Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/INYsNjW6RbvXCT7fhqPdK9JIAM8.roa
File: INYsNjW6RbvXCT7fhqPdK9JIAM8.roa (raw, json)
Hash identifier: wH4pOMq6H05IZBVdYBt3AUAaCtS54ikjM5WgvyHJwcU=
Subject key identifier: 20:D6:2C:36:35:BA:45:BB:D7:09:3E:DF:86:A3:DD:2B:D2:48:00:CF
Certificate issuer: /CN=618855635e4794f5878e3b985fed8935ae06c5a1
Certificate serial: 018ABD6A07E64E9A70C2D0EC3753C010F037
Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/INYsNjW6RbvXCT7fhqPdK9JIAM8.roa
Signing time: Fri 22 Sep 2023 15:02:37 +0000
ROA not before: Fri 22 Sep 2023 15:02:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15830
IP address blocks: 45.142.128.0/22 maxlen: 24
2a12:21c4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bd:6a:07:e6:4e:9a:70:c2:d0:ec:37:53:c0:10:f0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1
Validity
Not Before: Sep 22 15:02:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20d62c3635ba45bbd7093edf86a3dd2bd24800cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7a:9b:4c:5c:5b:c5:b9:f6:6f:bb:fa:00:94:
90:dc:47:8a:10:a5:27:d3:eb:30:61:cd:5a:29:7b:
bd:9e:66:8c:f4:d1:0d:5c:c9:ea:c8:78:51:d4:51:
8a:98:27:02:1b:d0:04:2b:3c:d7:ea:22:66:03:2a:
0e:47:c2:cb:65:85:d2:7d:dd:58:3b:71:08:07:92:
7b:c4:99:3c:71:e4:a7:ff:7f:4d:a7:ef:c8:cd:c7:
e0:08:f4:ce:8a:cf:50:5f:69:46:a8:b8:78:88:a8:
1b:76:38:2d:d8:b0:f7:06:a8:85:18:a5:96:ec:f3:
4b:e2:10:8e:c6:85:7a:b2:cb:53:97:32:b4:ca:2a:
8b:19:80:43:cc:9b:af:e9:97:75:40:a0:be:94:3f:
30:cb:fe:e3:0f:d1:1c:c6:97:39:ef:2f:f8:20:40:
79:75:c4:b0:83:6d:0b:7c:15:d1:62:a9:69:a0:f3:
c4:4f:1a:3d:9c:5b:35:43:7f:85:2d:43:35:ac:b4:
25:6b:e8:42:56:da:ba:1c:91:6a:49:a9:49:5b:38:
3c:5b:52:9a:61:23:f1:22:f9:4a:ee:f1:1b:c5:92:
13:fd:4e:bc:3b:84:1a:ee:65:4d:f6:f5:36:b4:18:
57:0a:6f:31:6a:27:55:8b:55:54:10:87:bf:62:63:
8a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D6:2C:36:35:BA:45:BB:D7:09:3E:DF:86:A3:DD:2B:D2:48:00:CF
X509v3 Authority Key Identifier:
keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/INYsNjW6RbvXCT7fhqPdK9JIAM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.128.0/22
IPv6:
2a12:21c4::/32
Signature Algorithm: sha256WithRSAEncryption
12:75:b2:ea:3b:f2:05:e1:99:7b:d1:40:cd:65:ff:bd:34:74:
a8:8c:a3:db:0e:bb:65:c0:1e:57:ed:3c:55:44:93:69:9c:1c:
d4:65:94:e4:37:e2:7e:13:bb:2b:97:e0:54:63:3d:ce:22:38:
25:00:68:05:9d:82:e2:ef:dc:c8:ba:e0:5b:de:46:f5:f7:83:
7d:94:ad:19:f1:b9:03:18:79:37:3f:76:e7:44:24:97:fd:38:
4c:44:1e:8f:23:9a:0d:e4:d7:9d:8a:a7:9f:cf:60:4b:fc:f2:
45:41:03:2e:c1:31:52:60:b0:19:0c:32:09:65:dd:18:c2:d7:
1b:59:79:0f:57:16:12:6b:ca:cc:c0:4b:56:7e:21:54:56:60:
dd:d2:6a:1c:ce:39:96:7f:1d:f9:68:aa:da:24:da:84:e5:9f:
88:32:7a:2a:e1:6f:1d:a3:b2:85:76:e8:ba:44:a7:bd:9f:a5:
fc:6a:87:7b:bf:39:79:82:ef:c8:20:54:82:8d:59:11:04:50:
8f:8a:4c:fd:6c:6d:97:1d:b8:df:b5:02:6c:2c:1a:88:09:c8:
61:76:ae:a4:59:5e:ff:0a:ac:d6:69:22:8a:50:fa:74:d1:7a:
98:6a:65:88:96:34:10:ab:ba:c5:b3:73:25:4b:cc:d1:92:74:
13:97:2d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:38 2025 by rpki-client