Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/eTVWXBDwR4YBE6YSl6oziZrGzNU.roa
File: eTVWXBDwR4YBE6YSl6oziZrGzNU.roa (raw, json)
Hash identifier: 3fQc3r1n38KTIHGuCY64rz+mUvP8VuBdoW/wbKHO1cA=
Subject key identifier: 79:35:56:5C:10:F0:47:86:01:13:A6:12:97:AA:33:89:9A:C6:CC:D5
Certificate issuer: /CN=1572e24e6b20970823f60e56eeb547b6e08806c4
Certificate serial: 0183A2E6EBCAB6BB8C3D0485A8E747A6D990
Authority key identifier: 15:72:E2:4E:6B:20:97:08:23:F6:0E:56:EE:B5:47:B6:E0:88:06:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXLiTmsglwgj9g5W7rVHtuCIBsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/eTVWXBDwR4YBE6YSl6oziZrGzNU.roa
Signing time: Tue 04 Oct 2022 12:09:46 +0000
ROA not before: Tue 04 Oct 2022 12:09:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 45.139.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a2:e6:eb:ca:b6:bb:8c:3d:04:85:a8:e7:47:a6:d9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1572e24e6b20970823f60e56eeb547b6e08806c4
Validity
Not Before: Oct 4 12:09:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7935565c10f047860113a61297aa33899ac6ccd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:58:f3:48:a2:fb:13:53:65:22:8a:2b:62:08:
66:c1:d2:7b:64:d3:9e:4b:c6:fb:20:6e:f2:19:62:
1c:a6:2f:ca:b4:3a:1a:0e:f5:eb:9a:1e:29:01:18:
11:6a:7c:df:04:7b:55:9a:12:d7:90:e0:90:c4:45:
9a:43:df:60:a8:53:07:35:f3:e1:3c:0c:12:37:5e:
41:13:39:5a:bf:50:bb:b3:4f:db:e4:df:a2:1e:eb:
06:e9:a7:7d:58:56:1f:9f:a9:7d:1c:9a:46:91:c9:
53:63:8f:5a:cc:e1:47:b2:34:dd:6f:58:43:d6:94:
c1:3c:c1:b4:43:0e:fe:b9:8d:4f:c8:28:f0:c3:06:
3b:9a:b6:7d:52:d0:48:82:95:e5:84:fb:50:f1:30:
c5:9c:d4:91:47:6c:b3:ca:5f:28:57:a3:f2:09:fd:
68:48:29:47:fb:04:55:e4:b3:a8:17:74:61:ab:e7:
a5:e1:5f:77:d3:51:4c:5c:4a:3a:ba:86:52:a2:3b:
2b:a9:d3:98:cb:73:75:aa:b3:8d:e8:57:9e:8e:56:
63:d2:3f:68:be:61:6f:57:44:33:e8:36:2f:a0:af:
9f:fa:20:e9:9f:ce:cc:95:0e:01:5a:ff:93:61:fb:
f7:d9:b5:74:63:a8:01:78:2e:92:26:fa:a1:d8:4e:
b3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:35:56:5C:10:F0:47:86:01:13:A6:12:97:AA:33:89:9A:C6:CC:D5
X509v3 Authority Key Identifier:
keyid:15:72:E2:4E:6B:20:97:08:23:F6:0E:56:EE:B5:47:B6:E0:88:06:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXLiTmsglwgj9g5W7rVHtuCIBsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/eTVWXBDwR4YBE6YSl6oziZrGzNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/FXLiTmsglwgj9g5W7rVHtuCIBsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.104.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:59:d4:e0:6e:3f:87:77:80:bc:48:c9:d7:29:02:f9:33:0d:
f5:8b:d0:3c:3d:59:da:57:e8:31:21:15:50:1b:f8:1d:c9:75:
b6:27:dc:74:a6:2c:a6:20:77:51:a2:12:8b:dc:4c:1c:64:73:
3a:b0:9f:e1:b8:73:7c:38:c7:35:eb:5e:29:c8:59:c1:60:87:
9f:9d:eb:4a:13:e2:31:ce:76:7c:00:3e:09:59:9b:14:e6:1f:
9a:a0:37:20:b1:a0:dc:0f:87:7f:dc:44:ca:f6:d6:c2:9a:fd:
b2:5a:9d:3d:55:2b:d5:4d:4a:03:c1:cf:5c:75:53:e4:04:bc:
aa:85:f6:2e:83:e1:99:77:6a:53:d3:2b:db:c0:41:36:1b:b3:
75:a8:ce:73:2c:d5:4f:dd:bf:69:6e:b1:61:77:17:2b:45:94:
1c:ad:da:d3:05:1c:24:a9:20:ca:9c:48:af:b9:ca:2c:08:ba:
6b:11:d9:2b:f4:8d:71:25:63:22:f3:8e:71:af:60:51:29:7e:
b4:85:43:c0:ef:9f:52:65:31:33:20:99:38:b1:48:fc:bb:4a:
1f:71:43:58:bf:54:27:f4:aa:8d:3d:88:fb:32:4e:64:e7:e1:
f7:40:05:a9:1f:fa:8c:13:7d:7e:ba:c2:3a:9e:dd:c6:f4:ff:
0e:8d:12:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:01 2025 by rpki-client