Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/f1h5IC5i78IgeOahiF49P6qM-IY.roa
File: f1h5IC5i78IgeOahiF49P6qM-IY.roa (raw, json)
Hash identifier: zpRQ4umVauBRq3F5gFj5Ac9zeYSXEg96nTGzotTd1U8=
Subject key identifier: 7F:58:79:20:2E:62:EF:C2:20:78:E6:A1:88:5E:3D:3F:AA:8C:F8:86
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01852CE3D19635F5E43D118DCAD3B9DB5479
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/f1h5IC5i78IgeOahiF49P6qM-IY.roa
Signing time: Tue 20 Dec 2022 00:16:45 +0000
ROA not before: Tue 20 Dec 2022 00:16:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.147.47.0/24 maxlen: 24
45.136.6.0/24 maxlen: 24
45.136.7.0/24 maxlen: 24
45.131.2.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2c:e3:d1:96:35:f5:e4:3d:11:8d:ca:d3:b9:db:54:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Dec 20 00:16:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f5879202e62efc22078e6a1885e3d3faa8cf886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:48:3d:d9:e4:91:47:df:c2:48:33:e0:91:d5:
0c:af:ee:80:06:c1:6e:bd:1c:1a:48:95:5d:61:df:
14:b0:13:0e:51:cb:b8:f6:47:c1:ad:3f:5a:a7:8e:
12:ab:6d:10:29:d1:16:65:a8:72:c7:14:72:0e:6e:
b3:f5:25:60:d2:b0:55:7a:00:d3:50:cb:22:cd:6d:
34:b2:7a:3f:1b:c1:e2:5e:b3:b9:19:6d:ea:50:96:
9a:a4:79:86:2b:94:1e:18:e4:43:e5:9c:75:ff:73:
d5:f9:25:a4:10:a1:28:b4:18:67:55:60:89:fa:23:
7b:9c:a2:19:d8:52:5e:98:10:52:cb:8f:e0:ce:eb:
fe:cb:14:81:16:8d:e2:93:23:bf:f2:2b:79:61:fe:
30:02:7b:9a:44:73:4d:92:02:f9:ec:f6:72:b3:49:
a9:52:e6:2c:c2:00:6b:1b:7c:4a:75:78:b6:4d:58:
81:42:78:e9:68:fe:cb:88:3f:20:0c:f0:e7:29:12:
26:f2:07:89:72:b7:b2:50:55:78:a8:c4:c7:87:77:
d4:5e:fa:ed:56:ba:e0:14:62:6c:66:0a:a0:02:bf:
a3:15:4b:c1:2c:ff:63:3d:10:72:ec:4d:47:d5:bc:
03:4c:75:f1:e3:89:4e:e5:68:26:9b:82:b9:74:c5:
ed:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:58:79:20:2E:62:EF:C2:20:78:E6:A1:88:5E:3D:3F:AA:8C:F8:86
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/f1h5IC5i78IgeOahiF49P6qM-IY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.2.0/23
45.136.6.0/23
45.141.148.0/24
45.141.150.0/24
45.147.47.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ac:a6:91:15:0f:d9:6c:7e:d3:14:27:ba:8f:a0:c0:51:0d:
2f:cd:18:5e:57:ae:91:43:3c:67:0f:14:d6:e6:45:3b:56:1d:
5c:8a:5b:17:03:dd:d2:27:7e:49:8d:50:95:cc:2b:15:a1:42:
8b:28:e3:8a:96:8c:3f:ca:30:67:29:62:57:b4:d5:56:4d:98:
12:19:86:4a:d2:bc:5e:ac:c8:2c:06:bc:d2:d2:d3:2d:da:d6:
1c:60:f2:30:d0:71:6e:07:9c:e1:e2:e3:1e:16:e3:80:d2:6a:
0c:e3:60:f2:1d:52:90:92:3d:2d:a5:12:2f:5a:6e:9d:32:f7:
73:75:c2:78:90:da:6b:d4:e4:a5:22:64:f5:da:29:ac:ec:1b:
e0:27:c6:24:a9:57:01:ce:46:c4:7d:9f:21:e3:93:d9:97:f2:
f6:b7:dd:2d:b5:e6:02:0a:1b:99:42:23:d7:e5:9e:4a:65:f7:
b7:8a:e4:07:01:32:6a:11:c9:94:13:02:45:5f:67:47:a2:72:
a1:ef:7c:e4:cc:82:9b:e3:87:18:bc:89:37:8f:e0:fe:41:11:
0b:09:2f:d4:f1:7a:23:a6:cc:4f:11:b5:f5:2f:cd:ed:fc:e3:
4e:f7:2e:e9:20:74:9e:3e:cb:a7:32:26:6c:dc:3b:e1:cb:9b:
6c:d2:19:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:02 2025 by rpki-client