Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/gCrL9XdHQTb_nhcAFUXta-v9A0w.roa
File: gCrL9XdHQTb_nhcAFUXta-v9A0w.roa (raw, json)
Hash identifier: qhIXCLDgtHHrgkVMW66/jUzvt6VDsXULQ0lv1a3Ke4g=
Subject key identifier: 80:2A:CB:F5:77:47:41:36:FF:9E:17:00:15:45:ED:6B:EB:FD:03:4C
Certificate issuer: /CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Certificate serial: 01856EB8E50308FD0627DD62D06D9C3FB2AA
Authority key identifier: 78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/gCrL9XdHQTb_nhcAFUXta-v9A0w.roa
Signing time: Sun 01 Jan 2023 19:04:48 +0000
ROA not before: Sun 01 Jan 2023 19:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 45.143.224.0/24 maxlen: 24
45.143.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:e5:03:08:fd:06:27:dd:62:d0:6d:9c:3f:b2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Validity
Not Before: Jan 1 19:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=802acbf577474136ff9e17001545ed6bebfd034c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e8:02:33:23:a6:9a:18:59:5e:cd:0f:ac:fe:
b8:0f:66:6e:72:2a:74:f6:23:9b:88:9d:ef:d0:9f:
2f:16:84:65:d4:49:23:44:fe:a7:fc:43:29:2f:34:
6f:b3:9d:d3:e0:05:c1:1d:f9:ca:9d:65:22:93:77:
12:3a:e8:20:42:9a:ea:93:31:45:74:e9:e0:2e:5a:
57:93:81:18:fa:9e:8d:08:13:f8:88:8f:7b:93:f6:
37:d1:ff:7c:da:02:a7:5c:a1:7c:6b:c9:8a:78:3f:
56:4a:e8:cf:25:f3:49:dc:db:9b:93:bd:8d:ec:c2:
c3:da:72:4b:e7:76:b6:54:51:51:23:6c:2d:1f:d1:
2e:cd:53:43:72:a2:38:96:1e:5f:74:a6:50:10:38:
81:17:8c:52:e8:3d:dd:a6:fb:1c:3d:82:b1:93:64:
e6:bc:21:c8:01:e5:48:0e:d6:b3:75:e8:01:56:e6:
e4:e0:fb:51:3c:e1:ce:37:b8:0c:95:de:c4:d5:3a:
25:2d:06:6c:c5:4b:d8:bb:c0:3b:f6:97:de:1a:31:
fc:6f:76:a6:f6:b9:22:5c:13:37:75:ea:e5:89:53:
87:31:3c:27:db:bd:fc:00:fd:f3:d4:f2:c7:01:78:
76:6e:36:63:4a:77:9c:29:90:fa:76:c6:5e:6a:0d:
a8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2A:CB:F5:77:47:41:36:FF:9E:17:00:15:45:ED:6B:EB:FD:03:4C
X509v3 Authority Key Identifier:
keyid:78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/gCrL9XdHQTb_nhcAFUXta-v9A0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.224.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:58:17:79:e4:83:57:72:23:5f:58:30:10:e2:da:54:14:c2:
91:3e:84:64:3d:19:f9:3f:a7:81:7f:cf:e6:b1:e8:eb:bd:af:
5b:85:94:ac:60:09:78:52:f5:5b:e9:79:c3:66:79:c9:77:9b:
d3:ac:9c:1a:9c:72:c8:c8:b9:c3:e5:b7:b3:e8:b9:ce:20:c3:
26:77:26:28:64:40:71:da:97:43:4b:c3:6c:98:d2:5d:84:85:
3d:d2:bc:a0:6e:e1:ba:f1:1f:70:e6:71:ed:5d:c7:9e:94:86:
5a:fc:ed:5a:30:f7:7f:9c:6e:01:77:6a:e6:01:b6:bb:1e:df:
3c:13:40:80:66:a0:9e:73:da:ff:3f:2c:34:f1:66:e7:ba:fc:
68:02:fe:20:88:c9:0b:56:58:87:46:59:bf:12:7c:2e:2a:9d:
31:29:fc:1d:82:b6:05:4b:1c:fd:28:b8:0d:bc:24:62:2f:3b:
21:96:d5:fc:4a:74:9d:ac:6e:c5:2b:16:4d:47:5e:e8:bb:b1:
4e:73:34:21:34:5c:65:eb:5c:48:e4:7f:a5:93:20:33:9a:6f:
92:e6:63:16:b6:c3:cb:ab:ef:59:8e:75:a9:ff:5f:25:0e:89:
98:cc:07:68:12:86:4e:70:c4:e7:54:b2:f1:88:f3:ee:96:7b:
d9:f9:bc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:24:08 2025 by rpki-client