Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/OLk126Iy1nui4-biVqVoW_tWqyg.roa
File: OLk126Iy1nui4-biVqVoW_tWqyg.roa (raw, json)
Hash identifier: pOfTIqIXt0wceagOO8XMetecisZ1SOOZaniHKustT/g=
Subject key identifier: 38:B9:35:DB:A2:32:D6:7B:A2:E3:E6:E2:56:A5:68:5B:FB:56:AB:28
Certificate issuer: /CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Certificate serial: 01856E5D63CBF606E6838EA13E241BF12306
Authority key identifier: 1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/OLk126Iy1nui4-biVqVoW_tWqyg.roa
Signing time: Sun 01 Jan 2023 17:24:52 +0000
ROA not before: Sun 01 Jan 2023 17:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212609
IP address blocks: 45.146.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:63:cb:f6:06:e6:83:8e:a1:3e:24:1b:f1:23:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Validity
Not Before: Jan 1 17:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38b935dba232d67ba2e3e6e256a5685bfb56ab28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:19:02:eb:87:f9:20:51:27:51:da:25:6d:16:
a2:e3:2b:86:52:58:b4:9f:8b:7b:03:40:c4:8e:c0:
19:17:af:e1:47:33:f6:1e:a3:32:9a:16:94:6b:68:
4c:bb:b6:7d:e0:2e:0c:11:ff:1d:57:21:eb:28:3e:
ab:a0:46:17:e2:a3:47:51:94:e9:69:f2:b4:40:92:
76:f7:36:69:89:80:4e:46:d8:2b:c6:31:cc:66:d2:
09:fe:67:de:8b:f8:81:93:39:b9:4d:f4:93:f2:2d:
48:1a:79:8d:83:7f:ef:48:80:96:8b:fb:50:e0:55:
30:c7:59:ad:4c:a5:66:5b:22:64:bc:b2:0c:82:39:
86:8e:3a:80:ef:e3:d2:f8:3c:f3:ee:fa:3e:da:81:
42:5d:2e:6a:f6:d5:2d:7b:05:78:b6:ba:d6:30:0a:
27:78:16:c5:d5:8e:51:f6:2a:ec:ee:ce:36:e1:23:
ae:6d:74:86:3b:0b:a6:8c:b5:47:ce:91:9b:ab:07:
56:e7:1b:e8:21:6a:cd:78:bc:60:4a:3d:ae:3a:1b:
eb:1e:44:e5:af:94:57:ca:e5:78:d8:6d:c2:d0:fa:
27:16:dc:49:2e:36:13:2c:da:ec:ba:e1:73:cb:67:
80:ea:1d:3e:f4:1e:48:4d:f5:cf:df:d5:43:92:e4:
47:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B9:35:DB:A2:32:D6:7B:A2:E3:E6:E2:56:A5:68:5B:FB:56:AB:28
X509v3 Authority Key Identifier:
keyid:1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/OLk126Iy1nui4-biVqVoW_tWqyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/HVrzriH5fsTsddUahaPhYu16ntc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.160.0/24
Signature Algorithm: sha256WithRSAEncryption
08:1a:d2:5a:59:ad:1d:05:cb:04:57:2f:ba:7d:d3:be:4b:33:
00:d2:85:11:d5:3c:30:cd:34:bb:0d:44:5f:6e:24:15:02:22:
19:1a:5d:3e:0f:57:b6:c2:62:37:3c:11:59:f0:a3:c3:b3:7a:
be:60:90:31:a7:83:26:cf:13:52:a0:fe:bd:06:8c:3d:44:ce:
b4:ef:24:e3:55:aa:21:ec:6e:58:c3:cd:f3:86:6a:08:fb:e7:
53:da:71:d3:72:08:31:fe:d1:3e:fa:e8:e1:fa:a9:e6:99:7a:
ec:52:54:52:cc:bc:92:c2:4c:7f:49:55:9c:1e:8e:ab:d0:4a:
a8:69:f1:37:d8:91:51:6e:b2:0d:32:6b:f1:51:3a:db:be:1e:
4c:b6:6b:3e:6d:10:9e:02:fc:ce:38:30:30:50:72:c5:e7:48:
8e:ca:d2:f0:2c:a8:55:70:1e:d7:4a:9c:b5:c4:2c:fb:d2:91:
c0:90:14:bc:a2:f1:41:bc:44:25:0e:b9:40:2a:28:47:6c:09:
4c:a0:1a:9c:84:9e:30:6e:f5:e1:ce:fa:ec:58:d5:05:d9:a5:
5f:e2:63:60:8e:c5:0f:ca:86:89:9a:9a:34:20:a1:80:06:42:
3f:eb:3f:f5:e0:f7:2a:50:8b:fd:45:08:d2:f1:3f:33:45:7b:
06:81:8c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:13 2025 by rpki-client