Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/0eLJGEhDuv0PjJ9yYM8yq5iPMn8.roa
File: 0eLJGEhDuv0PjJ9yYM8yq5iPMn8.roa (raw, json)
Hash identifier: ssAEv57fQUE0SaMV19ldsXkg1/F7c3rZcFLxVKjReCM=
Subject key identifier: D1:E2:C9:18:48:43:BA:FD:0F:8C:9F:72:60:CF:32:AB:98:8F:32:7F
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018C18D4B1EF48EACC82DEABD20D0232BEB9
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/0eLJGEhDuv0PjJ9yYM8yq5iPMn8.roa
Signing time: Wed 29 Nov 2023 02:07:21 +0000
ROA not before: Wed 29 Nov 2023 02:07:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211376
IP address blocks: 45.131.1.114/32 maxlen: 32
194.116.228.174/32 maxlen: 32
2a0f:b700::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:18:d4:b1:ef:48:ea:cc:82:de:ab:d2:0d:02:32:be:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Nov 29 02:07:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1e2c9184843bafd0f8c9f7260cf32ab988f327f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:49:4f:e4:da:e6:73:45:63:ae:2f:5d:19:0b:
80:0d:32:36:f5:62:c8:0b:a6:54:28:ef:0f:23:38:
75:55:16:6a:43:fc:fe:97:39:17:f5:37:34:53:63:
1b:86:6f:97:c6:05:57:4f:59:44:2d:6e:65:a6:87:
d3:85:43:1d:55:9a:c7:b1:bc:75:60:1f:a9:8b:58:
f7:e5:62:3b:93:10:95:22:d7:06:3e:b8:be:0f:e5:
13:f5:30:39:bc:8f:54:21:56:95:23:78:78:c0:df:
0b:32:c0:61:3f:b1:cf:a0:9a:f4:6a:e2:df:33:f5:
5f:b8:39:b2:37:29:3f:31:a5:d1:50:96:a1:76:7b:
73:40:00:bc:fd:b2:e4:f9:99:b5:a6:72:70:7c:7f:
f5:ca:37:41:79:95:a3:98:6a:0d:f8:38:d6:9c:09:
19:89:69:67:9c:f4:8f:69:72:c2:da:22:dc:87:8a:
6e:72:9a:3b:de:34:35:ec:ea:29:c2:62:d6:f6:3d:
6a:cd:36:67:3f:d5:4b:53:2d:dc:1a:57:2c:06:e2:
4b:d6:39:bb:e5:7b:d1:5d:2d:c5:a1:62:17:8c:6e:
88:0e:67:74:0a:c1:2a:c0:78:4d:85:4a:61:1b:5c:
66:e8:69:8b:9f:c6:af:a4:b5:f5:47:43:85:4c:9b:
f9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E2:C9:18:48:43:BA:FD:0F:8C:9F:72:60:CF:32:AB:98:8F:32:7F
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/0eLJGEhDuv0PjJ9yYM8yq5iPMn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.1.114/32
194.116.228.174/32
IPv6:
2a0f:b700::/29
Signature Algorithm: sha256WithRSAEncryption
a3:51:cb:a9:01:0c:39:c1:c0:7c:e8:8f:36:88:f3:32:d1:54:
06:76:67:47:7f:48:84:56:57:87:ec:8a:1a:0f:a6:4d:31:73:
14:ce:66:53:98:e7:54:34:b7:f6:22:87:12:53:61:c1:4d:8e:
4e:fc:a0:0f:9f:c3:69:99:7f:13:4b:b8:b4:12:bf:68:8c:a2:
fe:23:4d:0b:21:ba:3d:08:30:d8:90:5d:6d:54:8f:3b:a8:19:
07:8e:21:37:cd:61:76:aa:7c:77:74:aa:35:8e:76:a9:63:fe:
c4:73:53:92:79:07:a0:14:f2:fc:3f:b2:3a:17:f9:cf:7e:d1:
68:aa:af:66:0b:37:ea:d6:e6:e2:3d:ea:66:5e:cb:7a:ca:8e:
57:dc:f7:ea:9d:2e:37:4e:30:90:7e:da:b9:9c:40:ae:ca:d6:
62:b6:4e:1f:5d:e1:19:f5:05:2c:fa:4b:97:8e:7c:ed:62:4f:
10:45:d9:c3:da:1d:fd:c0:16:9f:f3:ea:7b:18:76:56:d5:8d:
8a:71:d0:1c:e1:40:7b:e8:81:10:55:a2:8f:be:b6:5b:27:21:
c8:7d:de:31:4e:93:ec:6b:d0:d9:dd:14:c8:9d:13:95:dc:e4:
99:24:81:2d:44:5f:db:2f:12:41:8b:00:09:7e:92:95:f2:4b:
c4:a4:c0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:43 2025 by rpki-client