Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/PbDBPICyPmB7v4oGZ1_ax6RIBs4.roa
File: PbDBPICyPmB7v4oGZ1_ax6RIBs4.roa (raw, json)
Hash identifier: nTGc9C6A2wEdKuUIkV6ISeQOk106xzhY50AJ1uvAZ9Q=
Subject key identifier: 3D:B0:C1:3C:80:B2:3E:60:7B:BF:8A:06:67:5F:DA:C7:A4:48:06:CE
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 0184E9C9173E500883F5CCBE41D2F94DEEF9
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/PbDBPICyPmB7v4oGZ1_ax6RIBs4.roa
Signing time: Tue 06 Dec 2022 23:33:00 +0000
ROA not before: Tue 06 Dec 2022 23:33:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 45.8.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e9:c9:17:3e:50:08:83:f5:cc:be:41:d2:f9:4d:ee:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Dec 6 23:33:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3db0c13c80b23e607bbf8a06675fdac7a44806ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:90:09:fa:5a:d9:3f:30:87:25:a0:01:9b:b9:
c9:b0:c0:70:b5:3c:36:d5:8e:f5:41:66:6b:53:7f:
d0:45:a5:6b:00:1b:3f:8e:09:f7:7a:c8:f9:14:a1:
81:46:75:4c:96:2d:ba:52:9d:fa:33:98:3b:4f:1c:
61:eb:00:37:97:ea:d2:80:2d:a0:da:9c:46:e1:b6:
9a:79:b3:44:8c:de:1f:71:cd:55:47:ba:65:68:d2:
e2:ce:a6:04:56:7e:fe:5c:77:14:99:48:4b:1d:b3:
4f:db:be:3c:07:fc:02:c3:b4:3c:c2:0f:0a:a5:de:
6c:98:63:1a:a8:f8:ac:48:8b:87:d4:c6:c6:38:0a:
ed:4d:20:9a:bc:6b:89:7e:41:e1:bc:54:0f:b6:9f:
14:a4:02:84:a8:34:dd:a3:c5:8c:9b:0a:1e:73:15:
26:f3:e7:78:d3:ed:a1:a7:24:93:12:0b:2f:6b:f8:
d9:04:43:86:1e:83:de:29:df:ed:e6:ae:df:69:ab:
85:26:72:1b:7f:af:33:ac:58:b5:83:f2:41:61:1b:
df:26:87:7e:40:ae:0f:40:5f:dd:82:17:a1:46:77:
1b:bd:57:0b:1d:84:e2:18:a8:fd:58:c1:e5:50:34:
94:f6:ed:cc:f8:de:ae:d0:2e:f3:05:7e:25:6a:19:
a4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B0:C1:3C:80:B2:3E:60:7B:BF:8A:06:67:5F:DA:C7:A4:48:06:CE
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/PbDBPICyPmB7v4oGZ1_ax6RIBs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.219.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:75:6b:6d:bc:c4:54:ee:b2:dc:12:b3:25:69:24:e4:e7:f8:
b0:eb:e3:ce:b8:71:44:62:44:56:01:47:d3:2c:f4:1d:41:5b:
95:d5:26:95:ab:0f:ba:59:bf:a1:85:85:fc:d7:35:39:a9:ec:
69:e8:6f:5f:7d:f4:9f:a9:43:a2:d0:fc:61:82:6b:fe:31:44:
83:bd:36:1a:75:f5:f3:0a:b8:eb:e9:c8:98:c5:20:24:9e:d5:
6e:cf:3d:ab:0c:19:46:5c:ff:f9:45:6f:e3:f8:5e:55:f6:a4:
2f:a9:c1:1c:c2:c1:a1:5e:a2:72:c5:ab:17:67:ac:1d:65:46:
0e:e5:b3:65:41:5d:d6:51:5c:c9:37:05:17:3f:90:c2:cc:8d:
7b:10:35:00:3a:1d:6b:c4:1a:d5:7d:77:0f:59:4a:90:88:65:
91:7c:d8:16:7b:77:b6:f4:31:92:d0:e8:d1:e0:73:f4:c9:5a:
51:90:5c:13:5a:a5:8d:c8:d7:d5:25:4a:79:64:53:ea:f7:70:
86:be:7e:b1:01:48:4b:8b:e9:fc:3d:a0:f4:89:1c:92:f4:87:
40:32:82:d9:1b:b5:92:6e:60:79:05:96:62:7b:ec:93:88:f2:
84:7a:0d:6d:c0:f6:a6:49:c3:cf:a3:94:6f:40:23:72:d3:59:
fb:00:32:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:24 2025 by rpki-client