Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/rcbDoDS-2wOTuXjXNXKhwygsxRI.roa
File: rcbDoDS-2wOTuXjXNXKhwygsxRI.roa (raw, json)
Hash identifier: qUZ0SShycDhWks76KwIdyox6wvSphz+MC0ht/dbb9XE=
Subject key identifier: AD:C6:C3:A0:34:BE:DB:03:93:B9:78:D7:35:72:A1:C3:28:2C:C5:12
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 0182D522E951CFF14A954F76B66A0117C624
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/rcbDoDS-2wOTuXjXNXKhwygsxRI.roa
Signing time: Thu 25 Aug 2022 13:13:31 +0000
ROA not before: Thu 25 Aug 2022 13:13:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 45.139.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d5:22:e9:51:cf:f1:4a:95:4f:76:b6:6a:01:17:c6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Aug 25 13:13:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=adc6c3a034bedb0393b978d73572a1c3282cc512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e0:9d:55:f6:8e:e5:43:b2:68:a9:9c:19:7f:
4e:0d:71:14:0c:db:ab:dc:e1:bc:d1:f1:b2:4e:c2:
63:9a:27:2f:87:e1:df:8c:6b:5e:65:9e:b5:66:c9:
91:a4:91:07:a0:4a:85:6c:c6:92:c7:ea:8a:57:bf:
20:27:f7:55:68:6e:2d:50:b1:27:e3:37:29:52:d7:
3c:73:91:13:bb:2a:4f:91:fe:2d:b6:2a:7f:cb:d4:
a4:b3:f3:df:b7:78:ce:86:42:2e:7b:a1:c0:06:63:
e9:b7:15:5d:43:aa:a7:73:5c:fd:47:cb:5d:c3:19:
ac:e7:b5:0a:51:75:60:06:4b:09:57:5a:48:0d:df:
c5:d9:e6:5b:ee:8a:f7:cc:34:46:b5:0c:92:6a:fe:
c3:2b:95:3e:64:d5:eb:fc:3f:74:a8:ea:be:0a:12:
f2:6c:13:e6:f4:cc:79:de:9b:73:e9:f3:04:19:de:
06:81:58:64:91:2f:a8:8d:05:af:13:ab:f7:81:65:
9b:de:6e:dd:7f:27:a4:c4:a8:25:38:df:27:27:f8:
d0:0c:41:23:1f:df:23:e7:49:73:51:77:b5:a5:5c:
59:cc:8b:48:e8:97:b2:33:b8:e9:0b:a1:b2:cb:88:
64:b7:73:b4:30:ca:54:12:ea:d3:dc:38:8c:d5:71:
de:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C6:C3:A0:34:BE:DB:03:93:B9:78:D7:35:72:A1:C3:28:2C:C5:12
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/rcbDoDS-2wOTuXjXNXKhwygsxRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.0.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:32:d5:2c:ca:50:31:0b:ea:0a:ad:00:09:3d:ab:7a:0f:8f:
87:ba:06:a6:83:52:7f:3b:5e:ed:f2:f0:46:b9:b5:63:cf:78:
17:75:9f:b4:13:13:ed:67:4f:3e:11:18:05:4d:22:3e:2c:a9:
f1:7f:c7:0c:49:aa:b7:c7:5e:c4:e1:72:df:f2:7f:62:47:5e:
00:b5:48:00:03:11:bd:2e:83:b1:ea:e7:dd:a9:a4:77:6f:cf:
50:48:31:5c:24:72:f9:a3:d7:ec:d2:fe:b1:82:c3:bd:d9:f5:
71:42:a8:91:20:d5:03:0e:0a:7a:cd:a5:3c:75:d3:57:69:6b:
70:d2:98:97:a3:24:23:15:03:54:f4:e8:7a:77:b4:0a:03:1b:
ce:57:27:cd:bb:b4:8a:b2:7a:e5:2c:68:9f:d1:22:84:bb:df:
5e:7d:e2:28:aa:9f:e2:32:90:8a:ab:5a:5a:a6:02:25:66:77:
ca:f0:82:a5:fa:43:a2:fa:0f:9b:1e:b3:38:c0:79:ae:00:19:
cb:10:09:b4:5d:76:12:3e:71:c3:92:27:ab:38:67:b2:84:5c:
7a:f5:ef:91:0c:5d:fe:57:f9:5a:2a:a0:0d:ef:95:01:00:cf:
35:cf:f2:d0:94:20:27:aa:e7:4d:bd:05:90:a6:17:36:0b:7b:
b8:95:1b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:37 2025 by rpki-client