Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/IHVGHUazqpUrgRuiyoMFBRSEP8w.roa
File: IHVGHUazqpUrgRuiyoMFBRSEP8w.roa (raw, json)
Hash identifier: QgP4cK/SxgpBf3dSN1+0cwjCGhPH681sXcC6sOFQ0PM=
Subject key identifier: 20:75:46:1D:46:B3:AA:95:2B:81:1B:A2:CA:83:05:05:14:84:3F:CC
Certificate issuer: /CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Certificate serial: 066AFBE2
Authority key identifier: 1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/IHVGHUazqpUrgRuiyoMFBRSEP8w.roa
Signing time: Fri 25 Mar 2022 08:18:09 +0000
ROA not before: Fri 25 Mar 2022 08:18:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 45.146.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107674594 (0x66afbe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Validity
Not Before: Mar 25 08:18:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2075461d46b3aa952b811ba2ca83050514843fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:63:ff:98:77:7f:5c:8e:4a:49:35:7c:19:5e:
15:19:cb:91:99:61:b0:be:bb:0e:f2:fb:21:e9:76:
f6:0e:57:32:43:80:e3:51:a2:ea:e8:f9:75:7f:e8:
f5:7f:a2:32:e7:57:60:60:8e:af:39:82:d1:f3:56:
bc:8f:90:be:58:de:41:c5:1a:dd:7d:0e:9c:ee:a6:
fa:2b:51:76:0e:e3:fe:53:f0:90:aa:b4:c0:45:47:
83:b4:85:91:1e:5f:6a:55:0e:d5:12:69:e2:d5:38:
f9:14:a7:ae:ce:a2:d7:75:f7:d4:c4:3a:6a:40:1c:
a7:5a:f9:e4:47:5d:35:6e:4a:4a:81:e5:ef:f9:5a:
4f:c5:8c:a2:59:62:33:06:75:92:51:0b:8c:20:3f:
ef:66:56:1f:59:80:b9:4b:a2:ac:b8:d9:6c:10:d0:
2d:77:5d:7a:57:21:93:9c:e6:be:91:bf:72:b3:7a:
26:91:05:18:aa:52:f8:be:6a:dc:40:8b:34:37:9c:
44:25:70:29:6d:3e:62:7c:88:a4:ad:94:b4:eb:e2:
73:5c:9f:0f:73:fb:95:e3:b3:27:e8:e5:7c:08:a1:
08:89:82:15:06:63:91:95:25:88:4f:e0:6d:3b:bb:
59:73:fe:88:03:41:03:b3:17:12:51:0f:d7:1f:9c:
15:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:75:46:1D:46:B3:AA:95:2B:81:1B:A2:CA:83:05:05:14:84:3F:CC
X509v3 Authority Key Identifier:
keyid:1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/IHVGHUazqpUrgRuiyoMFBRSEP8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/HVrzriH5fsTsddUahaPhYu16ntc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.160.0/24
Signature Algorithm: sha256WithRSAEncryption
14:73:d6:d7:70:d3:e6:15:88:65:58:6e:ff:1f:cc:a6:67:cb:
31:59:cf:f1:df:2f:44:d8:10:cc:83:a5:17:3b:d0:fd:bf:27:
ce:51:2f:85:45:45:ff:64:42:50:19:87:17:57:53:26:f1:b2:
e4:f5:42:9e:d9:3c:e9:31:b5:cc:fe:73:4e:16:70:2c:a8:fb:
89:90:87:30:68:1a:fc:fb:3d:db:c4:7b:19:f5:5d:c4:b9:e8:
f9:a9:53:f6:66:b6:f8:77:b8:d1:67:c1:76:6f:3f:39:9b:ee:
1c:4b:34:49:22:a2:7e:31:f9:a2:c1:07:7f:30:9f:d7:aa:74:
c9:2c:0d:c7:c9:92:64:63:77:63:f2:91:d6:7d:c1:a0:40:74:
e6:ca:5e:e3:2a:ef:ef:e2:ed:65:bb:40:9d:18:02:75:fd:32:
02:0b:4c:86:35:c2:4d:16:99:7a:eb:f2:82:12:b3:7e:e6:e2:
c5:e0:ff:19:40:01:d1:87:4c:98:e3:cb:fa:df:1e:ea:22:3d:
9e:23:3e:c7:9e:80:c5:d6:a5:20:a5:56:29:22:45:27:26:3e:
87:93:5e:04:93:f2:c9:93:59:96:24:c5:e0:14:81:2e:10:56:
ab:e1:c0:73:8c:56:cd:63:d4:9f:b0:28:d6:97:3d:1e:98:07:
70:22:68:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:09 2025 by rpki-client