Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/a_l8QSD34VweORG6tEh4q-HY_uc.roa
File: a_l8QSD34VweORG6tEh4q-HY_uc.roa (raw, json)
Hash identifier: 8gImnmMcjKmwbkdbadwUBkCVBheSrUoCiGY9hcuZhqc=
Subject key identifier: 6B:F9:7C:41:20:F7:E1:5C:1E:39:11:BA:B4:48:78:AB:E1:D8:FE:E7
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018321A8A61CB18222E876AEAAA92FD192D3
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/a_l8QSD34VweORG6tEh4q-HY_uc.roa
Signing time: Fri 09 Sep 2022 09:50:44 +0000
ROA not before: Fri 09 Sep 2022 09:50:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211327
IP address blocks: 45.136.7.0/24 maxlen: 24
5.180.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:21:a8:a6:1c:b1:82:22:e8:76:ae:aa:a9:2f:d1:92:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Sep 9 09:50:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bf97c4120f7e15c1e3911bab44878abe1d8fee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:eb:b9:ca:fa:56:65:e6:95:92:d8:1b:a5:63:
0c:6d:a9:80:6a:79:1d:b8:de:cb:05:b2:59:67:35:
c4:b6:c4:8b:83:68:9d:0a:2a:a6:80:ce:8b:cc:84:
0d:98:86:1e:a8:d1:b4:ea:ae:23:32:53:c9:52:8b:
a8:78:ce:9d:e2:f9:e6:21:f9:b0:99:30:82:b1:71:
79:c0:7b:12:82:59:bf:a5:4c:0c:6d:20:5f:31:bb:
6e:f0:a1:fc:9d:59:87:2d:41:fc:69:7b:33:78:e9:
59:aa:c0:be:b3:e1:04:18:44:b5:cc:f7:f7:b8:29:
af:3f:56:f4:8f:3b:7f:93:76:b6:79:31:72:f9:86:
f9:76:3c:f8:76:bd:db:b5:17:3b:ee:f6:c8:18:10:
7a:55:6f:e1:e6:2c:23:3b:e2:18:ef:e7:d3:6e:14:
39:6d:3a:80:3d:e0:3c:75:ed:27:95:89:49:a3:36:
12:25:45:50:1f:e6:47:19:9d:be:32:0c:10:77:5a:
fe:4e:b5:69:91:45:b8:13:72:24:55:a2:a7:eb:f6:
aa:38:ba:87:44:4f:5d:2c:0c:ae:22:5e:29:7e:74:
04:ee:6a:07:b3:92:69:6f:8d:33:60:2a:00:9e:17:
1f:d2:c9:e2:1b:a8:a1:8e:dc:82:b0:71:cb:51:20:
7c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F9:7C:41:20:F7:E1:5C:1E:39:11:BA:B4:48:78:AB:E1:D8:FE:E7
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/a_l8QSD34VweORG6tEh4q-HY_uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/24
45.136.7.0/24
Signature Algorithm: sha256WithRSAEncryption
09:12:6c:6c:a3:07:5b:e7:87:a4:2a:0b:7f:c5:a0:3e:e2:94:
51:52:c1:f9:d4:b3:18:f6:8b:25:0e:79:e6:c2:2c:0b:79:39:
71:4f:74:20:ac:55:ef:11:d5:c5:d4:56:a4:da:f3:64:84:a1:
60:e0:53:0f:42:ea:42:9a:41:ae:7a:1a:dc:94:90:0f:cf:d2:
43:57:47:7d:41:c7:81:02:ca:58:62:d3:b2:f6:3a:08:ee:04:
ea:7c:db:68:b2:22:9d:b5:44:58:f8:7c:63:e7:31:f9:88:ab:
5b:0a:d7:c5:8e:74:58:ec:b1:37:05:02:92:ac:da:4d:cb:32:
7a:ba:28:ac:4a:d2:bd:34:d0:e1:21:6c:6a:bd:47:fb:52:0a:
5f:8d:6d:25:67:8e:47:43:02:01:32:8c:51:d2:03:fa:cf:1b:
6d:e0:b5:ac:16:76:eb:51:00:bf:5d:c2:f4:e2:56:a0:24:2c:
8f:b3:0a:c4:18:4a:28:7f:7a:32:00:2f:26:0b:a2:77:49:3a:
7b:25:9e:d8:30:1a:27:b9:53:85:7e:2f:71:73:72:3b:28:ef:
9e:7d:29:eb:ef:b3:df:0f:54:ed:5d:80:41:6b:fb:1b:7f:cd:
0a:5c:e2:82:d4:70:ce:b8:40:aa:55:97:3c:d9:12:56:28:ea:
12:2e:e6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:01 2025 by rpki-client