Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/H8B1NjzsEl3ldKECFwOQ6nmJmXs.roa
File: H8B1NjzsEl3ldKECFwOQ6nmJmXs.roa (raw, json)
Hash identifier: VYlIAbKaPFsLBrLQ8pOqlTtyQskFsHCbu3FnKPHHgh0=
Subject key identifier: 1F:C0:75:36:3C:EC:12:5D:E5:74:A1:02:17:03:90:EA:79:89:99:7B
Certificate issuer: /CN=787650d0951529b1a817232c12c42e49b889e1b8
Certificate serial: 0185FC1E13F02D768C2B155A52B4E378B25E
Authority key identifier: 78:76:50:D0:95:15:29:B1:A8:17:23:2C:12:C4:2E:49:B8:89:E1:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/H8B1NjzsEl3ldKECFwOQ6nmJmXs.roa
Signing time: Sun 29 Jan 2023 06:01:47 +0000
ROA not before: Sun 29 Jan 2023 06:01:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.150.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:fc:1e:13:f0:2d:76:8c:2b:15:5a:52:b4:e3:78:b2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787650d0951529b1a817232c12c42e49b889e1b8
Validity
Not Before: Jan 29 06:01:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fc075363cec125de574a102170390ea7989997b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:a6:de:ba:a7:35:fe:95:4e:02:fb:7f:a0:
69:10:48:70:9a:58:47:15:0c:22:3c:98:98:54:e5:
f4:54:67:ef:51:af:ad:cb:cb:60:d6:a3:2d:7a:2c:
af:cc:e6:07:ed:0d:2b:d5:60:83:63:0e:6f:b7:42:
8f:2a:6d:04:61:1c:ce:e6:f4:e9:49:71:12:2c:d3:
01:48:13:61:12:fb:e6:9e:8a:8e:9e:76:e3:fc:5f:
ab:91:1a:79:af:8a:1c:c0:63:e0:bc:20:d1:94:80:
64:fd:45:b0:90:e4:0f:de:5d:e1:56:0b:c4:fb:24:
86:6a:e7:b7:17:04:8a:98:46:ee:91:1a:de:0b:5d:
6b:a0:b1:fd:25:57:3f:a1:23:39:b6:a3:0b:d3:47:
2b:9c:c1:ab:7d:8a:58:4a:53:e7:ae:eb:57:ec:ae:
b6:3a:85:79:a0:1f:db:a5:03:44:07:56:ac:7d:8c:
6e:22:7e:2f:33:e1:cb:b3:d5:9a:3d:ac:5e:6a:06:
e2:ff:41:de:66:ab:3a:10:f7:65:a3:23:55:a9:85:
bd:38:75:f7:5e:0e:c0:88:92:7c:ac:31:fe:23:b0:
db:34:a1:08:44:9f:04:d0:8a:f1:c3:ee:ef:9b:f4:
dc:1d:fa:60:04:1d:9a:90:1f:e6:38:c9:93:02:34:
2d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C0:75:36:3C:EC:12:5D:E5:74:A1:02:17:03:90:EA:79:89:99:7B
X509v3 Authority Key Identifier:
keyid:78:76:50:D0:95:15:29:B1:A8:17:23:2C:12:C4:2E:49:B8:89:E1:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/H8B1NjzsEl3ldKECFwOQ6nmJmXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.149.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:91:07:14:23:75:a5:d8:29:f9:ab:d7:c3:52:05:ec:f1:ec:
d7:3c:eb:6f:35:ab:e2:cc:8d:08:92:50:c2:0b:dc:49:7f:49:
27:37:48:42:b4:ed:b5:aa:e9:8b:17:d6:48:4d:2b:44:f1:5b:
21:bf:39:4e:3c:50:fa:a1:78:74:4e:dc:da:cb:b2:5d:4f:78:
d8:9b:f0:8c:64:c7:1e:70:e1:27:12:1e:19:a9:c1:fe:e7:f5:
03:b3:84:5e:bf:87:4a:15:76:90:f9:33:df:5a:bb:c9:b7:d8:
92:ff:f4:6c:c7:a1:a1:bd:df:09:3e:39:9f:03:f0:33:81:90:
72:72:b1:88:96:0a:09:ba:c8:08:a5:0c:10:e3:4b:a4:0a:8a:
40:73:7f:a3:65:7a:1e:ee:d6:88:59:5e:78:41:c6:d9:5b:7f:
0e:26:42:9e:72:c7:40:15:46:b4:66:41:7e:19:79:6a:0a:e6:
62:ca:b7:22:a6:cb:18:68:d3:53:2f:2c:7c:07:3e:37:2a:65:
1f:45:e9:e8:02:bf:2c:4b:4c:4c:91:db:89:04:e8:3e:37:77:
a2:44:59:0f:d0:cb:f6:7b:c4:db:a7:ab:ab:27:63:e5:0d:f4:
f8:dc:1f:50:c7:ee:12:6c:90:9e:32:21:f8:41:79:8c:e7:41:
3b:0d:14:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:26 2025 by rpki-client