Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/M4jZmpBHCVgCOk-DbEEICRyraDo.roa
File: M4jZmpBHCVgCOk-DbEEICRyraDo.roa (raw, json)
Hash identifier: 820FhgqaX4zm9MOmC7FJpsBSYQq0BByayGgZWw2GJCY=
Subject key identifier: 33:88:D9:9A:90:47:09:58:02:3A:4F:83:6C:41:08:09:1C:AB:68:3A
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018572CC9A008BE8BB8BE7A12244F2FE6B12
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/M4jZmpBHCVgCOk-DbEEICRyraDo.roa
Signing time: Mon 02 Jan 2023 14:04:49 +0000
ROA not before: Mon 02 Jan 2023 14:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 45.131.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:9a:00:8b:e8:bb:8b:e7:a1:22:44:f2:fe:6b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 14:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3388d99a90470958023a4f836c4108091cab683a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d9:73:5a:8b:b6:04:ba:eb:70:9b:a4:a2:ee:
1b:2f:5c:7e:00:9b:2e:cb:59:6c:a6:c8:61:70:92:
7e:6c:14:ee:7c:f1:3f:bc:35:d5:36:14:0c:ff:f8:
98:51:5e:61:cf:f2:a6:34:77:f5:29:df:9e:4e:13:
7a:3e:e0:34:56:e1:e4:37:5d:76:90:0d:0b:04:cb:
e4:08:64:d2:97:32:5e:2c:e5:f0:82:1d:ea:0d:a7:
59:db:bc:0a:ec:d7:c4:51:20:6f:e6:88:c2:1c:a2:
c7:ba:c2:5e:97:e4:fb:d1:15:f5:e3:18:fe:7c:6c:
34:17:be:95:60:d1:42:29:51:1b:ac:87:96:de:87:
4f:bc:ca:3c:f5:71:5d:6c:25:34:d4:31:31:d9:ba:
97:7c:85:13:28:c6:4a:a5:be:83:74:a3:6b:41:9b:
d8:d4:f1:26:77:46:d8:e5:23:07:f6:40:3f:01:33:
67:4c:08:e4:96:95:77:82:3b:1a:d0:88:82:eb:41:
5e:1a:2a:fa:49:87:da:ed:c2:17:ff:74:2c:e3:de:
e7:db:a6:ba:bc:e4:3b:e0:2a:0c:32:64:6c:4b:6f:
51:98:a7:36:3b:66:b9:61:d8:4a:28:1e:d3:a0:64:
6d:71:17:90:b3:ff:c0:44:97:0e:b4:9c:3d:f8:f2:
dd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:88:D9:9A:90:47:09:58:02:3A:4F:83:6C:41:08:09:1C:AB:68:3A
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/M4jZmpBHCVgCOk-DbEEICRyraDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.3.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:73:31:78:1b:f5:96:b9:75:ac:ce:9a:2c:fd:13:16:0a:bd:
94:14:8d:8b:b7:c5:63:85:0e:f1:88:86:76:6e:2a:d0:01:4c:
e2:be:56:de:7f:e9:81:f2:bf:89:14:d7:d6:bf:78:20:89:66:
22:52:97:d3:3e:f9:41:c2:59:4f:de:53:89:29:60:33:79:57:
3c:60:44:7a:9b:01:0a:3f:ae:7c:bd:e8:18:f6:2a:44:63:af:
ee:fd:20:01:71:a9:2c:a0:a6:00:0b:8e:63:63:dd:25:15:ab:
63:89:9b:4d:8a:1e:a1:4f:27:86:cd:18:de:d9:20:3d:49:f0:
13:9d:8b:04:7e:cf:68:35:45:97:12:d6:0e:b0:ac:b8:7c:49:
7c:89:1b:28:87:02:34:2c:3f:b5:93:fc:d2:76:5c:d7:a5:5d:
16:fd:69:11:a7:0e:4e:c9:7c:7e:89:6f:68:46:e9:45:d3:cb:
ab:6e:18:16:17:7f:6a:c2:31:b5:79:eb:a4:70:1d:9f:15:52:
aa:ce:a4:c4:64:b4:2f:fe:87:60:31:70:5e:63:de:1a:11:d8:
b6:e2:ca:ec:af:ff:0e:18:70:3d:29:ff:8b:b9:de:1f:c2:ce:
8a:ec:7d:33:a5:22:61:df:56:c3:17:b1:8a:39:7c:cd:6b:73:
92:42:ee:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:49 2025 by rpki-client