Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/gDgQwH5IIsaejsX9Rc-uwwKPKfo.roa
File: gDgQwH5IIsaejsX9Rc-uwwKPKfo.roa (raw, json)
Hash identifier: dZT3oSjd26AVZXTd+NFY1WfmtpYVfF6/RB9Ekx5ORZ4=
Subject key identifier: 80:38:10:C0:7E:48:22:C6:9E:8E:C5:FD:45:CF:AE:C3:02:8F:29:FA
Certificate issuer: /CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Certificate serial: 01856EC1F5C72E1D46D05514C34C719E5A66
Authority key identifier: 60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/gDgQwH5IIsaejsX9Rc-uwwKPKfo.roa
Signing time: Sun 01 Jan 2023 19:14:43 +0000
ROA not before: Sun 01 Jan 2023 19:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150179
IP address blocks: 45.155.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c1:f5:c7:2e:1d:46:d0:55:14:c3:4c:71:9e:5a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Validity
Not Before: Jan 1 19:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=803810c07e4822c69e8ec5fd45cfaec3028f29fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d4:91:94:38:2b:04:a4:f2:a3:f0:30:37:62:
94:20:8c:54:0d:52:92:78:cb:44:06:33:98:06:78:
9d:32:b0:b3:d8:42:24:ea:57:8e:86:a0:ce:4f:df:
c2:35:5f:43:bb:28:04:f2:b4:06:ed:8a:a4:df:cc:
14:ae:1a:d3:b2:65:78:fa:88:0c:08:90:9f:c3:d5:
59:ab:cb:30:4c:04:4e:10:7d:6c:9d:7f:8f:42:c6:
a6:df:e4:f5:12:22:33:1f:33:16:e2:4d:58:c5:d7:
de:11:40:43:a0:b4:25:f5:25:28:00:24:64:20:c4:
aa:e5:cd:35:0b:fa:b7:9f:45:43:85:b1:b1:fe:bf:
d9:2c:b3:29:d9:58:e8:f6:45:67:3f:3e:9e:37:d6:
af:8a:7f:56:06:62:fd:4a:c1:20:7d:41:d7:eb:c0:
5b:94:f8:32:c7:e2:83:6c:0f:11:ab:97:60:94:a9:
1e:86:89:90:58:5d:5b:e4:02:c5:f3:4e:63:89:f9:
7d:6d:db:40:02:41:51:4c:c5:d3:c2:1c:5c:82:49:
48:5b:c4:eb:f8:f7:33:66:82:a6:b5:40:ca:eb:eb:
f3:04:8a:d9:2d:0f:35:e0:72:95:83:f2:b6:46:e6:
43:ce:f6:de:13:35:cf:aa:f5:6a:c1:64:47:88:f8:
31:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:38:10:C0:7E:48:22:C6:9E:8E:C5:FD:45:CF:AE:C3:02:8F:29:FA
X509v3 Authority Key Identifier:
keyid:60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/gDgQwH5IIsaejsX9Rc-uwwKPKfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.227.0/24
Signature Algorithm: sha256WithRSAEncryption
19:6f:44:ff:ac:cd:4b:9c:12:04:84:ba:a6:eb:ca:8d:8c:08:
39:dc:d2:8f:ff:ce:86:63:66:28:14:13:39:8d:6b:74:dd:24:
39:d8:22:c0:0b:1e:19:a3:db:12:f3:2a:ff:8f:8f:eb:31:b8:
90:13:8f:14:f1:99:78:25:43:a8:6b:2c:4e:16:c1:80:45:59:
fe:3c:78:11:a1:1f:0a:51:c1:ab:13:5f:8b:32:4d:f7:9f:27:
26:25:01:c7:9e:f0:94:e2:15:51:85:a3:3e:29:1a:14:7a:44:
20:27:b0:a4:07:06:5b:48:14:ef:03:5f:64:86:cb:a2:67:cf:
8d:de:23:52:21:ad:3a:bd:2b:a2:34:82:46:a7:6f:4c:98:6a:
68:5b:b5:97:89:06:b3:b4:46:c7:fd:05:78:2e:f0:ad:8a:60:
84:3f:5d:ca:4b:0b:dd:54:c7:ae:52:7e:0a:f3:f2:4f:da:01:
7b:d0:4b:b4:6c:f4:bf:6e:ef:6e:d0:42:bf:21:0c:27:25:d1:
80:1a:81:e3:0e:00:b1:ce:eb:85:f7:a6:00:fa:ae:a0:61:b8:
69:8c:8e:36:9e:0a:38:39:8e:aa:c7:15:d1:0a:00:68:31:08:
5e:08:12:89:79:1a:da:cf:5d:86:80:12:9c:3e:2a:98:c7:73:
14:9e:ef:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:12 2025 by rpki-client