Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/6HxcA70YO_l8_95YU6ZbWknXkp0.roa
File: 6HxcA70YO_l8_95YU6ZbWknXkp0.roa (raw, json)
Hash identifier: h5YhRJOUdk0BWMvQhlu3KkZ4qHcre4oFR6c3Pi1C7lQ=
Subject key identifier: E8:7C:5C:03:BD:18:3B:F9:7C:FF:DE:58:53:A6:5B:5A:49:D7:92:9D
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018CC7951ECC14A40756C50CF68BE9138A11
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/6HxcA70YO_l8_95YU6ZbWknXkp0.roa
Signing time: Tue 02 Jan 2024 00:31:27 +0000
ROA not before: Tue 02 Jan 2024 00:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47436
IP address blocks: 45.147.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:1e:cc:14:a4:07:56:c5:0c:f6:8b:e9:13:8a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 00:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e87c5c03bd183bf97cffde5853a65b5a49d7929d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:39:9e:71:43:55:05:32:34:38:0c:e0:53:8a:
9f:ed:f6:a1:91:ea:c5:53:da:71:8a:02:b5:6e:f5:
bc:bd:4a:ad:d3:08:9c:f2:5b:0a:ce:e8:be:56:a8:
f5:68:fe:a2:5f:9e:93:7f:c8:78:2e:93:b3:bc:fc:
4a:94:e1:2f:37:83:eb:bc:97:73:1e:64:00:bf:92:
43:0f:68:d4:3d:c8:5a:40:4e:c8:ca:79:29:99:ba:
2f:df:a3:f8:b2:c8:b2:83:7f:0d:2f:cf:fc:a4:fd:
fd:cb:61:24:cb:65:59:01:66:b8:81:8d:4d:14:ea:
a2:6f:12:e8:58:44:ae:e1:3a:cd:ad:74:d9:bd:67:
22:86:fc:aa:d6:a4:86:05:07:8e:0f:23:cb:65:5b:
7d:1e:57:06:f7:6c:30:44:c1:f3:d9:a5:dc:36:9b:
15:9a:da:90:a6:0b:97:d6:fc:3a:73:4b:04:3e:d8:
da:27:bd:5a:5b:16:88:29:1c:f0:03:66:48:fb:a8:
f2:19:0e:50:c3:c4:aa:f1:a6:20:5d:2f:4b:f2:e3:
32:ee:c7:56:8d:46:f2:1b:45:60:d2:e9:2d:51:bc:
1c:05:ed:31:51:02:3a:ac:07:e9:3b:af:70:e7:e6:
c7:fb:85:47:c3:72:27:10:99:4b:21:bf:79:96:c3:
f3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7C:5C:03:BD:18:3B:F9:7C:FF:DE:58:53:A6:5B:5A:49:D7:92:9D
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/6HxcA70YO_l8_95YU6ZbWknXkp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.45.0/24
Signature Algorithm: sha256WithRSAEncryption
47:8b:9b:63:68:b0:15:43:45:74:e5:f9:a9:ae:64:37:0d:09:
13:43:2a:f1:db:22:45:24:3a:d9:2e:e6:27:f3:e5:fa:46:78:
3f:5d:3f:7a:c1:eb:bb:f4:21:ea:e9:15:c5:93:58:d4:5b:3c:
5d:77:7a:5d:0e:32:cd:ea:bb:b1:9c:35:4e:b3:4a:89:41:53:
40:45:e5:cc:f5:2e:de:81:20:45:69:4d:e1:a9:56:2d:f1:5e:
ed:ea:ff:db:97:a2:5b:77:fa:a5:24:9e:3a:41:fd:29:80:e1:
b9:88:70:54:76:2e:c2:ad:83:3a:65:76:6a:ae:0a:85:4d:8e:
7a:ab:26:68:72:e1:8c:72:a0:a1:d9:b9:38:00:6c:59:79:bb:
35:e8:79:1d:31:5e:94:b0:fb:05:81:4e:af:77:d6:96:77:16:
0b:23:e6:9b:fe:b4:11:18:80:f7:5e:36:86:b8:bd:e8:5e:a6:
74:dd:12:48:85:0f:1b:7d:65:6e:dc:00:47:04:8d:65:0c:89:
b5:13:a7:82:57:57:d6:3f:5b:dc:d5:55:6e:d5:22:0e:72:16:
39:5f:8d:b1:cf:fc:16:d3:6f:74:a4:3d:97:12:64:2c:12:4f:
96:fd:d3:a6:0a:57:8c:51:a0:6c:ac:fe:4d:3e:e4:77:01:f0:
f6:46:a9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:32 2025 by rpki-client