Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/6H3BT-QXvp9ioKrO5JIML-CWcog.roa
File: 6H3BT-QXvp9ioKrO5JIML-CWcog.roa (raw, json)
Hash identifier: c0wcwT11Nk4KO1ss68mR+OL4YRmbNMkwmEVJuYDiyyw=
Subject key identifier: E8:7D:C1:4F:E4:17:BE:9F:62:A0:AA:CE:E4:92:0C:2F:E0:96:72:88
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018573856D0F8F3F1CDEE9DC225806AE85D0
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/6H3BT-QXvp9ioKrO5JIML-CWcog.roa
Signing time: Mon 02 Jan 2023 17:26:42 +0000
ROA not before: Mon 02 Jan 2023 17:26:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211327
IP address blocks: 45.136.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:85:6d:0f:8f:3f:1c:de:e9:dc:22:58:06:ae:85:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 17:26:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e87dc14fe417be9f62a0aacee4920c2fe0967288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:4a:25:6f:51:88:76:90:7e:df:10:e9:19:
d8:ca:0a:00:61:e9:f9:a4:17:b1:62:aa:b7:fa:8b:
2c:b6:ca:9d:25:8c:d1:bc:e1:9c:02:88:27:0f:eb:
ad:38:d3:93:15:fb:f0:8f:ac:53:cd:b6:ed:74:44:
6d:39:97:e9:39:48:69:d9:60:01:7f:43:ec:2d:01:
e2:a1:9a:86:dd:d8:67:42:b6:31:bf:9a:eb:e8:bf:
11:2f:5e:c1:92:4f:f5:4d:22:c9:04:c5:ed:b1:0c:
05:6d:0b:bd:34:8d:49:99:17:83:f0:86:5f:b6:00:
cd:8c:0c:82:58:0c:6b:a6:97:a4:57:fd:f1:1a:f4:
84:ba:29:3e:42:d5:b5:f4:51:22:c6:5b:bd:9a:be:
a4:aa:4e:02:80:0d:71:e5:69:7f:0d:80:8f:4d:a4:
87:df:94:d0:7a:5e:8b:68:81:5a:fe:4f:20:7f:8d:
97:67:97:ee:f3:56:03:7e:1c:ea:5b:bd:0a:f8:3b:
2c:24:b7:cc:69:7b:d6:f3:b5:e5:2f:48:55:78:71:
ff:ef:dd:bd:af:e5:f7:dc:ee:9a:6f:b8:f6:b9:86:
a0:7d:cd:d6:8c:83:15:33:df:f2:a2:40:27:fb:90:
d4:7e:01:90:01:8c:15:3d:4b:c6:94:8a:a6:5b:e2:
1b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7D:C1:4F:E4:17:BE:9F:62:A0:AA:CE:E4:92:0C:2F:E0:96:72:88
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/6H3BT-QXvp9ioKrO5JIML-CWcog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.7.0/24
Signature Algorithm: sha256WithRSAEncryption
63:b7:a0:02:d3:be:0a:95:26:64:af:93:6b:6f:31:00:0c:b8:
c4:12:80:61:69:38:63:90:e9:99:6e:20:d6:13:d3:d1:0e:99:
42:07:ae:0b:8f:0a:8d:c4:58:e9:ea:e2:b1:d1:77:f5:26:69:
94:7b:38:55:c6:72:9a:fa:5a:31:81:63:14:79:30:96:d3:ad:
90:13:1b:64:9f:3f:dd:8c:01:58:e0:57:04:d4:6a:0f:31:98:
32:87:e0:e3:b8:73:f7:f7:cd:d0:3e:c2:51:dc:a7:5c:6f:a3:
e5:1b:71:28:31:3f:69:2e:d5:72:e5:7d:4a:52:b4:9c:be:42:
d2:d6:7f:a6:2b:4e:2e:23:70:f2:43:79:81:ce:cf:cc:01:92:
c3:02:74:9e:92:62:1c:07:ef:08:5a:53:14:7b:8a:8e:10:2e:
0c:af:c6:2b:d1:3c:bc:a5:bb:4e:c9:78:89:c7:b1:c3:d3:6f:
db:85:a7:18:78:71:82:8c:17:72:51:9e:bd:a7:b2:78:d5:40:
22:9a:ac:01:b0:7b:eb:d2:06:c5:df:7b:1f:ce:86:a4:30:19:
fd:94:9c:15:23:47:87:70:3b:37:f0:77:24:e6:84:36:6b:c2:
e6:90:6a:d0:9b:34:41:ae:54:03:5d:42:02:52:91:a3:9f:c6:
39:a5:aa:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:04 2025 by rpki-client