Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/0ZdAXAgHANYVWnFSWUgUkTt3TYw.roa
File: 0ZdAXAgHANYVWnFSWUgUkTt3TYw.roa (raw, json)
Hash identifier: CxFndlwSO1306Oty/iJntNhl+Le7EFzWDWBRlviDOoQ=
Subject key identifier: D1:97:40:5C:08:07:00:D6:15:5A:71:52:59:48:14:91:3B:77:4D:8C
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 01832F0E337718088A45736905E0E1E5B69E
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/0ZdAXAgHANYVWnFSWUgUkTt3TYw.roa
Signing time: Mon 12 Sep 2022 00:16:43 +0000
ROA not before: Mon 12 Sep 2022 00:16:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49805
IP address blocks: 45.95.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:2f:0e:33:77:18:08:8a:45:73:69:05:e0:e1:e5:b6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Sep 12 00:16:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d197405c080700d6155a7152594814913b774d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9b:1f:c2:75:e5:f7:3f:a3:1e:b5:a7:48:94:
37:c4:30:ec:ff:d1:37:bc:a3:61:80:2f:0d:fc:92:
25:ef:3a:93:cf:a0:fd:79:ac:a5:51:41:10:c5:ed:
96:43:c8:6e:66:99:b0:12:7a:1c:b0:eb:44:da:d3:
53:d8:35:3c:af:fb:f4:32:61:03:11:24:ea:61:f1:
71:d6:4a:1d:17:09:ac:c0:e2:73:35:54:a4:4a:4a:
2a:db:78:44:0b:7d:43:dc:8c:6d:77:ab:69:33:c6:
d7:4d:b8:94:0d:8a:ca:f1:5c:c0:66:9b:89:a3:47:
3a:59:15:e0:18:ba:df:38:60:18:86:95:bf:91:59:
6b:14:11:b2:da:92:15:ca:89:21:08:06:88:05:6a:
0d:9b:ff:29:60:87:79:22:8b:93:b9:a2:65:48:61:
3f:fb:4d:06:2b:3b:61:3a:84:59:ad:64:0b:d7:89:
85:1c:db:75:0b:28:44:78:6e:1f:95:eb:4f:32:6f:
c3:cd:55:69:dc:db:10:e1:c4:3c:cf:d8:28:ff:25:
47:6b:b1:1e:9b:51:5b:f8:5b:9c:d6:eb:8c:96:79:
10:db:aa:0e:81:35:00:c6:8c:8d:e6:8a:69:f7:bf:
63:4e:e6:4b:1f:27:50:37:20:6f:30:68:5a:b8:1c:
40:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:97:40:5C:08:07:00:D6:15:5A:71:52:59:48:14:91:3B:77:4D:8C
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/0ZdAXAgHANYVWnFSWUgUkTt3TYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.215.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:81:83:aa:e5:7b:ef:d3:9d:dd:98:41:1e:6c:94:97:3a:c5:
27:81:00:71:7a:37:de:de:28:76:d5:bf:9e:8f:7e:e5:75:76:
62:0c:df:58:37:e3:6f:ac:58:7e:f9:88:4f:5a:63:7b:45:dc:
e2:44:d2:41:1f:09:ca:52:f4:9e:62:29:bf:ef:ee:56:94:82:
41:76:c1:cd:e7:6b:e0:3d:c8:c6:31:19:f0:f7:57:70:ac:36:
71:af:a8:e6:49:71:d5:50:03:6a:c8:c3:3a:9c:00:28:51:fd:
29:31:b4:1d:e2:98:0e:b8:9e:6e:22:15:16:db:cb:3f:b1:1f:
ff:b7:41:9f:f6:5e:63:4c:d8:fb:b2:7c:47:56:ca:19:ad:f4:
18:01:47:6a:da:14:f0:c4:a0:83:8a:5e:1b:41:9d:38:62:64:
fc:a7:84:a1:fb:42:93:c6:47:4a:7a:5a:54:bd:30:3d:63:8d:
98:30:e8:79:b7:e3:8f:91:7a:8e:29:f4:4c:06:f8:11:fb:42:
fb:8b:7a:56:89:cb:bc:23:ed:4f:6d:f6:2a:15:f9:53:cf:2e:
43:86:ba:5e:60:13:3e:f3:86:3e:0f:ad:fb:ce:c1:46:c5:04:
5e:13:fc:0f:38:7d:d8:39:be:ee:67:ba:a8:80:8f:87:31:94:
c5:8c:c0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:28 2025 by rpki-client