Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/fZCmXJ4aZwFcOuvCCxr6sFdm3gg.roa
File: fZCmXJ4aZwFcOuvCCxr6sFdm3gg.roa (raw, json)
Hash identifier: 7kBDOyHQp++dAnwk4x6LiUzQFbJdLWPka9BzptP/wMg=
Subject key identifier: 7D:90:A6:5C:9E:1A:67:01:5C:3A:EB:C2:0B:1A:FA:B0:57:66:DE:08
Certificate issuer: /CN=1db853b861973fc506e64714cca796d15ccace51
Certificate serial: 08282521
Authority key identifier: 1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/fZCmXJ4aZwFcOuvCCxr6sFdm3gg.roa
Signing time: Sat 16 Apr 2022 16:26:42 +0000
ROA not before: Sat 16 Apr 2022 16:26:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208608
IP address blocks: 45.128.16.0/24 maxlen: 24
45.128.16.0/22 maxlen: 24
2a0e:3bc0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136848673 (0x8282521)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db853b861973fc506e64714cca796d15ccace51
Validity
Not Before: Apr 16 16:26:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d90a65c9e1a67015c3aebc20b1afab05766de08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:15:1f:72:ea:32:c0:26:f2:6c:ad:3f:b4:
86:56:41:c7:85:95:95:d8:51:d1:67:b3:97:1b:8b:
73:41:01:7d:39:af:3b:f7:40:52:c9:b4:7f:d0:59:
40:44:ad:f5:06:9c:b4:69:6a:be:c4:97:e0:db:f0:
08:d1:89:fa:c3:2c:50:2a:20:09:82:02:6c:6e:f9:
88:ab:43:7f:35:62:03:12:df:4f:e3:d6:40:10:24:
34:d2:96:86:0a:47:f8:ed:74:7b:44:f4:57:09:c2:
d6:3d:81:8f:5e:aa:78:dd:48:ef:ca:94:f2:b0:f2:
ed:5e:6b:c7:a4:5b:00:b2:15:0f:0a:ce:2b:66:e8:
e2:9a:13:de:a7:54:d0:b4:53:f3:81:2a:3a:16:02:
94:85:05:57:02:69:05:c4:f7:0e:f6:eb:ba:1e:e5:
de:e7:33:8d:0e:e6:93:61:30:c4:da:0e:61:14:ab:
e9:cd:a1:33:73:40:77:07:3f:ce:c4:68:67:4d:57:
f1:20:b8:a2:bb:d3:b8:38:65:6a:ed:5b:d4:c1:c4:
08:10:84:59:d4:b1:fa:8c:7e:05:c0:21:4d:ad:1e:
e0:0c:4f:34:84:25:34:b2:12:69:42:bc:99:d8:7c:
e6:ab:bc:24:cb:26:e5:22:fb:96:43:1d:01:14:f4:
a3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:90:A6:5C:9E:1A:67:01:5C:3A:EB:C2:0B:1A:FA:B0:57:66:DE:08
X509v3 Authority Key Identifier:
keyid:1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/fZCmXJ4aZwFcOuvCCxr6sFdm3gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/HbhTuGGXP8UG5kcUzKeW0VzKzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.16.0/22
IPv6:
2a0e:3bc0:1::/48
Signature Algorithm: sha256WithRSAEncryption
5d:81:65:be:16:53:3d:a5:de:d5:a6:c8:90:c1:34:d3:5d:68:
d1:8c:11:79:41:48:d9:61:f1:da:da:44:8c:f5:f5:47:5c:42:
9d:ce:3c:9e:0f:cd:5d:69:a1:64:02:6b:60:90:9c:e1:8f:b7:
e7:73:cf:b3:05:66:9a:95:85:8c:d8:fd:c0:12:0f:28:ee:3a:
d3:c6:9e:2e:31:a4:8e:41:26:6f:41:00:ef:e3:98:10:77:b8:
2f:87:8a:62:63:d3:25:50:e7:5d:4a:a2:d4:38:12:2d:9f:10:
19:d0:03:69:58:6b:f1:28:9f:9e:6f:e6:09:8e:ec:51:64:26:
fe:9a:f0:34:1f:eb:f0:9e:28:74:ba:23:cb:7d:03:f0:09:fa:
fb:ed:09:95:e0:bf:57:54:10:84:70:4b:5d:8c:44:cd:d8:c1:
c9:64:db:65:b0:8b:34:3a:90:9c:81:72:ad:a3:5f:cc:1f:4c:
bd:af:ca:c1:43:e0:fd:2b:c1:98:a1:26:89:25:c8:a3:c2:38:
48:1b:2f:81:1e:e0:e5:aa:fb:04:59:08:f8:c8:22:c6:62:12:
65:cb:3b:f1:15:89:32:d1:3d:fe:fb:f4:35:ff:3c:db:16:36:
98:8b:ac:6d:34:9d:ba:a3:41:b8:81:5e:af:46:b9:f2:4f:10:
4e:1d:33:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:13 2025 by rpki-client