Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/717d61-4127-4db6-a089-e79129e4ddef/1/j77F94kRElf2HAiKogimUORYSx4.roa
File: j77F94kRElf2HAiKogimUORYSx4.roa (raw, json)
Hash identifier: oYGfT03xDh1bp6nlUCw1pNfAUn+kumfr5NtPWcz1kSU=
Subject key identifier: 8F:BE:C5:F7:89:11:12:57:F6:1C:08:8A:A2:08:A6:50:E4:58:4B:1E
Certificate issuer: /CN=6cfa841621aafc52f88c4901e1f18fadce1e1d65
Certificate serial: 018570D51548AF9F0B72B4D945D2361D8487
Authority key identifier: 6C:FA:84:16:21:AA:FC:52:F8:8C:49:01:E1:F1:8F:AD:CE:1E:1D:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPqEFiGq_FL4jEkB4fGPrc4eHWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/717d61-4127-4db6-a089-e79129e4ddef/1/j77F94kRElf2HAiKogimUORYSx4.roa
Signing time: Mon 02 Jan 2023 04:54:50 +0000
ROA not before: Mon 02 Jan 2023 04:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206841
IP address blocks: 45.152.81.0/24 maxlen: 24
45.152.82.0/24 maxlen: 24
45.152.83.0/24 maxlen: 24
45.152.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:15:48:af:9f:0b:72:b4:d9:45:d2:36:1d:84:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cfa841621aafc52f88c4901e1f18fadce1e1d65
Validity
Not Before: Jan 2 04:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fbec5f789111257f61c088aa208a650e4584b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:3c:02:ad:dd:f1:9f:ea:b8:7c:16:96:06:
25:6a:c4:3f:6a:4e:59:72:e4:80:97:d4:0a:c8:39:
10:1d:e7:03:46:fe:cb:4a:9b:aa:48:a0:12:c8:9d:
1c:58:2a:73:de:54:aa:11:31:65:a3:4b:84:b0:4b:
26:42:24:81:dc:aa:ac:28:51:f4:49:68:db:7f:71:
a5:0f:8e:e9:f9:39:40:eb:c4:9f:4a:ea:80:3f:98:
e5:c4:d1:55:6c:b5:f9:50:9e:e0:3f:0f:21:e6:cc:
bb:e3:06:bd:48:47:67:ce:ca:54:23:db:4e:db:ad:
6e:11:0c:c2:3a:40:e0:b1:2d:d7:8d:17:5c:fd:d5:
4b:5e:40:bb:be:3d:f6:c7:02:ae:c2:db:a9:7e:d9:
e9:c6:1c:a7:52:38:b6:4e:34:b7:5b:d3:90:3e:1a:
8b:ce:7a:f0:1a:67:40:7a:95:c4:bc:f2:d0:72:65:
9f:ff:87:69:29:c3:bd:0b:c7:0f:7d:22:84:31:de:
10:be:9b:8e:15:49:25:82:01:45:07:ce:eb:d7:f2:
03:a7:cd:03:f6:ed:b6:7e:3b:96:73:d7:68:5d:b7:
ca:66:5f:61:fb:f7:96:3b:e3:76:2a:cf:bb:b3:72:
98:7c:6c:16:f4:13:3b:48:8b:2a:e7:b1:93:1c:7a:
c1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BE:C5:F7:89:11:12:57:F6:1C:08:8A:A2:08:A6:50:E4:58:4B:1E
X509v3 Authority Key Identifier:
keyid:6C:FA:84:16:21:AA:FC:52:F8:8C:49:01:E1:F1:8F:AD:CE:1E:1D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPqEFiGq_FL4jEkB4fGPrc4eHWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/717d61-4127-4db6-a089-e79129e4ddef/1/j77F94kRElf2HAiKogimUORYSx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/717d61-4127-4db6-a089-e79129e4ddef/1/bPqEFiGq_FL4jEkB4fGPrc4eHWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.80.0/22
Signature Algorithm: sha256WithRSAEncryption
16:6f:dd:8a:bc:24:9f:dd:15:8d:25:82:1f:ae:ff:82:c8:0e:
b7:c8:ca:a9:0e:fd:2d:e7:e4:27:00:fd:18:8e:44:fc:58:af:
8b:4f:f6:bd:47:ba:bb:8f:e1:4b:92:86:3f:d5:cb:20:53:e0:
8b:f6:5e:e7:1d:fd:76:04:f7:72:69:94:29:08:91:dd:e4:a2:
97:3c:92:ac:1b:77:07:6e:26:7a:3c:f8:71:54:ff:e9:81:c9:
55:59:23:34:ea:78:f3:68:f5:95:62:9e:99:f5:df:99:f7:26:
2e:e4:c7:39:5b:f9:9a:f1:4f:1d:9e:10:28:fd:4f:fa:d1:e1:
29:28:76:28:3f:c3:6d:fd:f5:ef:8d:e9:88:a0:95:12:89:cf:
c1:5e:7b:82:7f:b2:a6:7d:3c:9f:89:72:13:90:38:85:e5:78:
e0:ec:e0:8c:19:cd:c8:47:a0:95:7c:63:00:ac:9e:02:87:9b:
2b:5e:2e:13:1b:3b:16:11:3a:0d:28:e9:e6:30:62:4e:37:ea:
de:d3:e6:e2:c3:d0:c6:68:bc:89:46:eb:84:b4:74:c5:1b:c4:
ae:40:a3:fe:32:ca:71:3d:1d:33:7f:b2:16:b3:59:b6:c8:df:
0f:f2:0d:90:81:64:25:f0:f5:21:cd:fc:24:a6:3c:62:7c:40:
53:be:72:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:33:42 2025 by rpki-client