Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/fb1JfJqdw69BnGYvUtiGElzXBr0.roa
File: fb1JfJqdw69BnGYvUtiGElzXBr0.roa (raw, json)
Hash identifier: MlNUfZh1aUHDSkKRzk/k2J2vdcZR4l/5Jk1BEDwwqdY=
Subject key identifier: 7D:BD:49:7C:9A:9D:C3:AF:41:9C:66:2F:52:D8:86:12:5C:D7:06:BD
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018CC79521A11848BFEF1D31A7B6CC46E4E7
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/fb1JfJqdw69BnGYvUtiGElzXBr0.roa
Signing time: Tue 02 Jan 2024 00:31:28 +0000
ROA not before: Tue 02 Jan 2024 00:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211327
IP address blocks: 45.136.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:21:a1:18:48:bf:ef:1d:31:a7:b6:cc:46:e4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 00:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dbd497c9a9dc3af419c662f52d886125cd706bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:09:3c:9b:8f:59:d8:2c:e7:48:ea:9e:ae:e0:
3a:29:cd:2c:f0:0e:b4:bd:81:f5:ce:86:75:57:1c:
52:2a:b4:5e:91:35:ea:b3:c4:8e:6a:99:24:4d:a9:
b3:51:b3:b8:71:c2:7f:b6:42:09:e2:8b:e4:78:79:
e6:51:b8:23:6c:dc:40:d7:03:cf:9a:c4:3a:ba:eb:
4a:4f:03:39:df:d3:7e:21:94:d1:2a:51:5f:6d:19:
95:b1:cd:4c:0b:aa:ba:a3:76:5f:1e:45:23:04:c7:
46:a0:6b:35:68:9d:33:92:92:3f:08:c9:7c:91:40:
8f:33:d0:bb:26:56:98:eb:8b:de:18:c6:4d:b6:0c:
cc:83:b9:f2:08:47:e4:c9:f3:c9:11:57:da:d7:11:
25:5b:96:0d:18:4c:a8:07:32:6f:c6:be:3e:fb:8f:
fb:73:5b:c8:8b:91:9d:54:a0:86:0c:73:64:05:88:
86:22:ea:e8:0f:1e:e5:e4:73:20:ec:5d:9e:54:ee:
82:7a:a9:d6:c2:07:8d:00:c8:f5:30:f4:ff:7b:2d:
b7:f3:a0:09:e7:0c:95:4d:b2:32:5e:92:5c:b8:5e:
a3:e9:08:bd:fd:73:e0:c6:f5:84:64:c0:aa:df:91:
af:82:1e:b9:ba:b9:7a:fa:cc:8b:3a:80:4e:2b:89:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BD:49:7C:9A:9D:C3:AF:41:9C:66:2F:52:D8:86:12:5C:D7:06:BD
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/fb1JfJqdw69BnGYvUtiGElzXBr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.7.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ca:c1:3c:9e:db:ac:75:88:95:40:fc:ce:b7:ba:5f:67:76:
50:3f:d4:d3:17:fd:3d:5d:15:73:16:f6:5e:99:cf:64:18:97:
40:cf:73:f4:69:14:e3:a7:9e:cd:89:62:cd:ee:d4:a4:ed:a9:
73:2b:e5:6f:aa:1a:ed:58:64:bc:75:97:d8:8e:ec:8a:a5:a4:
4e:ee:9f:5a:c9:7e:cf:f1:64:e7:e6:fd:ea:81:57:9f:9e:a9:
56:d9:6c:07:12:93:81:f1:df:8e:0d:99:2a:0d:af:d7:1f:4f:
4d:bb:f9:09:34:64:f9:0f:86:31:87:43:e7:cd:a9:57:cb:51:
42:0b:e4:ed:d0:21:81:67:a7:ed:03:1d:3f:fb:9d:5b:f4:9c:
03:e2:54:96:69:a0:f2:17:3d:c8:7a:19:a9:56:98:9f:61:92:
72:cd:0a:b9:77:64:87:11:29:2f:59:02:b3:79:34:fa:5e:19:
1a:1b:8c:fb:95:08:76:86:62:f0:aa:d7:31:1a:d2:31:81:e5:
0c:79:e4:d5:f0:67:c9:fb:13:f2:6c:c6:80:79:25:dc:a5:d6:
e3:53:27:df:c8:c1:23:b8:7c:d9:85:1d:91:35:66:52:39:a9:
67:b5:73:52:91:45:28:5e:7c:1f:5b:79:78:8a:1c:1d:8d:ce:
62:30:87:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:24 2025 by rpki-client