Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/E9xRGrTm8y09dHUSDLje8d6Pj4s.roa
File: E9xRGrTm8y09dHUSDLje8d6Pj4s.roa (raw, json)
Hash identifier: EJ1U6Vj4c6C784cQRtJ9GcnDDZXIu91XqHLIrejxnnc=
Subject key identifier: 13:DC:51:1A:B4:E6:F3:2D:3D:74:75:12:0C:B8:DE:F1:DE:8F:8F:8B
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01849EAE56D910879C03D87A077210EAB5D3
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/E9xRGrTm8y09dHUSDLje8d6Pj4s.roa
Signing time: Tue 22 Nov 2022 09:32:16 +0000
ROA not before: Tue 22 Nov 2022 09:32:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201364
IP address blocks: 45.147.45.0/24 maxlen: 24
5.180.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:ae:56:d9:10:87:9c:03:d8:7a:07:72:10:ea:b5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Nov 22 09:32:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13dc511ab4e6f32d3d7475120cb8def1de8f8f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:59:0e:65:c9:d8:0c:ba:4d:f6:1d:55:67:86:
f6:7a:6c:b1:a6:22:7c:0f:0c:17:9a:d1:bc:74:ff:
f8:b1:0c:78:80:36:36:8d:4f:d6:05:28:59:90:16:
dc:ba:e2:e6:8d:53:db:01:4f:f0:25:8b:33:1e:f6:
ae:3c:a3:ee:20:0a:3c:25:26:12:c2:37:35:18:a1:
57:86:99:fd:79:82:09:44:e6:43:18:a3:3b:e9:a6:
bc:08:d9:37:64:a8:e5:2e:ae:ef:f6:32:59:83:4d:
9c:58:2a:e1:fb:09:36:d1:e0:c8:05:26:f2:ee:29:
83:b4:ec:0b:15:94:b6:d8:eb:12:19:62:ad:6c:bd:
13:89:2c:3d:79:02:15:d6:61:6f:15:3f:a2:26:67:
8c:44:b5:65:4d:99:08:1d:e1:ad:82:b4:76:3f:b9:
5f:b7:4d:ef:87:02:2c:26:80:42:00:05:ff:0e:84:
e8:da:0c:e2:24:ee:f4:68:43:f1:d9:dd:b5:29:c7:
b7:87:e8:fc:a1:1f:99:68:36:b2:cf:27:6e:4b:49:
6e:d0:23:a5:c1:c7:2d:b2:16:e0:77:04:5b:14:bd:
81:af:d6:1f:59:b6:07:2a:ae:90:68:ec:e0:14:af:
ce:1b:25:18:93:96:f9:d3:72:b2:17:3d:40:cc:33:
ff:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DC:51:1A:B4:E6:F3:2D:3D:74:75:12:0C:B8:DE:F1:DE:8F:8F:8B
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/E9xRGrTm8y09dHUSDLje8d6Pj4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/24
45.147.45.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b7:ec:08:3b:c9:cd:3c:98:6a:cd:37:9a:f8:7a:f6:35:88:
1b:af:bc:ca:ed:f6:d4:a6:f3:e5:3d:15:66:12:3b:2e:72:70:
09:11:5a:c9:15:36:df:c1:c9:7c:c9:51:83:dc:ee:bc:a7:f7:
a4:65:86:33:70:d8:c0:c0:6e:6b:66:05:07:20:9e:a7:30:51:
22:54:e6:33:a9:44:17:22:1d:4f:f4:75:78:84:fc:58:66:44:
b7:9a:d4:5f:4d:00:ff:ad:2f:46:6c:11:32:4c:18:c9:f3:39:
c6:49:e6:31:fe:8d:eb:f7:f3:6f:f7:30:25:8c:0e:07:b4:81:
b2:47:7c:87:f8:12:9c:26:c5:fa:74:97:3e:c6:f0:2b:54:c8:
3a:78:d5:08:8a:18:44:cf:73:55:fb:ac:a1:c5:c0:82:5f:ed:
34:a2:a3:9d:05:17:85:03:15:46:4a:f1:8d:ac:8e:e0:20:49:
23:0c:ab:e8:66:30:14:aa:c8:38:e8:5f:2c:a2:86:eb:0c:69:
3a:59:a3:b7:26:b7:62:38:a7:ec:53:0a:e6:e6:0c:76:b5:f5:
c9:8f:6f:11:af:dd:9e:33:5b:50:07:03:e3:87:40:d6:bf:23:
cd:53:4f:a9:77:0a:d7:20:8d:f2:cf:ea:86:38:42:11:99:ce:
b7:22:c0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:00 2025 by rpki-client