b:1f:66:45:d7:43:ab:8f:fd:9b:f8:6e:ed:46:4a:
f5:b5:76:a4:2c:81:d9:11:61:2f:29:f7:ef:e6:76:c0:27:6f:
32:1d:ff:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:26 2025 by rpki-client