Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Cew3pQ_P81xktiR6Z5kVeFJULKQ.roa
File: Cew3pQ_P81xktiR6Z5kVeFJULKQ.roa (raw, json)
Hash identifier: Af0mp8NC6ru+xrGngN1XVnO8jiz5n0tMTz04ERdBXB4=
Subject key identifier: 09:EC:37:A5:0F:CF:F3:5C:64:B6:24:7A:67:99:15:78:52:54:2C:A4
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0189648959EB04272D6AA15DCAEABD7FA3EF
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Cew3pQ_P81xktiR6Z5kVeFJULKQ.roa
Signing time: Mon 17 Jul 2023 15:47:50 +0000
ROA not before: Mon 17 Jul 2023 15:47:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 45.10.108.0/24 maxlen: 24
77.83.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:89:59:eb:04:27:2d:6a:a1:5d:ca:ea:bd:7f:a3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jul 17 15:47:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09ec37a50fcff35c64b6247a6799157852542ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:22:f0:cd:ba:71:c0:2b:0f:b9:ad:f1:ff:8e:
fc:32:19:5a:7c:d1:e8:0f:b5:8c:25:03:25:6a:ec:
de:f2:18:9a:82:81:15:cc:80:fc:a1:26:b5:17:b0:
bf:17:ad:7f:24:1c:c2:8d:a0:63:77:97:a9:f6:4c:
c8:4e:af:08:31:1d:5f:b6:65:26:ec:6e:ba:64:6d:
5b:ce:9a:33:8b:c3:db:b0:2c:08:73:f3:c2:4b:6a:
2c:41:ae:1d:91:76:3d:73:c1:85:9c:ee:c1:5a:7e:
28:b8:92:88:ea:17:ac:4f:05:90:59:c6:00:94:a7:
af:bc:4f:36:2d:70:e6:a1:4e:ca:ac:d1:ba:2d:b5:
89:7c:f2:35:28:e9:79:70:0d:17:f8:77:0e:6a:3d:
e2:95:2f:bc:01:83:bf:00:ba:f1:2b:9a:7b:82:0f:
da:28:95:67:2f:eb:ce:e5:ea:93:35:32:f3:22:58:
8e:ba:f7:05:3b:e0:8e:68:f3:d3:23:79:0d:70:a9:
21:d5:b5:c5:cf:b0:45:bb:8e:a0:62:0d:19:f9:e2:
d5:50:60:1e:1b:16:ad:c8:09:32:5c:4c:5d:8d:0b:
b7:11:d7:9b:0a:91:b2:49:48:6c:51:02:24:9f:34:
c4:15:53:31:cf:61:c2:85:b9:c3:fb:2c:fc:75:3a:
d8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EC:37:A5:0F:CF:F3:5C:64:B6:24:7A:67:99:15:78:52:54:2C:A4
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Cew3pQ_P81xktiR6Z5kVeFJULKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.108.0/24
77.83.80.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:c8:92:e1:7d:27:d4:35:29:e4:19:fb:c7:a6:b3:4c:82:1d:
28:ca:fb:1a:4d:85:4b:f2:8e:be:a8:10:bb:7c:c3:b2:c1:df:
d1:41:09:17:a3:ed:2f:cc:c1:db:0c:99:75:81:be:11:6d:b1:
a8:25:7e:5d:fa:3f:66:ca:72:2d:2b:cf:db:2d:20:ce:01:bf:
4a:f4:ee:0b:b1:38:1b:e5:95:82:17:ce:bc:a3:67:1a:4c:ec:
e3:51:81:a2:57:b4:79:98:b7:0c:ad:28:9e:73:53:7c:6f:f8:
eb:3a:a8:91:b4:f6:51:18:07:be:05:7d:7d:59:da:07:3b:c0:
e9:69:16:8b:37:81:e0:56:88:96:8c:3a:51:5d:d2:d3:8c:46:
7c:7b:47:da:49:d7:a5:cf:05:83:06:2d:e9:29:4d:62:33:ae:
92:e9:cc:61:60:e3:61:e0:51:9f:84:2d:9d:af:e6:c2:a4:3d:
ef:53:0a:d1:52:52:ce:db:b5:a4:b0:32:3c:db:50:18:21:d8:
29:86:67:4d:36:1e:45:f7:5a:bc:61:7d:00:25:c3:28:50:72:
86:52:c7:f4:07:04:cb:cc:0a:a1:80:50:69:48:6d:16:20:7b:
56:02:bd:7a:2b:11:20:69:44:92:30:ae:d1:13:22:af:61:f6:
30:4a:2a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:04 2025 by rpki-client