Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/E3JB5oH18xyaAlD9HReccoDd9K0.roa
File: E3JB5oH18xyaAlD9HReccoDd9K0.roa (raw, json)
Hash identifier: t9wYuEmM6SdoZpVoXN2koT/MxSAPNCx7HTgZfWgZssY=
Subject key identifier: 13:72:41:E6:81:F5:F3:1C:9A:02:50:FD:1D:17:9C:72:80:DD:F4:AD
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 012129A9
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/E3JB5oH18xyaAlD9HReccoDd9K0.roa
Signing time: Sat 01 Jan 2022 05:59:25 +0000
ROA not before: Sat 01 Jan 2022 05:59:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6461
IP address blocks: 45.85.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18950569 (0x12129a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Jan 1 05:59:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=137241e681f5f31c9a0250fd1d179c7280ddf4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:12:70:e4:e7:3d:d0:12:6e:c6:27:ae:a7:41:
ff:a8:0d:5a:75:84:7e:b9:25:7f:f6:70:b6:59:7c:
c2:ac:6f:65:19:99:57:f1:d7:af:4c:94:5c:f3:db:
c8:f7:2f:3f:35:49:ba:eb:58:1c:62:e3:0c:bd:42:
fe:2c:5e:2c:d1:ec:1c:88:a7:b1:7c:d3:31:80:40:
3a:fb:6f:38:b2:31:76:35:65:7d:1b:c9:29:30:f0:
1c:ea:a2:9e:8e:96:a1:8f:02:3a:eb:84:2d:c9:97:
84:54:89:5f:12:00:8e:5f:03:cc:4a:4f:c6:4b:fd:
ee:0c:52:cc:6c:56:5b:b2:3b:7f:f7:fb:b2:d2:6f:
cb:a3:90:17:e0:5b:e3:38:c0:d2:bf:4e:62:aa:1d:
6a:d1:95:9b:5e:0b:9d:8c:a8:a1:1a:67:62:27:95:
17:b0:ce:56:d4:29:ff:07:8d:a4:6b:9f:ce:2a:f0:
87:fd:89:23:9c:95:a3:b8:82:86:21:b3:c9:45:bd:
1a:8a:15:12:08:c1:f0:97:63:d9:6c:b8:ea:1a:0a:
de:2d:43:78:7d:de:99:64:80:b4:67:0e:63:40:6e:
1f:90:76:ab:8c:9c:b9:85:dc:c8:3b:1a:af:6a:2a:
8e:da:6d:88:96:15:b1:b5:2a:82:7b:09:62:49:3d:
31:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:72:41:E6:81:F5:F3:1C:9A:02:50:FD:1D:17:9C:72:80:DD:F4:AD
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/E3JB5oH18xyaAlD9HReccoDd9K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.108.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:ea:d9:89:f9:49:2b:11:9d:26:6b:91:e0:32:d1:80:ee:2e:
53:92:60:20:02:cf:57:49:f8:07:95:2f:3b:e5:7c:f1:03:e0:
b4:50:03:9f:fe:b5:4c:a2:51:2b:65:84:d6:50:82:4f:4d:6a:
46:cf:07:c1:0c:7e:5d:2b:84:51:a8:f1:09:9c:cc:f0:6f:38:
9b:cd:c3:90:4c:28:28:c6:74:6e:18:5e:21:13:ca:47:6a:f7:
bd:05:f1:e5:b7:a5:0d:75:a1:e6:c9:28:91:a8:56:73:fa:08:
67:3a:c7:d9:14:3b:c5:86:bd:d4:92:c5:32:d8:7e:8e:91:9f:
b3:18:e8:51:7a:fa:97:db:68:a5:8a:ce:36:ed:63:14:7c:64:
a1:cf:d6:d2:de:30:bb:62:af:08:50:61:d9:5c:90:0d:a2:b1:
c8:a2:eb:3c:f9:4b:9b:03:be:ea:89:bd:3d:15:72:04:40:77:
78:45:97:3e:f3:6b:21:f9:7e:d4:e0:5e:a8:61:fa:9b:83:22:
81:6c:f5:90:b6:2f:d0:d9:56:5e:e1:24:b1:7f:4a:cd:55:8a:
b9:0e:c9:d0:d9:42:fb:5c:1a:43:b6:a7:2e:9e:88:9c:89:ab:
5e:16:71:46:2a:ff:cd:bd:38:8e:9a:63:fc:cf:d4:ae:c1:bb:
01:67:2b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:32 2025 by rpki-client