Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/H2v2h2AXh7CflmYMuVQU-Rd87lU.roa
File: H2v2h2AXh7CflmYMuVQU-Rd87lU.roa (raw, json)
Hash identifier: P7veP49Ryq6mkniJkzT9QofGIp2tNmfUiKy5YiJffVs=
Subject key identifier: 1F:6B:F6:87:60:17:87:B0:9F:96:66:0C:B9:54:14:F9:17:7C:EE:55
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 0183D251D6FAAE999C4624A797E1ED1D58B0
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/H2v2h2AXh7CflmYMuVQU-Rd87lU.roa
Signing time: Thu 13 Oct 2022 17:08:42 +0000
ROA not before: Thu 13 Oct 2022 17:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49805
IP address blocks: 45.95.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d2:51:d6:fa:ae:99:9c:46:24:a7:97:e1:ed:1d:58:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Oct 13 17:08:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f6bf687601787b09f96660cb95414f9177cee55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:e8:9b:24:7f:df:f7:c9:73:f2:50:ec:db:
35:89:e1:04:2d:75:18:1c:c8:93:28:c1:e6:bf:b3:
c0:9f:72:c5:63:aa:d2:2e:a0:f7:26:c3:d6:3c:ab:
29:ce:46:e1:25:4a:c8:dd:84:3b:f5:fd:2a:93:7e:
05:44:bd:1d:0c:22:50:10:52:b9:7f:6f:c2:de:d8:
ed:d4:7e:db:c3:a6:4e:a3:1d:0f:fc:26:e5:28:d0:
eb:5c:00:26:05:16:dc:57:6f:db:56:0c:85:1d:64:
f5:4b:7a:84:5c:15:5b:fa:e9:d1:3b:51:6c:47:63:
59:82:31:7a:24:46:a0:42:26:75:f2:5c:84:df:e1:
87:cd:95:10:68:76:82:90:0a:e1:7f:90:ac:2f:af:
e5:fe:a1:6a:57:b7:da:88:6d:80:28:66:33:ed:a2:
f2:09:d8:af:c0:81:cc:3c:7e:01:d4:0a:d4:b7:f5:
50:87:a0:3b:1a:75:54:b2:46:bf:8c:0e:87:8b:3c:
59:d5:c8:41:40:57:c9:57:8e:06:ff:2b:e0:7f:50:
08:46:49:9c:13:e8:27:da:ab:2e:48:e0:cf:37:26:
de:e9:bf:76:77:03:7f:3a:00:d5:a2:43:a6:17:37:
cb:40:c4:2c:21:52:d8:88:5a:a9:92:16:bf:1e:84:
da:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6B:F6:87:60:17:87:B0:9F:96:66:0C:B9:54:14:F9:17:7C:EE:55
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/H2v2h2AXh7CflmYMuVQU-Rd87lU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.214.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:6b:1b:dc:f6:9c:93:98:e8:7d:41:3c:38:42:78:2b:6f:0a:
6a:be:01:b1:7b:e4:14:d4:8d:d7:71:43:7d:94:52:7c:86:2c:
0f:dd:66:32:81:87:11:98:51:1e:17:0f:a9:85:ce:01:28:3d:
28:fd:e0:e0:f6:5b:e1:59:1d:41:99:54:95:20:c1:7a:ec:70:
9e:02:ac:65:3f:0d:cd:31:b9:d5:dc:11:9b:68:92:9d:fb:c5:
d6:03:59:12:32:ca:42:9e:17:82:43:b0:1d:84:19:76:1e:48:
9e:e1:03:77:81:4e:3f:83:07:6d:85:61:91:f2:6c:e6:64:42:
a2:09:b9:3b:4e:04:28:b7:83:3a:4b:9d:96:27:3e:4d:be:65:
42:5d:f9:29:7b:44:ee:73:69:50:06:18:30:33:e7:96:f2:9f:
a0:61:0b:15:cd:80:ad:9e:63:3a:c2:48:f3:25:3e:91:de:37:
62:52:25:17:06:56:b5:60:f8:77:96:3a:ac:81:61:8e:fb:42:
88:ba:6a:79:2c:f3:7c:a9:12:2d:74:1f:6e:53:4f:1e:cb:e0:
47:c1:5a:73:b0:1d:2c:d8:e3:05:43:7b:f4:31:cf:66:b0:97:
0d:6a:c7:3d:68:e6:dd:b1:c8:2b:15:5c:e3:31:46:a1:23:5f:
ea:cf:dc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:54 2025 by rpki-client