Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/KY32vX5hoQ8mW_bZ6dwox2YOtuA.roa
File: KY32vX5hoQ8mW_bZ6dwox2YOtuA.roa (raw, json)
Hash identifier: 8ZjeyT4r+W8auW0uePTD/TFLZEfDIhIm3pWSq2/gzD8=
Subject key identifier: 29:8D:F6:BD:7E:61:A1:0F:26:5B:F6:D9:E9:DC:28:C7:66:0E:B6:E0
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 01856FA71A6BF02E02D2D47E83006D31E32B
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/KY32vX5hoQ8mW_bZ6dwox2YOtuA.roa
Signing time: Sun 01 Jan 2023 23:25:00 +0000
ROA not before: Sun 01 Jan 2023 23:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11325
IP address blocks: 45.85.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:1a:6b:f0:2e:02:d2:d4:7e:83:00:6d:31:e3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Jan 1 23:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=298df6bd7e61a10f265bf6d9e9dc28c7660eb6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:aa:01:0f:d8:50:3d:26:99:ea:8b:3e:02:
72:9d:37:ab:3e:9b:ae:39:af:60:48:34:0d:e1:ed:
b1:65:c6:be:97:f0:40:88:ba:93:76:15:0b:75:ae:
f2:f6:70:75:14:ca:67:b2:f0:f7:f7:48:fb:5c:2a:
6a:47:c6:0e:88:e7:43:ca:9c:d3:a1:eb:17:c1:4b:
ea:67:80:0a:67:75:f3:ce:c4:e3:63:27:58:c7:30:
ce:38:eb:8c:49:a1:35:63:3f:66:f9:cf:d5:2d:f4:
33:b9:d4:86:bb:1a:6f:f7:ff:f2:8f:30:25:a9:15:
3f:12:71:cd:7a:6f:17:bd:d7:3d:88:8c:2d:47:d4:
96:58:f7:9a:f4:64:41:95:95:d2:18:88:8f:a4:b6:
66:a2:6a:07:8c:24:89:80:0c:a8:01:04:d0:ed:1a:
07:d3:ab:18:78:ac:52:2d:e1:f5:07:c0:78:9f:d3:
33:af:7b:cc:8a:fd:21:2d:95:fe:ec:76:bb:ec:fa:
de:7f:ba:27:00:57:06:69:9e:00:78:4b:61:f2:91:
f7:90:a7:51:52:cc:e0:0e:e5:e7:54:f6:21:69:f0:
5d:87:a5:73:00:db:11:6b:42:49:1b:24:03:46:d8:
bf:50:00:5d:d2:b0:33:ac:6d:12:11:03:75:ba:53:
4e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8D:F6:BD:7E:61:A1:0F:26:5B:F6:D9:E9:DC:28:C7:66:0E:B6:E0
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/KY32vX5hoQ8mW_bZ6dwox2YOtuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.108.0/22
Signature Algorithm: sha256WithRSAEncryption
61:a3:72:a0:12:e4:bd:e2:f3:c9:55:bf:92:af:78:35:03:27:
cd:4f:6c:40:12:a8:12:56:3a:bd:d9:dd:36:9b:bd:68:db:eb:
ff:bf:ae:9e:03:b7:41:5b:99:67:f7:a5:f3:7c:b6:dc:e7:63:
69:e0:b2:5e:24:4e:10:47:8a:a4:f3:4f:f3:bd:a2:93:99:83:
d5:54:a7:0d:de:47:14:88:7d:39:66:76:4e:5d:2f:86:30:ac:
7b:3d:b6:98:6a:fd:f9:9b:47:d2:c3:6b:e3:4b:87:6b:3c:76:
55:ec:a3:69:20:25:71:7e:95:bc:52:21:e0:f5:1a:64:52:06:
08:43:f5:85:9f:49:48:ff:81:38:60:1e:f2:27:95:ce:69:08:
14:09:51:cf:8d:62:50:d3:d3:e7:e2:66:60:51:51:e3:7d:7f:
61:28:d7:d6:0c:2d:29:ed:d8:a5:57:93:c7:a2:a0:3c:d7:99:
c3:6a:70:ee:64:22:d7:d2:c2:a0:06:b8:10:30:c9:5e:29:b2:
77:b9:f5:9a:a9:09:43:61:62:4c:d3:78:42:76:76:24:bd:47:
4d:22:64:04:85:35:91:33:df:8b:f0:1f:aa:f2:a5:e7:b8:52:
84:53:c9:08:00:b9:33:8f:34:87:99:93:ce:3a:ef:9b:1a:18:
a6:55:45:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:38 2025 by rpki-client