Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/3tOLTO6_JH_NFFvfrEKMEjC_4AQ.roa
File: 3tOLTO6_JH_NFFvfrEKMEjC_4AQ.roa (raw, json)
Hash identifier: xso9VnnOS6b4iMvUH0pXXKJa354je2AQ/DYmRdlXNJ8=
Subject key identifier: DE:D3:8B:4C:EE:BF:24:7F:CD:14:5B:DF:AC:42:8C:12:30:BF:E0:04
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 05D1BD67
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/3tOLTO6_JH_NFFvfrEKMEjC_4AQ.roa
Signing time: Mon 04 Jul 2022 17:38:25 +0000
ROA not before: Mon 04 Jul 2022 17:38:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 45.95.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97631591 (0x5d1bd67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jul 4 17:38:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ded38b4ceebf247fcd145bdfac428c1230bfe004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a7:72:ef:af:9f:ff:7c:3e:c7:26:60:79:4c:
51:76:b2:d5:0f:51:8b:ba:da:1c:92:55:91:d8:10:
9b:6a:66:e3:ef:6f:71:c5:22:e9:ae:4c:e1:47:8a:
6c:5b:af:bd:38:f6:7c:f4:17:da:88:12:ee:14:d1:
b9:93:36:8a:2d:65:c9:3b:7c:d6:74:e2:be:d0:f2:
ea:42:bf:2a:d3:8e:1a:3d:d8:83:07:ca:b8:88:e1:
51:14:72:f5:dc:28:ec:a7:b7:aa:26:3f:7c:fb:7b:
ac:72:5b:fe:dd:00:60:70:80:6a:31:f5:d8:7b:b1:
eb:2d:99:9a:cc:79:aa:87:e3:2b:09:aa:27:36:54:
83:d0:86:86:9d:04:f6:e1:ff:71:50:57:b9:b6:48:
1a:43:09:6f:b2:1a:fc:37:3b:dc:89:bb:9e:ad:18:
93:9e:a9:da:f3:d7:86:06:e3:9e:30:45:c7:10:4f:
97:c1:d5:10:c5:41:22:75:68:c5:ec:77:9f:56:1f:
17:99:5f:a9:7e:7c:ff:4e:30:46:08:da:ab:46:7e:
19:44:0e:bb:41:47:48:57:7f:0e:cb:14:be:8c:a3:
2d:2f:ec:e5:85:9d:b6:5c:81:c3:8e:51:1a:97:3f:
59:e1:a2:98:bd:17:fb:5b:d8:aa:99:94:a8:83:54:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D3:8B:4C:EE:BF:24:7F:CD:14:5B:DF:AC:42:8C:12:30:BF:E0:04
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/3tOLTO6_JH_NFFvfrEKMEjC_4AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.215.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:6f:42:3f:12:7a:73:a5:ac:16:06:29:8e:6b:25:dc:9c:a0:
9e:a6:3c:f1:89:22:be:b1:a1:30:02:ef:e5:3c:1c:9d:65:66:
c8:88:ba:19:bf:e9:8e:48:13:c8:54:6e:9b:0e:84:0f:df:5a:
82:76:0f:9d:ae:c6:7f:bc:08:f3:06:24:8b:a1:c0:34:90:df:
e0:57:c1:2e:37:2c:c5:7e:c7:ed:99:a2:ce:05:91:c6:3a:14:
ac:2f:58:76:8d:56:23:4b:7e:18:75:c2:74:8b:8a:0a:30:96:
61:96:46:15:65:8a:ce:a8:ba:ce:bb:74:3b:b8:9c:37:5d:4e:
45:3b:b6:a3:f5:cc:21:b6:5b:87:23:9a:d3:ca:50:d0:60:93:
b3:58:dc:18:75:6e:eb:78:33:1a:84:12:7c:9b:1a:80:3b:29:
bc:2e:30:48:aa:85:95:91:fb:51:f8:26:3d:13:ee:fd:73:18:
70:cf:51:ab:0b:d6:e2:b9:68:a4:b1:b3:07:36:e5:e4:8f:6d:
42:7c:6b:ba:44:44:32:4d:5e:52:5b:75:ba:40:5e:98:28:31:
99:e8:2b:29:39:f4:dd:0f:a8:17:18:1a:22:b0:48:8d:e4:9a:
3d:2c:a4:9a:ab:c5:a0:6c:df:45:85:17:a9:a2:e2:ec:2c:6c:
d0:76:4a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:52 2025 by rpki-client