Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/stXMEQrib0dPSWBdRwIB4jPd88M.roa
File: stXMEQrib0dPSWBdRwIB4jPd88M.roa (raw, json)
Hash identifier: 9DmOKWCQUFGZnjb9pXxBY0xhj6Qex64UkWgLjGzXLPA=
Subject key identifier: B2:D5:CC:11:0A:E2:6F:47:4F:49:60:5D:47:02:01:E2:33:DD:F3:C3
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018BD950EDF434D5499A2ABDCB2282F8B95D
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/stXMEQrib0dPSWBdRwIB4jPd88M.roa
Signing time: Thu 16 Nov 2023 18:07:21 +0000
ROA not before: Thu 16 Nov 2023 18:07:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.147.46.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d9:50:ed:f4:34:d5:49:9a:2a:bd:cb:22:82:f8:b9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Nov 16 18:07:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2d5cc110ae26f474f49605d470201e233ddf3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:96:11:45:50:2f:e4:ef:78:e1:d2:85:65:29:
39:db:f3:b2:64:37:65:b9:e0:d7:d9:f0:8c:b9:eb:
21:f7:c0:1a:da:ed:97:8e:28:a0:a4:b3:9e:0f:ac:
5c:f9:6d:a9:3b:1d:41:0e:e1:06:6c:54:b9:23:58:
1d:d9:21:bb:19:63:a4:ec:d7:26:98:67:46:67:84:
10:60:f5:f1:95:44:72:68:a9:23:65:2f:a0:f7:46:
20:5d:19:38:43:63:0e:64:e0:19:6c:88:6a:81:a2:
f8:f0:e6:e3:8a:c8:0a:c2:ba:aa:8b:b0:4a:7e:a2:
b8:e9:c1:d6:05:dd:b2:77:43:e8:41:9d:81:20:93:
86:27:e3:ba:f4:c3:61:1d:ca:27:07:24:df:be:59:
1b:e2:cf:b6:68:9f:1d:29:c9:e1:35:aa:ab:e5:17:
f5:e7:67:e6:90:55:7b:ee:61:6e:9f:02:d9:1b:2a:
e2:6b:f9:e2:ae:3a:46:88:1a:47:75:14:be:49:e2:
10:01:9d:56:98:36:38:3e:57:ed:5f:d3:40:73:aa:
98:95:a9:b9:3a:80:94:2b:55:29:09:22:69:2a:a5:
e3:4e:e8:bf:75:97:27:e2:4c:04:b4:b3:7e:66:d1:
f3:4c:75:cc:5b:b0:33:a2:0b:e5:53:bd:c4:ab:54:
ee:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D5:CC:11:0A:E2:6F:47:4F:49:60:5D:47:02:01:E2:33:DD:F3:C3
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/stXMEQrib0dPSWBdRwIB4jPd88M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.150.0/24
45.147.46.0/24
77.83.201.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:e1:51:3c:c1:5c:e5:03:8d:9a:94:8a:ba:f1:4a:c9:f6:45:
3c:00:26:94:48:9c:10:23:b8:b2:f7:c9:3d:71:fd:19:cf:62:
7a:6a:6a:d1:5b:a7:95:4b:93:64:e0:f6:d6:c6:89:fe:9f:96:
ed:37:a2:25:5f:10:dd:c8:8f:c7:0d:97:34:cb:be:6d:2f:8c:
ef:54:b6:df:1d:e8:57:3b:30:a1:63:1f:ab:d0:c3:f6:93:4c:
62:8d:7f:f8:d4:c7:ba:41:9c:91:2d:3f:e0:75:54:1d:76:85:
c6:b7:5b:71:77:f4:bb:c1:2d:2c:d9:71:06:2c:a2:8f:0a:6b:
ae:6b:8d:7f:80:87:7b:d8:38:f2:b4:4e:ef:33:d9:bc:a4:a1:
d5:b5:d1:fb:49:7a:a9:d9:99:2e:39:3e:0c:a4:8f:30:57:d0:
4d:7d:28:99:43:2f:28:37:0b:b3:50:90:1c:64:40:7c:77:9b:
d8:b0:f6:20:53:e1:f3:12:40:f6:44:15:95:9c:d0:21:b1:c9:
64:12:45:b8:b6:09:13:61:4f:55:27:9f:4d:c1:a9:c1:86:f8:
fd:67:2f:24:8a:83:8a:9c:eb:eb:db:95:9a:78:1c:e1:70:4c:
8b:7c:0c:9b:1e:62:17:1c:cc:b7:44:14:81:21:8d:0d:dc:c7:
ed:21:4e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:36 2025 by rpki-client