Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/40618a-772b-4981-9b2d-a9c285d6ec60/1/1gme0gQXY8p6gLiHnEPnAePDTtI.roa
File: 1gme0gQXY8p6gLiHnEPnAePDTtI.roa (raw, json)
Hash identifier: gO+DvApeeP1+9QELIwvfylMRy7DpithlQNVIctqoLs8=
Subject key identifier: D6:09:9E:D2:04:17:63:CA:7A:80:B8:87:9C:43:E7:01:E3:C3:4E:D2
Certificate issuer: /CN=48f4422ea9b4193111380131a2550f1666dc776c
Certificate serial: 059677
Authority key identifier: 48:F4:42:2E:A9:B4:19:31:11:38:01:31:A2:55:0F:16:66:DC:77:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPRCLqm0GTEROAExolUPFmbcd2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/40618a-772b-4981-9b2d-a9c285d6ec60/1/1gme0gQXY8p6gLiHnEPnAePDTtI.roa
Signing time: Mon 09 May 2022 05:57:07 +0000
ROA not before: Mon 09 May 2022 05:57:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20845
IP address blocks: 45.155.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 366199 (0x59677)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f4422ea9b4193111380131a2550f1666dc776c
Validity
Not Before: May 9 05:57:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6099ed2041763ca7a80b8879c43e701e3c34ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bf:42:e9:7a:73:12:f6:36:0f:5d:5f:92:72:
8d:ea:87:e9:1a:b5:04:a6:e4:ba:57:a0:03:19:c3:
03:4b:8e:66:67:b5:03:74:3c:d4:24:b7:9c:b8:22:
b2:95:18:77:67:6b:d7:e8:d2:3c:b1:97:a0:61:1d:
dc:12:f3:b6:b5:60:26:c3:9f:ce:b0:62:d6:c2:90:
31:14:3b:ee:bc:86:ae:41:fc:3f:f0:ad:58:0d:29:
18:cb:85:2d:97:de:cb:54:a0:7f:49:79:ac:1c:35:
85:9e:f0:43:5a:c6:70:92:ef:17:85:91:ee:62:0b:
4e:c4:ef:af:8a:5f:6a:b2:66:9b:29:01:af:f7:a6:
40:62:bf:a0:90:98:0c:33:b7:f0:4a:3c:0c:9b:8f:
85:bd:89:21:94:e5:98:33:12:3f:bc:b1:55:10:2e:
45:5f:7f:59:ea:9b:95:0f:7a:17:4c:30:30:41:1a:
d1:52:e2:b8:5f:72:c8:91:20:19:fc:bb:f3:82:d3:
25:78:53:d8:e9:79:a9:16:60:7c:3f:ab:1f:da:76:
62:e5:7a:52:20:8a:d1:f3:91:4a:f4:3e:f7:93:72:
e8:54:cb:3f:ce:cc:06:08:9f:86:f4:f9:0e:25:e2:
03:26:11:01:41:85:bc:d1:63:a5:3c:c0:6e:42:8e:
ea:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:09:9E:D2:04:17:63:CA:7A:80:B8:87:9C:43:E7:01:E3:C3:4E:D2
X509v3 Authority Key Identifier:
keyid:48:F4:42:2E:A9:B4:19:31:11:38:01:31:A2:55:0F:16:66:DC:77:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPRCLqm0GTEROAExolUPFmbcd2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/40618a-772b-4981-9b2d-a9c285d6ec60/1/1gme0gQXY8p6gLiHnEPnAePDTtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/40618a-772b-4981-9b2d-a9c285d6ec60/1/SPRCLqm0GTEROAExolUPFmbcd2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.51.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:ea:d9:53:63:60:e5:11:ad:73:0e:f2:f8:5d:42:c0:32:1b:
b0:a6:25:91:59:4b:db:65:9e:1f:0a:7b:cf:48:5a:d3:62:67:
d3:61:78:d4:a0:e7:b3:e8:d2:c9:28:21:9f:9b:89:fb:55:4c:
20:32:ae:7a:29:f6:1a:8a:a8:41:6d:80:fd:12:76:28:5b:61:
44:31:a0:34:09:2e:8c:a4:26:7f:93:1c:60:79:7f:76:fa:b6:
e3:5b:8c:c8:fd:d7:38:c6:47:0f:8d:2f:c7:d2:0d:70:da:fe:
85:bb:4d:b6:62:35:8f:34:b1:34:af:a3:29:03:f9:75:ed:56:
ab:f9:da:2b:3f:cd:b6:d8:c9:b2:c2:7d:3f:c9:d9:c0:3a:09:
ce:f4:92:0b:09:8d:88:03:1e:1c:bc:b8:92:e5:3b:f1:df:58:
32:a1:ee:7e:17:b6:fc:2d:1e:ba:45:85:0c:fd:84:00:3c:f1:
23:c0:3f:6c:45:e2:45:53:fb:66:77:e9:2b:b3:a9:76:58:20:
40:bb:f9:b8:8d:d0:32:c7:be:87:a1:68:0e:89:d1:f5:89:62:
33:89:b4:f0:ed:25:c0:dc:0a:3c:65:2d:cd:fb:43:65:87:bf:
27:65:57:17:af:2b:72:f9:72:4e:3b:74:e0:11:69:f8:63:d9:
3d:ed:e1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:32 2025 by rpki-client