Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/51r803hDH5WFhBEcGONLP33Z_0k.roa
File: 51r803hDH5WFhBEcGONLP33Z_0k.roa (raw, json)
Hash identifier: bQSR3uH5IBSCWhv3krlu4T7sNgRvvIYq1HtvDu2+3tw=
Subject key identifier: E7:5A:FC:D3:78:43:1F:95:85:84:11:1C:18:E3:4B:3F:7D:D9:FF:49
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018572CCA0B14FFEE6C21969E4FAC7161378
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/51r803hDH5WFhBEcGONLP33Z_0k.roa
Signing time: Mon 02 Jan 2023 14:04:51 +0000
ROA not before: Mon 02 Jan 2023 14:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212512
IP address blocks: 45.147.47.0/24 maxlen: 24
45.131.2.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:a0:b1:4f:fe:e6:c2:19:69:e4:fa:c7:16:13:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 14:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e75afcd378431f958584111c18e34b3f7dd9ff49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:4c:f5:e1:73:62:bf:fa:31:88:72:36:fd:
2b:f5:6e:02:a7:81:ad:bf:6b:d6:3d:16:76:ed:5c:
e7:8e:8e:53:c4:2e:62:f9:68:52:66:62:08:62:cc:
f1:87:5e:41:f4:72:b7:e5:29:ce:fb:6d:ec:86:86:
24:00:6b:1a:dc:92:71:58:5f:38:4a:be:76:59:a2:
06:ab:67:01:0f:d7:26:79:f9:1d:d9:ad:70:e1:ce:
33:7c:e4:b7:3f:81:3c:cb:0b:a8:90:b4:5b:d5:7c:
62:f0:b2:45:22:7c:02:95:ad:c9:98:ed:43:65:7b:
61:17:b6:49:c5:38:e0:38:e2:72:28:58:d6:a2:ef:
b6:e2:b0:d3:50:c9:6b:66:88:d1:72:2f:21:f9:68:
b5:79:9f:bf:35:d8:b6:68:10:50:45:55:fd:09:00:
6f:36:26:8a:ed:46:d4:4b:17:29:8a:6e:8e:42:2a:
dd:4a:60:98:2f:00:d9:41:4d:4f:ac:13:eb:8f:49:
d3:71:0e:be:e4:3c:48:4c:50:ec:9c:36:85:f9:7b:
26:e1:d8:c4:d0:98:be:e3:fe:13:88:04:55:76:41:
5d:1e:1f:6e:ce:a6:b4:fe:cb:8c:c4:99:da:b0:24:
90:93:7b:ae:3d:af:06:b2:96:45:ae:f3:35:b4:84:
e1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5A:FC:D3:78:43:1F:95:85:84:11:1C:18:E3:4B:3F:7D:D9:FF:49
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/51r803hDH5WFhBEcGONLP33Z_0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.2.0/24
45.141.148.0/24
45.141.150.0/24
45.147.47.0/24
Signature Algorithm: sha256WithRSAEncryption
82:73:db:f3:af:66:8f:8e:1e:b9:4c:08:8c:a8:42:2c:f4:1d:
8a:a3:2a:09:f9:c6:e5:dd:99:d1:0f:aa:f7:1d:7d:dc:f2:e5:
66:aa:1b:2d:f5:75:7c:85:23:94:ba:89:08:0c:64:14:94:5f:
3b:0e:de:d7:a0:62:67:3d:e3:70:52:6d:3f:8d:39:3d:5e:5a:
b7:21:c5:96:85:0d:e8:0e:25:2d:c5:06:8b:e5:c1:57:a0:cf:
31:65:db:69:32:f0:a6:17:f3:03:5e:7a:8e:b0:10:46:96:fa:
a3:61:eb:5c:eb:0a:5b:90:29:75:eb:41:91:6a:bf:1d:ef:d3:
08:a8:9e:05:04:67:73:62:bc:ee:75:0b:98:70:1b:f9:3f:ed:
88:b8:aa:b6:68:ad:92:18:ae:cc:d7:44:8c:7a:24:5f:37:e0:
eb:fe:da:35:80:a5:53:26:9f:ec:20:af:53:a3:1a:90:48:24:
2c:40:d6:9a:aa:70:e6:06:3f:a2:3d:8c:3b:17:d8:06:51:fb:
8e:eb:77:87:5c:91:57:b6:9d:2f:b7:b2:2a:74:80:15:61:73:
58:0a:3d:10:b6:0a:d8:fe:23:1c:a9:ab:6b:02:de:ee:4f:a4:
2e:21:1c:a8:31:1e:e4:60:eb:6d:17:3f:ee:48:a0:e6:a6:ac:
27:7d:f8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:22 2025 by rpki-client