Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/0QqZSpA75xh-k-zCsdLTN6Mn580.roa
File: 0QqZSpA75xh-k-zCsdLTN6Mn580.roa (raw, json)
Hash identifier: zClJkaEk0Z1CbW2GwDwQZgVc1sDNgah2DryfxVxIMr4=
Subject key identifier: D1:0A:99:4A:90:3B:E7:18:7E:93:EC:C2:B1:D2:D3:37:A3:27:E7:CD
Certificate issuer: /CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Certificate serial: 0188B7B5C6F74EBE901F7F8E09473198741B
Authority key identifier: 60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/0QqZSpA75xh-k-zCsdLTN6Mn580.roa
Signing time: Wed 14 Jun 2023 02:22:03 +0000
ROA not before: Wed 14 Jun 2023 02:22:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136923
IP address blocks: 45.156.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b7:b5:c6:f7:4e:be:90:1f:7f:8e:09:47:31:98:74:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Validity
Not Before: Jun 14 02:22:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d10a994a903be7187e93ecc2b1d2d337a327e7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:17:55:60:89:18:f7:c1:ca:e4:2e:c1:80:93:
b6:29:bc:4f:06:c1:22:ac:4c:dc:b6:ec:fe:5a:78:
44:4b:c8:3d:cd:8a:64:8d:fe:61:6d:c5:9c:89:46:
75:24:e6:5f:8f:b4:3f:9a:49:9a:65:6d:28:b1:16:
fd:69:65:37:08:9a:90:24:fd:db:9a:bf:c9:19:51:
46:8b:88:bb:94:4c:51:5c:82:2e:45:31:50:e9:a9:
e1:f7:06:51:b1:52:3b:7d:72:96:fb:c6:51:2a:46:
00:b4:09:9d:1f:e1:54:86:54:41:1e:b7:d7:43:77:
16:6d:1d:ef:ea:a8:f9:ba:2c:40:e7:f0:92:85:a0:
19:55:56:0a:55:19:f8:a7:b7:15:26:d2:5e:f0:98:
93:22:26:29:94:af:65:92:a1:21:e2:0b:c8:5b:92:
47:22:05:f7:52:89:40:78:24:5d:6e:42:15:ce:60:
c5:1a:bd:26:7b:e8:07:10:e6:23:a5:9a:de:c5:30:
85:aa:3b:16:55:b8:dd:b9:2a:b6:73:f9:72:8a:13:
78:39:0c:d2:57:60:05:8e:a5:ae:8a:38:e3:54:62:
87:7c:d6:6f:ae:29:59:38:94:6d:79:2f:4d:b5:9a:
ca:9e:4c:63:8e:83:14:3f:61:c2:4b:d0:e6:ff:ca:
e3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0A:99:4A:90:3B:E7:18:7E:93:EC:C2:B1:D2:D3:37:A3:27:E7:CD
X509v3 Authority Key Identifier:
keyid:60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/0QqZSpA75xh-k-zCsdLTN6Mn580.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.221.0/24
Signature Algorithm: sha256WithRSAEncryption
24:5c:f1:67:bd:eb:fe:49:b6:eb:17:e9:72:12:f8:f2:2b:af:
9a:e3:28:49:87:78:18:2d:94:bb:2d:13:bc:45:d2:19:c1:6d:
26:61:42:88:ab:1a:5f:c1:07:85:77:8d:fa:25:61:77:06:a2:
6f:f5:99:40:ab:b4:bf:2b:b4:12:01:fd:aa:9a:59:91:39:75:
8e:b5:53:38:f4:4d:b7:c2:1d:38:b2:ba:79:c3:4b:cd:90:ec:
f7:72:e2:d9:45:7b:f0:79:1f:fe:64:d6:ea:be:8b:5d:b2:b7:
45:ac:94:b1:e0:5f:e1:fb:49:86:d7:ca:b3:e2:fe:7d:eb:06:
f1:96:f0:42:59:8f:aa:a6:c9:25:cc:ce:4d:4d:1a:00:33:02:
fb:0c:83:e4:1c:04:f7:42:1c:b9:49:ee:11:e2:91:6b:28:1b:
01:ea:9d:bf:9f:51:e7:26:f5:da:7e:3c:b2:9f:33:71:2f:1c:
5d:7a:77:c0:ef:88:a0:4c:78:46:a7:76:b4:6b:89:9e:da:15:
15:16:f1:31:45:37:bf:14:5a:11:83:6a:96:52:ec:c6:95:f4:
15:e4:bb:5d:a2:01:c3:dc:fa:b2:5d:e6:28:53:af:0c:ff:c2:
3f:e6:ba:19:47:2c:c5:7a:75:19:16:49:59:74:91:a2:65:f2:
fb:39:b1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:08 2025 by rpki-client