Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/8_8bFdFhS0cuRlf8wsb8wO1qM_I.roa
File: 8_8bFdFhS0cuRlf8wsb8wO1qM_I.roa (raw, json)
Hash identifier: hprCbgZxqrcfBvidIQSr2K8BuezVu8fPEaFZwJwF7do=
Subject key identifier: F3:FF:1B:15:D1:61:4B:47:2E:46:57:FC:C2:C6:FC:C0:ED:6A:33:F2
Certificate issuer: /CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Certificate serial: 01856E5D6301462326F7E6FC37B72CE49EA9
Authority key identifier: 1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/8_8bFdFhS0cuRlf8wsb8wO1qM_I.roa
Signing time: Sun 01 Jan 2023 17:24:51 +0000
ROA not before: Sun 01 Jan 2023 17:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 45.146.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:63:01:46:23:26:f7:e6:fc:37:b7:2c:e4:9e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Validity
Not Before: Jan 1 17:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3ff1b15d1614b472e4657fcc2c6fcc0ed6a33f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1c:f4:33:47:51:4b:80:03:9c:96:d0:7b:ef:
0f:92:8f:5b:15:43:81:0a:6a:85:41:0f:aa:ac:cf:
88:74:ad:cf:b7:82:23:f8:87:66:3e:47:6c:70:0d:
d9:bf:9d:e1:f1:38:05:17:70:81:20:be:fb:1e:61:
54:7a:64:0c:c7:19:23:09:94:58:21:c9:58:c8:81:
07:b6:f0:c1:c9:54:be:81:76:a7:48:2e:53:5c:0c:
65:17:43:40:a1:e5:9d:48:78:51:d1:34:d0:41:79:
18:56:7f:71:dc:27:03:54:c2:e8:ea:29:cb:78:aa:
d8:4c:c9:a2:c2:fe:18:a3:b0:e1:e0:95:fe:ca:01:
6b:c2:21:af:06:a3:05:e3:a6:1e:b8:b9:c5:a3:fd:
46:08:e4:86:3b:33:f6:92:07:56:22:9a:98:94:0e:
f9:a5:17:e8:a2:cc:f8:76:68:bb:f2:74:30:66:fc:
32:49:26:ed:3c:96:f8:10:bd:da:ef:03:06:2e:91:
d4:dc:66:0e:20:f3:1b:77:f2:98:0c:fa:1c:58:8d:
48:ab:7c:77:46:0a:d4:bc:c6:ef:55:26:f4:bc:5f:
73:f3:71:7a:b9:c7:22:c4:00:a1:0c:2f:28:86:1a:
85:42:0c:0e:25:b0:cc:0c:09:63:c0:e2:cf:83:87:
c9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FF:1B:15:D1:61:4B:47:2E:46:57:FC:C2:C6:FC:C0:ED:6A:33:F2
X509v3 Authority Key Identifier:
keyid:1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/8_8bFdFhS0cuRlf8wsb8wO1qM_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/HVrzriH5fsTsddUahaPhYu16ntc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.161.0/24
Signature Algorithm: sha256WithRSAEncryption
02:77:04:6f:52:82:ab:1e:62:df:d3:e2:44:3a:eb:80:94:6c:
46:30:97:6c:35:57:4d:78:30:25:8a:71:1e:08:62:68:9c:cb:
0f:c4:2c:d3:2b:35:d1:3b:fb:5b:f1:71:c9:83:aa:00:ff:f3:
b7:bb:d2:03:97:e2:c5:f9:88:57:05:78:5a:58:a3:d8:1c:19:
04:25:91:a4:7f:4f:f4:23:49:d6:d8:98:7e:72:90:bf:e9:41:
50:64:08:f9:a2:e9:0d:34:08:06:88:f1:7e:ee:87:93:73:76:
c8:97:59:3a:cb:a1:57:d0:59:b2:fc:ce:fe:2a:99:51:50:8c:
33:66:4d:ad:84:73:42:fa:0f:54:59:bb:d9:1c:38:da:e9:d7:
a2:9c:22:6c:dd:e9:b2:75:86:03:74:2a:33:b5:3e:4c:c1:1b:
9f:9d:b5:93:d0:43:40:e7:6c:51:15:7c:d8:f9:65:79:a7:ab:
1a:59:c0:65:e9:bb:54:39:88:f3:14:f8:7b:0e:38:44:0f:8b:
ca:ad:d9:4e:f3:e5:21:c4:45:1f:7a:9d:44:c7:2a:ec:54:1f:
0c:e1:e5:70:36:79:45:bb:b0:aa:3c:14:b9:3a:8f:53:1d:03:
a2:c2:3c:c5:f4:fb:b9:4c:4a:ac:66:e8:c5:52:4c:51:36:48:
10:00:8a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:14 2025 by rpki-client