Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/bOECzxoRG5DIST1aoBlm5AVA4k0.roa
File: bOECzxoRG5DIST1aoBlm5AVA4k0.roa (raw, json)
Hash identifier: Cbb4ryeJck6JzBnK5ESVMAmfn/axMvHGxWIKtKZrBsA=
Subject key identifier: 6C:E1:02:CF:1A:11:1B:90:C8:49:3D:5A:A0:19:66:E4:05:40:E2:4D
Certificate issuer: /CN=4a7209f8b7ed4fa9bfb278880c29f98d6a96b63c
Certificate serial: 01856F0B6E08D42E03BD584BE64CD2D6B9ED
Authority key identifier: 4A:72:09:F8:B7:ED:4F:A9:BF:B2:78:88:0C:29:F9:8D:6A:96:B6:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnIJ-LftT6m_sniIDCn5jWqWtjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/bOECzxoRG5DIST1aoBlm5AVA4k0.roa
Signing time: Sun 01 Jan 2023 20:34:58 +0000
ROA not before: Sun 01 Jan 2023 20:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30823
IP address blocks: 45.142.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:6e:08:d4:2e:03:bd:58:4b:e6:4c:d2:d6:b9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7209f8b7ed4fa9bfb278880c29f98d6a96b63c
Validity
Not Before: Jan 1 20:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ce102cf1a111b90c8493d5aa01966e40540e24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:6d:82:61:67:3c:e1:e7:b1:72:33:f1:37:
23:70:4a:ee:9e:c9:70:ab:14:d3:67:97:61:79:4c:
69:1d:bd:a8:5e:b2:97:65:3c:85:2f:ae:5e:98:c0:
2d:04:ee:c3:6a:54:58:80:c2:d8:37:46:eb:db:29:
28:27:90:a3:ac:30:04:68:f6:00:12:e8:92:b1:70:
50:53:64:c0:53:61:0a:19:86:e1:25:da:c9:dc:48:
03:d2:7d:d9:d2:f3:54:43:7d:63:87:0d:37:eb:9f:
e2:20:14:60:ef:45:15:dc:92:ed:a7:19:f6:c2:5c:
5c:7f:89:0f:89:e2:a9:6d:b1:e2:dd:55:70:d6:99:
f0:83:17:1e:e9:69:5d:ac:3e:2f:87:90:50:2f:a6:
1f:56:17:54:fe:91:a3:fe:f4:65:a2:57:b7:42:82:
d5:9f:89:34:78:9f:52:d2:f9:be:2e:ee:d2:b8:d4:
4b:1c:93:da:6d:79:b9:a5:65:9f:be:e1:44:47:c0:
09:f9:07:b6:a4:f3:df:2d:f9:67:67:d0:5f:98:46:
f2:48:20:7b:2d:fe:bc:92:fe:4c:c1:b7:5b:9f:fb:
df:13:ef:20:51:00:80:90:03:b9:85:14:fa:7e:33:
00:30:58:b9:77:50:b0:3b:c6:d3:0d:91:91:8d:af:
52:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E1:02:CF:1A:11:1B:90:C8:49:3D:5A:A0:19:66:E4:05:40:E2:4D
X509v3 Authority Key Identifier:
keyid:4A:72:09:F8:B7:ED:4F:A9:BF:B2:78:88:0C:29:F9:8D:6A:96:B6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnIJ-LftT6m_sniIDCn5jWqWtjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/bOECzxoRG5DIST1aoBlm5AVA4k0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/SnIJ-LftT6m_sniIDCn5jWqWtjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.112.0/24
Signature Algorithm: sha256WithRSAEncryption
07:fa:95:05:f3:0b:41:21:60:5d:2d:bc:90:c0:2b:07:a0:fa:
3c:34:63:ab:75:63:05:f3:9f:37:60:b2:5f:7b:67:ca:eb:ca:
2f:ef:68:e5:fe:41:64:17:40:61:d7:cf:89:16:51:48:3b:7b:
6d:79:1e:f4:5f:a1:7c:d4:c7:59:06:4b:81:9b:1a:c9:b1:a0:
35:6c:ac:bb:36:9a:f5:03:2b:ef:06:3e:92:0b:c2:a5:d0:f9:
27:f4:78:c6:b8:5d:30:33:96:c2:b9:83:1f:ff:d8:9d:87:dc:
b2:4d:b9:fa:1e:36:1e:a4:2d:81:e9:cf:45:6d:ff:4e:2c:8b:
56:62:fa:7a:13:d3:ab:f6:fb:1a:05:04:8e:09:c9:89:24:74:
29:38:81:4b:f8:9a:f9:41:1e:af:07:de:08:86:40:c1:f2:00:
78:b2:60:ab:04:0d:6c:39:8a:84:c2:c3:3f:62:cc:61:06:83:
f8:1b:d8:59:c5:24:94:d7:b4:27:65:ff:0d:de:c8:b9:b8:99:
7d:79:f8:c0:ea:0c:07:37:36:68:c0:97:8f:0a:e4:9c:68:9c:
5c:46:82:d2:92:bb:f1:3b:62:7e:bb:9f:57:0d:4c:ab:be:74:
eb:16:4b:a0:5e:cb:a1:78:b3:c6:90:ce:6e:15:2b:6a:64:d0:
ab:b5:d6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:38 2025 by rpki-client