Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a22bf9-d945-4f20-b8ca-d62738ea3b43/1/l4REWP6LEi4J6gAUcWNrC87CLwg.roa
File: l4REWP6LEi4J6gAUcWNrC87CLwg.roa (raw, json)
Hash identifier: 0HpIu1hnViynAHeGIFhx2B3CoAaF46QODxiIWqp9M2E=
Subject key identifier: 97:84:44:58:FE:8B:12:2E:09:EA:00:14:71:63:6B:0B:CE:C2:2F:08
Certificate issuer: /CN=4cfbba42e54d5c2eb8df4945f7d015966a0b700e
Certificate serial: 0187368E1B6605A86111A8B2A56484B128AE
Authority key identifier: 4C:FB:BA:42:E5:4D:5C:2E:B8:DF:49:45:F7:D0:15:96:6A:0B:70:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPu6QuVNXC6430lF99AVlmoLcA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a22bf9-d945-4f20-b8ca-d62738ea3b43/1/l4REWP6LEi4J6gAUcWNrC87CLwg.roa
Signing time: Fri 31 Mar 2023 07:24:55 +0000
ROA not before: Fri 31 Mar 2023 07:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35699
IP address blocks: 45.92.185.0/24 maxlen: 24
45.92.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:36:8e:1b:66:05:a8:61:11:a8:b2:a5:64:84:b1:28:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cfbba42e54d5c2eb8df4945f7d015966a0b700e
Validity
Not Before: Mar 31 07:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97844458fe8b122e09ea001471636b0bcec22f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d4:d9:b6:cb:2a:de:af:f6:da:7a:58:65:2c:
6d:ba:26:6c:63:c0:f1:98:b3:29:35:38:16:64:79:
b1:ac:83:a3:33:db:ba:1a:11:3e:75:88:8f:0c:05:
eb:53:6e:5e:28:f9:c2:db:c1:35:9a:7f:7c:aa:7c:
a4:90:ea:ef:a4:70:73:63:3d:fd:cd:30:ac:27:3c:
7d:c4:0e:7e:92:2a:ed:50:5d:78:00:c0:75:09:1e:
98:75:90:12:21:0a:08:1b:3c:33:b7:4a:0b:c4:1b:
46:50:1d:fc:63:5a:41:12:a5:40:c3:e6:11:3b:a1:
77:98:1a:d8:fc:00:1b:7b:37:cc:fa:d5:96:38:ca:
42:9c:53:d8:73:f0:5c:28:1a:7d:5e:91:6b:5d:0b:
b1:b5:d5:5a:08:2a:e5:5b:6f:98:b6:1e:b2:0f:35:
ac:8a:ba:70:f3:5e:96:66:16:61:6b:ec:ab:41:f8:
30:2b:4e:ea:95:42:f0:a4:f9:a2:6c:c4:0a:95:9a:
b5:96:5c:b7:00:8d:7e:2f:ed:25:a4:3d:46:62:34:
13:64:ca:de:55:4c:d7:77:2e:b3:15:04:37:b2:cd:
23:14:43:42:55:a1:ac:8b:8b:56:d0:25:13:62:21:
2b:bb:de:7a:95:15:65:b2:a7:b2:6a:14:20:bc:57:
37:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:84:44:58:FE:8B:12:2E:09:EA:00:14:71:63:6B:0B:CE:C2:2F:08
X509v3 Authority Key Identifier:
keyid:4C:FB:BA:42:E5:4D:5C:2E:B8:DF:49:45:F7:D0:15:96:6A:0B:70:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPu6QuVNXC6430lF99AVlmoLcA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a22bf9-d945-4f20-b8ca-d62738ea3b43/1/l4REWP6LEi4J6gAUcWNrC87CLwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a22bf9-d945-4f20-b8ca-d62738ea3b43/1/TPu6QuVNXC6430lF99AVlmoLcA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.185.0/24
45.92.187.0/24
Signature Algorithm: sha256WithRSAEncryption
55:47:90:1e:32:78:df:5b:2a:12:dc:94:15:58:af:aa:67:1b:
0d:7c:28:ee:91:f6:f5:c4:fd:59:7f:c3:a3:1f:a3:68:8c:f3:
ab:43:e3:18:2f:6c:2c:51:f8:95:9b:77:5a:96:25:8d:f9:d3:
55:39:cb:59:ba:22:32:c9:e2:da:dc:be:8e:07:5b:8a:8c:b0:
59:08:1d:89:e0:9f:97:81:b5:ce:ce:9e:00:5a:f8:54:2a:87:
f2:85:68:46:a1:45:88:3e:73:3b:60:1f:93:27:37:b9:0a:6c:
e5:d4:d4:55:7f:a2:4e:f9:bc:7d:e6:1e:6d:aa:5a:0e:0b:68:
ce:e5:74:a8:5e:25:f6:7b:67:2b:a3:4e:28:f0:21:a0:50:90:
ce:a8:f1:ed:c9:bd:6f:41:08:86:29:14:ac:18:10:35:43:26:
f1:5d:b8:c3:f4:77:f0:6a:5d:af:7e:e7:42:81:06:53:1f:02:
6f:04:fb:e4:df:64:63:ca:e3:d9:ef:25:2e:6a:07:1b:50:c2:
29:6c:e8:bf:a6:45:87:26:6b:1f:5b:56:bb:94:1b:ca:d7:3a:
cf:eb:f1:df:54:e7:e2:6d:54:39:39:a3:de:18:df:54:aa:c7:
8c:b0:4d:59:34:50:2b:af:b5:46:41:44:a6:88:f1:0a:0d:9a:
e4:b9:83:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:35:28 2025 by rpki-client