Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/t4aUvsevE50W6AK4nTL0zHwQsms.roa
File: t4aUvsevE50W6AK4nTL0zHwQsms.roa (raw, json)
Hash identifier: 5amQrFxGpSe3iYk/LhFyciYFs1wowRUjviR+06DsNz0=
Subject key identifier: B7:86:94:BE:C7:AF:13:9D:16:E8:02:B8:9D:32:F4:CC:7C:10:B2:6B
Certificate issuer: /CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Certificate serial: 04A524AD
Authority key identifier: 60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/t4aUvsevE50W6AK4nTL0zHwQsms.roa
Signing time: Thu 02 Jun 2022 12:28:21 +0000
ROA not before: Thu 02 Jun 2022 12:28:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142019
IP address blocks: 45.155.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77931693 (0x4a524ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Validity
Not Before: Jun 2 12:28:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b78694bec7af139d16e802b89d32f4cc7c10b26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f7:8d:e6:31:9d:1e:4e:9d:75:d7:df:a2:80:
10:4f:f8:3c:9a:b0:17:ff:41:7c:6a:2f:d1:96:fa:
03:a8:77:17:12:37:b4:3a:e3:e4:fc:6a:ba:c4:66:
ee:63:90:d8:29:fb:10:a6:ab:27:ba:b4:61:62:a8:
b4:82:c8:b3:a7:c4:30:6e:05:3f:6a:f3:55:e7:7e:
15:e6:77:83:6d:00:0c:60:b9:b3:b7:fe:de:3b:cc:
21:6a:9c:90:b1:2d:d1:24:9c:06:6b:2b:14:da:dd:
66:72:39:9f:4f:fb:2a:9f:86:d0:aa:26:ca:d5:38:
d3:8b:a7:69:d9:e8:9b:ce:37:90:a6:f1:80:4d:16:
2b:22:f1:18:d2:b7:8c:e7:61:5f:9e:e3:66:b1:b4:
6d:62:5a:8a:ed:77:3d:ad:0d:90:f9:6b:ee:92:22:
88:9b:38:6c:62:d0:21:d8:d0:1d:27:9e:8f:f0:62:
f4:57:67:1b:6a:bf:21:11:28:fb:2a:e8:20:d1:38:
ab:a2:df:e8:1d:cb:13:51:bc:ba:2f:c7:b8:42:4b:
19:c1:59:e9:d3:86:a9:93:94:00:fc:a9:bf:3f:60:
3f:af:5f:8f:96:d8:f2:86:86:6f:d4:f2:c7:67:ca:
b2:8f:07:21:8c:cb:b0:a9:fe:4d:8f:3d:a1:63:c1:
54:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:86:94:BE:C7:AF:13:9D:16:E8:02:B8:9D:32:F4:CC:7C:10:B2:6B
X509v3 Authority Key Identifier:
keyid:60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/t4aUvsevE50W6AK4nTL0zHwQsms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.224.0/24
Signature Algorithm: sha256WithRSAEncryption
46:08:f8:10:8f:c9:1d:6c:75:30:fd:98:87:ec:e3:a5:cd:7f:
76:c6:15:14:3e:8d:b7:bf:c4:85:bf:0d:1c:40:7f:26:fa:4d:
9b:9f:c0:a5:d0:e3:0b:fc:67:05:40:cf:bd:29:bf:4c:6f:e1:
0d:64:9d:0b:e1:da:5e:aa:69:72:71:32:67:49:e0:06:9a:fe:
b5:1b:9a:a5:f1:50:a9:d2:56:81:b4:3a:a5:c0:00:e1:e2:4f:
52:d1:d5:6c:51:33:6e:8b:9b:08:7d:61:57:b3:58:53:5c:be:
ad:e5:08:88:24:de:b3:ad:dc:16:d0:f5:72:f2:28:b6:ca:37:
56:ad:ad:70:ae:c5:ba:04:1c:88:fc:83:86:f7:02:ee:1a:22:
4a:db:4e:ff:4a:ad:b4:a0:b6:b1:3e:75:29:c9:98:0c:98:0f:
1f:56:3a:de:4a:37:b3:e1:cc:4a:f7:f0:a4:18:25:dd:a4:00:
57:f3:ae:90:18:b4:bf:ce:4e:bd:31:83:62:c1:56:ae:fb:9c:
82:6b:8f:b9:b8:da:25:cb:f4:a3:f4:cf:a3:2e:48:f7:4a:8e:
b4:19:3c:11:d7:36:81:d5:00:5a:7e:74:c0:fb:17:61:4a:cb:
60:eb:f6:d2:11:6e:81:b4:96:dd:4a:dd:69:8d:6d:c0:27:91:
b4:00:09:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:03 2025 by rpki-client