Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/ClpZUWKVsWyEPGl7si4v3AQqs34.roa
File: ClpZUWKVsWyEPGl7si4v3AQqs34.roa (raw, json)
Hash identifier: spBOwTc2wP9jg4AItAKXi+q6QhEx9USiAUnbwPu7xZU=
Subject key identifier: 0A:5A:59:51:62:95:B1:6C:84:3C:69:7B:B2:2E:2F:DC:04:2A:B3:7E
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 0183D251D8317523D705BAEC8336E0F4B39E
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/ClpZUWKVsWyEPGl7si4v3AQqs34.roa
Signing time: Thu 13 Oct 2022 17:08:42 +0000
ROA not before: Thu 13 Oct 2022 17:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 45.95.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d2:51:d8:31:75:23:d7:05:ba:ec:83:36:e0:f4:b3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Oct 13 17:08:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a5a59516295b16c843c697bb22e2fdc042ab37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:55:21:e6:54:fd:1e:a2:7a:b2:3f:01:ff:6c:
be:95:48:8e:b5:55:e5:08:80:ec:d1:d6:f4:c3:62:
98:0c:ab:5b:0a:fe:7c:69:48:9b:93:04:2a:5b:e1:
1f:7d:99:c2:8c:aa:18:cf:d2:27:0c:1d:7b:c3:df:
b4:d4:83:69:6a:36:0c:4e:66:de:5e:13:f9:44:55:
4d:29:d3:da:80:6c:cf:40:b8:82:85:48:33:97:80:
06:63:a3:1b:bc:44:2e:09:8f:80:d7:9a:ac:6e:a3:
c2:67:33:b7:58:11:d0:a2:3a:e5:dd:da:1a:b1:3c:
41:1f:2c:5a:d2:45:ac:75:27:79:84:a1:7e:3d:af:
c5:36:7e:66:e8:07:e8:51:18:a7:b9:0e:13:ea:3f:
39:96:a0:e1:aa:ed:4b:8f:f5:58:89:eb:d7:3e:40:
89:eb:e0:90:d9:f9:56:92:29:cb:17:25:e0:e2:5e:
0a:3a:ba:bd:60:ab:5f:44:54:90:80:fb:4b:18:2f:
5c:a8:3d:65:b1:21:15:27:65:8e:ad:3e:82:d0:78:
9c:6a:f5:38:32:d1:2e:e7:ca:67:16:eb:9e:ca:59:
73:57:37:19:ee:45:ff:d0:09:42:07:3d:6a:38:cd:
1c:32:53:f3:dc:07:61:6a:ca:fe:2f:7a:5f:a0:c8:
0d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5A:59:51:62:95:B1:6C:84:3C:69:7B:B2:2E:2F:DC:04:2A:B3:7E
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/ClpZUWKVsWyEPGl7si4v3AQqs34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.212.0/24
Signature Algorithm: sha256WithRSAEncryption
94:bc:41:36:6a:f5:4a:8d:8a:aa:1c:74:52:17:b1:f5:de:b1:
65:b2:f5:ec:44:44:23:f4:fe:07:22:e8:25:1b:a4:30:28:68:
6c:e6:68:bc:a2:e7:62:5d:67:71:ed:61:34:a5:95:7d:e2:38:
4a:c9:bf:56:eb:89:11:3c:fa:58:03:50:2c:0c:5e:af:24:8a:
64:be:a4:ec:48:4b:26:c5:d0:db:34:70:84:2b:8a:82:e7:47:
61:a5:10:40:03:86:fe:d8:b3:49:65:56:68:8c:3b:00:24:89:
e8:04:bb:8b:20:27:04:2b:13:9a:3a:0d:0f:e4:07:45:57:88:
7c:61:53:09:99:c1:c0:48:01:b8:b4:80:fe:62:62:29:e8:16:
de:ec:f2:8b:90:56:e9:3f:9f:b2:33:b2:a3:4f:12:86:c2:d7:
28:60:28:a1:ce:a5:d7:c2:f7:d8:6c:d9:6c:5a:d0:42:3e:86:
a1:d3:fc:ce:04:3b:25:e4:30:a8:07:8f:8b:3a:c7:41:68:2d:
7f:1f:cb:ae:f4:7f:66:83:15:f3:be:26:ba:a5:db:68:fc:ee:
f6:85:ab:08:c2:90:45:08:2e:d6:5d:97:84:25:fb:0b:fe:ac:
ee:32:67:b9:f2:6a:8c:0a:5c:d5:d4:c4:43:35:9c:f6:9d:02:
27:b8:81:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:04 2025 by rpki-client