Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/_G1kaUsATtlhD5VXP27NXFZTYGo.roa
File: _G1kaUsATtlhD5VXP27NXFZTYGo.roa (raw, json)
Hash identifier: o58YR8xdblPymo6Abz6rlR2zVWXUe1dsp7NlBtyxfbQ=
Subject key identifier: FC:6D:64:69:4B:00:4E:D9:61:0F:95:57:3F:6E:CD:5C:56:53:60:6A
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018CC7951F94C9776BAC6530F71A8DD17B0C
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/_G1kaUsATtlhD5VXP27NXFZTYGo.roa
Signing time: Tue 02 Jan 2024 00:31:28 +0000
ROA not before: Tue 02 Jan 2024 00:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60446
IP address blocks: 45.147.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:1f:94:c9:77:6b:ac:65:30:f7:1a:8d:d1:7b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 00:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc6d64694b004ed9610f95573f6ecd5c5653606a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:08:51:c6:aa:56:c4:9e:7f:81:4e:35:70:
a3:65:c1:98:2b:6a:4d:ec:d8:78:85:61:1a:8c:5d:
73:e5:0e:0c:5c:62:17:1c:09:3e:8a:60:a5:19:96:
6a:59:5e:63:c2:2c:c8:02:fd:59:51:00:93:2a:59:
f8:5f:a2:f4:57:c5:ae:f7:11:26:e2:c6:3f:c4:4b:
7f:b3:11:a2:da:3b:96:00:77:c0:dd:d8:5e:83:c1:
50:bd:f1:86:17:f8:77:91:36:59:a6:26:e5:f5:a5:
59:b4:6b:cd:6d:d1:7b:7e:ca:bf:bd:9a:a8:d6:f0:
ec:cc:ac:f2:89:ab:c7:43:63:a4:b0:fe:dd:83:f5:
81:f2:c9:cf:2c:1d:44:32:5a:9a:f9:91:c6:62:a6:
30:6c:07:06:25:05:5e:15:f9:f0:40:41:19:5c:7b:
61:44:75:35:37:45:a2:ac:75:28:54:ea:70:96:c2:
d0:72:52:e4:e8:f7:25:1f:2c:0c:52:8c:73:71:24:
31:4e:a3:24:f0:57:85:99:ef:38:6b:d3:a6:e5:88:
f8:c9:1f:15:36:a1:c5:eb:27:aa:d5:2c:91:c2:3c:
c3:ec:aa:b9:51:da:e4:fa:11:56:a1:e0:95:c2:4a:
a7:f3:9e:09:68:83:21:96:89:81:4a:c6:1a:04:2d:
be:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6D:64:69:4B:00:4E:D9:61:0F:95:57:3F:6E:CD:5C:56:53:60:6A
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/_G1kaUsATtlhD5VXP27NXFZTYGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.47.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:33:56:d7:c6:2f:76:e8:e6:3f:18:84:cf:bb:28:11:fe:a9:
e6:16:33:4c:0f:7b:c6:61:61:08:86:51:30:d2:94:f5:71:8c:
ed:6e:6b:a6:c9:47:49:3e:d4:d0:95:c0:84:b8:1b:21:02:b4:
a4:ac:21:3c:7f:b0:90:04:bb:0e:9c:ce:9d:95:ab:b6:b7:64:
73:b6:db:0b:58:ce:7f:1d:56:b5:51:f8:3d:3a:01:c9:6b:cb:
0c:a3:d3:f4:77:cb:e5:e1:dc:99:ff:f8:09:68:1c:d7:66:da:
31:d5:8e:74:14:82:05:d2:62:b7:e5:65:9b:8f:e1:12:c4:0a:
b5:87:42:0e:72:f9:d6:44:19:f7:eb:ba:ee:56:d8:e0:c8:fd:
da:50:2c:ae:e4:3b:30:32:21:ab:d0:ed:89:61:60:bc:de:a5:
b4:28:a6:02:95:d4:e4:38:5e:cd:6e:0f:f5:2f:83:64:94:02:
46:3e:8d:c2:35:58:28:f2:14:99:e2:bf:0f:de:dc:dc:90:a4:
73:e3:e1:5f:2e:b1:52:7f:d6:14:e1:6a:fd:a8:8a:9d:61:8b:
b9:39:eb:fb:61:de:0c:c6:52:a2:b2:44:13:1e:42:f2:90:1e:
91:66:26:61:7e:fd:99:39:9e:3a:2b:85:1e:51:db:a8:11:6d:
43:95:a4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:49 2025 by rpki-client