Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/DEXEs2wi2bTxOv6JyLY-FpvYNOM.roa
File: DEXEs2wi2bTxOv6JyLY-FpvYNOM.roa (raw, json)
Hash identifier: JTdxkf3huOO/IqCsowMI+Hc9iLkHQzGSwU7eG46PMek=
Subject key identifier: 0C:45:C4:B3:6C:22:D9:B4:F1:3A:FE:89:C8:B6:3E:16:9B:D8:34:E3
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018573856B69838A76EF316C7400459DBE13
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/DEXEs2wi2bTxOv6JyLY-FpvYNOM.roa
Signing time: Mon 02 Jan 2023 17:26:41 +0000
ROA not before: Mon 02 Jan 2023 17:26:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.147.47.0/24 maxlen: 24
45.136.7.0/24 maxlen: 24
45.131.2.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:85:6b:69:83:8a:76:ef:31:6c:74:00:45:9d:be:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 17:26:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c45c4b36c22d9b4f13afe89c8b63e169bd834e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ab:5f:52:c5:c6:58:80:70:bd:9c:f0:33:ff:
71:1d:cf:7c:68:9b:fb:d4:af:74:27:72:e8:aa:95:
ef:3b:c6:2b:bd:91:02:d3:d8:97:0d:a8:09:ad:82:
1e:25:6a:cc:e9:12:08:a4:41:27:0c:52:b9:c5:08:
d4:a3:f1:f9:17:d5:1a:b7:3b:da:2e:a8:2d:e1:be:
54:c5:a6:df:63:1f:ac:b8:82:70:1f:bf:bd:6c:84:
23:11:9e:9d:c7:12:3b:a3:2c:b9:87:78:ca:a1:2f:
f1:a3:23:b3:7e:ee:15:29:72:3f:05:93:48:72:6b:
63:c6:ce:3f:27:a2:45:d7:d4:e8:3c:c0:56:5c:12:
73:96:09:d0:ed:91:2b:8a:e4:e6:c7:57:e7:5f:a5:
4c:22:7a:c5:b9:eb:cc:08:2e:1b:99:51:06:d7:a6:
d0:3e:55:7e:d0:9a:0f:fa:92:70:55:7a:32:dd:70:
aa:f1:12:09:a6:9e:54:3b:4c:4a:76:43:96:c6:a7:
4e:9c:a9:9c:1e:34:93:72:1d:0e:00:c9:c5:2f:84:
5c:1a:ee:28:00:2b:ad:39:27:76:3a:0d:eb:07:33:
d5:81:0b:f6:2b:0d:4c:82:4b:5f:c4:d5:f4:52:6d:
16:94:b2:21:dc:61:eb:f6:37:c9:df:cc:c4:6c:ee:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:45:C4:B3:6C:22:D9:B4:F1:3A:FE:89:C8:B6:3E:16:9B:D8:34:E3
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/DEXEs2wi2bTxOv6JyLY-FpvYNOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.2.0/23
45.136.7.0/24
45.141.148.0/24
45.141.150.0/24
45.147.47.0/24
Signature Algorithm: sha256WithRSAEncryption
65:0a:0f:02:85:d1:2a:14:c4:4a:74:67:56:2b:1a:71:d9:0e:
5a:e2:e5:19:44:56:ca:49:1d:0b:22:46:8e:fe:24:f7:3e:f4:
a3:d6:c1:5a:d2:49:be:81:43:73:ac:d1:f0:da:18:4d:92:da:
ff:bf:fe:5c:c5:f6:ef:a6:2e:3b:0b:df:5c:e5:f7:06:80:04:
38:f5:0a:d0:ef:f2:c5:7a:cc:5c:b9:37:01:80:c0:5a:6d:3e:
2d:31:d6:e0:6e:05:4c:3d:50:f8:90:7a:d3:76:bd:73:a1:d8:
df:9e:58:41:dd:f8:43:f7:bb:84:1f:56:40:f9:95:b5:2f:ae:
5f:bc:07:14:69:ce:b3:76:f9:c0:36:df:7d:e7:bc:92:7f:7a:
0a:db:cd:68:43:9f:53:7f:cd:3a:dd:18:46:a1:48:62:ea:e8:
5e:08:e2:8a:6b:e3:9e:09:6f:51:ae:7f:24:73:90:54:89:05:
7f:c7:a6:22:a1:06:a9:b0:a6:32:c2:7f:da:d4:10:2b:17:ca:
62:ca:dc:42:1c:93:4c:4d:b6:df:1f:82:45:5e:86:0e:45:9d:
1e:9d:d9:24:7a:13:5e:b5:1e:c6:c4:ae:8c:04:eb:2e:a4:01:
a1:59:9b:0c:93:ce:c0:12:93:51:92:94:42:97:4e:81:1d:20:
84:c8:c2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:35 2025 by rpki-client