Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/B6vKTadeSJdiu8jo9W9bJa6W1HE.roa
File: B6vKTadeSJdiu8jo9W9bJa6W1HE.roa (raw, json)
Hash identifier: GZ50GOYhQmgz0GWGgneQL+39o4+KyOeK1o5BAx7Hdtc=
Subject key identifier: 07:AB:CA:4D:A7:5E:48:97:62:BB:C8:E8:F5:6F:5B:25:AE:96:D4:71
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 018570FB9477B6825886D3DA049992E3A66A
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/B6vKTadeSJdiu8jo9W9bJa6W1HE.roa
Signing time: Mon 02 Jan 2023 05:36:53 +0000
ROA not before: Mon 02 Jan 2023 05:36:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56729
IP address blocks: 45.91.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:94:77:b6:82:58:86:d3:da:04:99:92:e3:a6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 2 05:36:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07abca4da75e489762bbc8e8f56f5b25ae96d471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7f:62:05:eb:19:07:17:2e:8c:8b:f2:c5:04:
b9:11:12:0d:85:43:4f:f8:24:2e:d7:e2:4b:f7:47:
25:b6:0d:62:e5:51:84:dc:f5:08:f8:2d:8f:2d:f8:
7c:17:c9:16:35:f6:c4:17:4a:b4:2e:24:d4:60:c0:
92:08:87:b5:b2:5f:cf:13:bc:06:5c:ef:ae:7c:71:
55:8b:26:c5:50:31:4c:8f:46:9f:49:48:d9:0f:32:
2e:0c:b4:26:8f:92:0c:9a:35:24:71:55:6b:6e:bd:
68:8c:f6:25:d2:4f:90:a3:64:e1:01:14:bd:bc:f7:
ac:73:2d:dd:de:b2:50:bb:91:b0:00:eb:4c:e5:27:
08:d6:4f:73:72:6d:6a:83:98:d8:4b:1a:be:1c:86:
b1:42:b7:50:e5:79:df:9c:53:d2:9f:61:63:b5:a0:
5d:d7:67:e8:40:5d:d5:7f:d7:44:4e:f9:e3:2e:5e:
bf:99:a3:ff:96:1a:07:d6:d7:24:18:a8:6f:ce:ee:
84:48:b1:0b:0d:44:20:89:bd:c6:45:3d:2a:74:c0:
b9:b9:fd:56:b0:27:f9:01:de:5d:58:d5:83:24:25:
2d:26:df:ee:9f:25:75:6b:aa:56:c0:13:88:a7:a8:
e4:ae:87:3f:f5:f6:26:db:28:ea:b4:8c:b7:b5:54:
15:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AB:CA:4D:A7:5E:48:97:62:BB:C8:E8:F5:6F:5B:25:AE:96:D4:71
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/B6vKTadeSJdiu8jo9W9bJa6W1HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.5.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:49:af:99:88:27:83:94:19:f2:a1:96:15:6f:c0:38:50:f4:
aa:46:8e:b7:c5:c3:71:f1:ab:08:ec:97:9c:f6:0f:a2:75:c0:
60:45:a9:18:7d:20:11:25:3f:3a:56:cd:b0:8c:12:e8:97:de:
22:ec:be:09:6e:c9:d4:ca:76:3b:d1:ec:cf:aa:09:21:4a:54:
05:9f:bd:e9:97:bd:ff:e4:6d:31:50:35:72:2c:08:3b:6e:95:
53:ea:bb:33:6d:f4:64:e4:ad:06:e6:6a:98:16:a8:9d:dd:69:
20:e4:c7:d2:1a:02:7c:e8:2d:a7:ef:ab:cf:ab:78:1c:57:7a:
26:f3:75:da:e5:33:a8:91:dc:c6:95:ab:36:d5:78:7e:d1:ba:
ac:76:d1:e6:8b:bc:2f:61:b1:89:74:8b:8c:47:e8:95:d6:ee:
c2:b0:40:34:1d:f8:eb:7b:1e:fe:c4:20:6d:46:fe:bb:6c:a4:
6a:38:1c:2c:d8:a0:eb:13:f1:d5:46:da:e2:a1:38:f4:2a:f1:
6a:29:af:d2:97:61:f6:99:c3:92:b4:9c:70:e2:f7:a7:17:98:
a5:49:6a:69:19:28:dc:99:40:45:90:fd:f5:d2:0e:f5:63:d9:
4f:6b:44:e4:e7:e1:c7:67:96:55:fc:47:7d:ff:24:2c:33:84:
bd:e3:bf:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:29 2025 by rpki-client