Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/KO-O5zwaXLjY-KedYJngbnrpzkE.roa
File: KO-O5zwaXLjY-KedYJngbnrpzkE.roa (raw, json)
Hash identifier: sanXi/eZXAxZLRHd6gE49XBSfVMaGR8HloUnakbi4uA=
Subject key identifier: 28:EF:8E:E7:3C:1A:5C:B8:D8:F8:A7:9D:60:99:E0:6E:7A:E9:CE:41
Certificate issuer: /CN=6ef0a587acb330625e21158ec40b710af0e2167a
Certificate serial: 077528B5
Authority key identifier: 6E:F0:A5:87:AC:B3:30:62:5E:21:15:8E:C4:0B:71:0A:F0:E2:16:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bvClh6yzMGJeIRWOxAtxCvDiFno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/KO-O5zwaXLjY-KedYJngbnrpzkE.roa
Signing time: Sat 01 Jan 2022 13:55:01 +0000
ROA not before: Sat 01 Jan 2022 13:55:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 45.155.65.0/24 maxlen: 24
45.155.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125118645 (0x77528b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ef0a587acb330625e21158ec40b710af0e2167a
Validity
Not Before: Jan 1 13:55:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28ef8ee73c1a5cb8d8f8a79d6099e06e7ae9ce41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:22:01:6a:53:e5:dc:70:de:d7:93:0b:85:
60:86:b3:ed:c4:b1:d9:02:f3:ec:25:81:fa:ab:44:
7c:74:af:bc:5f:dc:de:8d:50:d2:00:71:86:0c:89:
5a:40:92:cd:4a:ed:06:1b:a3:77:a1:b3:e3:49:04:
73:39:13:7a:a6:88:20:90:2d:cb:8b:78:d1:b3:7e:
ed:a4:6b:07:0d:5b:ae:7e:b3:f9:c6:62:94:c3:64:
6e:cf:f7:bb:94:68:7f:13:e3:e8:f8:3e:3d:22:51:
58:49:9d:bc:d6:c7:85:01:d2:15:d0:88:36:09:d4:
e5:d5:a6:0b:4a:23:95:4d:f5:57:cf:e0:2b:54:d4:
b7:d0:44:9f:a6:45:39:13:3f:bd:ad:de:22:1c:13:
d6:7d:23:da:17:4c:7f:84:d6:d1:7c:d7:84:29:01:
cc:60:73:29:50:2f:60:b4:c4:f6:74:32:71:39:ec:
44:93:34:f4:40:2c:95:6e:d8:14:42:24:ec:43:e4:
6d:ba:68:3e:79:3b:a6:d4:19:9e:03:8e:85:57:40:
fb:2f:5f:bc:c9:3c:23:28:8a:9b:db:c4:36:32:14:
ea:ae:ff:10:c3:5a:d8:f3:b6:0f:18:d6:13:b1:3d:
69:7e:95:11:84:20:a6:6a:4d:f6:c7:87:f5:4e:42:
69:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EF:8E:E7:3C:1A:5C:B8:D8:F8:A7:9D:60:99:E0:6E:7A:E9:CE:41
X509v3 Authority Key Identifier:
keyid:6E:F0:A5:87:AC:B3:30:62:5E:21:15:8E:C4:0B:71:0A:F0:E2:16:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvClh6yzMGJeIRWOxAtxCvDiFno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/KO-O5zwaXLjY-KedYJngbnrpzkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/bvClh6yzMGJeIRWOxAtxCvDiFno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.65.0-45.155.66.255
Signature Algorithm: sha256WithRSAEncryption
74:74:85:f5:68:05:f7:b4:eb:15:12:99:69:31:10:56:10:7e:
7e:35:b1:8a:e9:c9:eb:75:e9:b5:e1:2f:5b:7d:d2:36:36:db:
80:ef:8a:b6:ef:d2:f8:19:60:45:75:39:69:02:e4:7d:06:71:
1e:c1:c2:28:19:b9:a3:10:ad:88:f0:26:51:14:c7:b6:1f:76:
2f:92:11:ed:1c:ef:cb:85:08:a2:41:1b:c8:fc:cd:c9:7a:bd:
1f:b7:43:85:67:10:1e:f9:82:42:e2:a8:ef:d2:24:f0:62:37:
35:e0:1f:89:ca:6b:31:90:2d:70:1b:ba:5e:ab:5d:5d:94:55:
50:57:af:56:95:c2:f2:91:81:02:b8:dd:c8:28:a2:97:65:c8:
f9:f4:7b:2e:6f:5e:52:0a:f8:b1:77:27:7e:13:94:74:1f:9a:
63:00:72:17:8f:85:d7:ca:7d:0e:87:74:13:c6:a7:cd:e3:72:
04:3a:0a:29:8a:a2:e5:d6:4a:61:11:37:44:08:99:f0:4c:67:
c1:ee:4c:0e:09:07:f3:95:06:ab:52:19:75:74:ba:ff:88:a6:
68:96:6c:69:08:e3:04:a4:cb:d9:cb:e8:ca:4f:40:f1:47:19:
1c:56:25:0a:68:c9:12:3c:c2:a0:93:6c:4d:b2:3f:a1:c1:ff:
03:59:9a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:23 2025 by rpki-client