Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Bh54epAGnsSsi5a4qMpqQUUqOO4.roa
File: Bh54epAGnsSsi5a4qMpqQUUqOO4.roa (raw, json)
Hash identifier: A/C6sposvc+iFjicVTmpl1y2HIq+yojsh+xRqn/3j/c=
Subject key identifier: 06:1E:78:7A:90:06:9E:C4:AC:8B:96:B8:A8:CA:6A:41:45:2A:38:EE
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 01831637DE53619D24A928BCDDD9E786E0DC
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Bh54epAGnsSsi5a4qMpqQUUqOO4.roa
Signing time: Wed 07 Sep 2022 04:31:43 +0000
ROA not before: Wed 07 Sep 2022 04:31:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 45.95.212.0/24 maxlen: 24
45.95.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:16:37:de:53:61:9d:24:a9:28:bc:dd:d9:e7:86:e0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Sep 7 04:31:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=061e787a90069ec4ac8b96b8a8ca6a41452a38ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:20:8a:5a:cf:99:e0:03:f6:a8:19:b1:dd:76:
37:55:2e:70:dd:8e:b1:3a:29:04:38:c5:50:b1:fd:
20:dc:53:73:7a:1a:c7:7b:b7:85:02:b2:a4:e3:e2:
77:7d:db:a8:5d:c2:36:1d:26:b7:c4:e1:ab:a7:67:
18:9b:79:c2:04:f9:7d:a9:ec:c3:6a:33:9b:30:60:
bf:d0:aa:f3:81:ef:9d:59:d2:02:17:c1:c6:e2:97:
0c:e7:6c:01:60:9a:99:4a:1c:78:fd:89:f7:1d:61:
97:14:8e:f7:29:68:1e:c5:4c:71:e2:1b:99:c4:82:
83:f4:18:c5:4e:4f:2b:41:62:c1:b6:2a:23:9e:e5:
6b:10:92:37:a0:e1:1c:fc:74:8c:58:45:18:63:5e:
2d:b4:0a:e0:72:6b:07:02:db:3c:00:71:d7:66:11:
d9:e2:03:61:2a:e7:e7:b3:66:d0:3e:00:01:b9:a7:
64:b5:d4:5a:8f:06:02:85:11:c1:dd:ca:54:8b:90:
b1:fb:df:15:d8:42:49:90:31:e2:9b:33:ab:32:72:
13:d8:99:38:6e:df:ad:35:3a:b9:67:57:7b:20:4d:
b2:89:1f:c1:f4:db:b2:1d:a0:89:ac:07:50:cb:36:
23:6e:36:05:25:9c:94:1c:f1:39:88:a6:ea:82:06:
78:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1E:78:7A:90:06:9E:C4:AC:8B:96:B8:A8:CA:6A:41:45:2A:38:EE
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Bh54epAGnsSsi5a4qMpqQUUqOO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.212.0/24
45.95.214.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:eb:7f:60:89:63:ea:f3:0a:a4:ac:28:42:25:dd:72:22:2b:
59:06:12:dd:9e:69:57:26:44:da:c9:62:4a:99:88:44:03:4a:
8b:bf:db:d2:38:f9:84:15:9b:98:2d:d5:9a:0a:9d:a5:37:4a:
35:4e:70:97:fd:63:b8:97:1f:d5:e8:fe:39:ca:94:92:8b:4b:
a0:fd:5e:78:9e:de:aa:f4:51:01:4d:9d:ff:16:12:e1:cb:59:
be:07:5d:3e:72:0b:cc:d5:a7:ff:9b:1d:2e:ee:be:77:59:9a:
db:b5:1a:9c:eb:a1:6e:56:5e:15:6e:97:aa:db:a5:cd:e5:69:
25:b0:e1:5f:2d:51:4f:99:04:43:fc:3c:98:62:b0:25:90:c6:
7b:8e:ea:77:ce:41:2d:b1:07:0b:83:13:de:03:0a:4e:22:99:
c5:54:76:f5:c7:c3:d7:22:97:c8:9a:f9:09:a2:cc:59:27:72:
87:0c:1c:59:8c:19:3a:17:af:13:e7:a4:d0:f3:c2:13:a0:37:
40:22:95:25:85:9b:ee:c1:58:ce:04:7a:a5:ce:ed:c4:d0:91:
e0:88:29:6f:dd:71:1e:dd:38:49:68:48:5f:08:e9:5a:55:d9:
8f:07:0f:dc:e6:81:30:b7:3a:7e:84:38:e8:1a:39:e5:2f:44:
00:37:6d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:01 2025 by rpki-client