Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/di2mjYQ52hLBNQtYcyMNvTk6X-c.roa
File: di2mjYQ52hLBNQtYcyMNvTk6X-c.roa (raw, json)
Hash identifier: U0AxaV5R8zybenX0VxKVnAqcYLliuxdg3GiuEpCIbQM=
Subject key identifier: 76:2D:A6:8D:84:39:DA:12:C1:35:0B:58:73:23:0D:BD:39:3A:5F:E7
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0191CC3EF137C388EE684D73A1F08F018E55
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/di2mjYQ52hLBNQtYcyMNvTk6X-c.roa
Signing time: Sat 07 Sep 2024 11:29:22 +0000
ROA not before: Sat 07 Sep 2024 11:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47436
IP address blocks: 45.147.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:cc:3e:f1:37:c3:88:ee:68:4d:73:a1:f0:8f:01:8e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Sep 7 11:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=762da68d8439da12c1350b5873230dbd393a5fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:9e:1c:c9:d6:6f:26:95:56:81:97:bf:21:
56:03:ba:19:2c:3e:09:20:c8:96:e7:0a:bb:73:bc:
f9:da:7e:0f:34:f1:c0:20:c3:f5:4d:20:c6:70:24:
cb:a7:f1:e8:c4:5b:e6:80:37:8c:ba:91:e1:f1:d9:
9d:cf:27:5c:72:0a:2e:c6:6f:8c:34:31:98:90:60:
12:15:86:ff:18:51:cf:c2:3e:01:13:a5:91:f4:2f:
a3:b9:9e:7b:1e:25:fe:23:4f:39:27:c0:cd:6a:88:
79:45:29:fb:a4:2c:a1:60:2c:81:09:a4:b8:e9:88:
da:bb:b0:c2:9c:e4:e4:c4:8c:eb:9e:83:2b:5b:99:
29:5f:00:0c:38:20:3a:b0:59:43:f3:f2:06:d6:16:
b5:35:c7:40:25:6c:4b:01:b8:ef:52:5d:81:10:fe:
7b:5d:8f:ac:59:9b:fe:54:be:bc:98:66:59:6b:b9:
eb:56:e2:7a:95:20:6a:d6:2b:60:36:4a:04:fb:3f:
30:f8:c1:bc:7d:20:d7:01:08:cb:77:06:97:e3:7c:
b7:c1:73:a3:aa:dc:4d:cb:11:03:69:82:05:ea:73:
e6:70:30:02:3b:2b:aa:34:4a:9d:02:d9:c0:b4:35:
75:fb:ed:37:4a:48:65:28:6a:d3:c7:b6:a4:49:e0:
78:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2D:A6:8D:84:39:DA:12:C1:35:0B:58:73:23:0D:BD:39:3A:5F:E7
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/di2mjYQ52hLBNQtYcyMNvTk6X-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.45.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:7d:dc:a4:18:1c:38:8d:10:f6:b2:6d:b3:c5:32:0d:e6:63:
23:fd:b4:4a:77:84:3c:87:06:ae:ae:50:c4:be:11:13:38:c8:
13:ed:95:3f:6a:d8:2f:0f:4e:54:b7:f1:af:e3:50:d0:62:e9:
72:df:63:e4:43:ce:c4:2a:1e:ee:87:ac:9b:ab:62:3e:ed:0e:
27:dc:52:7e:0d:69:c7:bb:2d:e3:85:dc:d9:b2:67:9a:88:25:
17:c6:2d:b0:6e:7c:2c:36:ee:52:f6:13:c8:a7:48:e1:bf:4c:
f4:79:5f:de:0e:b6:c1:f7:60:f2:8c:eb:d9:8f:81:d0:1b:ca:
bb:4b:83:a9:c1:65:2b:93:71:4f:af:09:1a:0d:fc:f2:76:6f:
3c:8d:2d:63:18:7b:f1:92:b5:00:4f:38:62:b7:79:84:97:39:
44:99:8e:03:ee:20:47:e8:8f:9e:05:6e:35:55:58:85:81:f1:
2d:40:18:d5:b1:77:15:a5:62:dc:35:e9:e6:d4:72:af:8a:b3:
a0:31:d4:21:c8:28:95:c2:e8:2d:fa:11:74:27:1b:46:37:c5:
7d:7e:25:c6:18:77:cf:b7:09:d7:70:a3:86:1c:5a:fd:8c:18:
ed:9e:13:ec:9b:34:2f:29:0c:a3:66:5b:f5:82:d2:7d:77:a1:
05:8e:57:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:33 2025 by rpki-client