Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/yESKrGgxIoNV6LyxfZc7FATwxzw.roa
File: yESKrGgxIoNV6LyxfZc7FATwxzw.roa (raw, json)
Hash identifier: +DsEWNLmcf7o+Ur3GrviDeG1YDsaOvBrDY/PSKpLsQI=
Subject key identifier: C8:44:8A:AC:68:31:22:83:55:E8:BC:B1:7D:97:3B:14:04:F0:C7:3C
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018BC5DED827BF94953764214DAA01EC7CC3
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/yESKrGgxIoNV6LyxfZc7FATwxzw.roa
Signing time: Sun 12 Nov 2023 23:29:57 +0000
ROA not before: Sun 12 Nov 2023 23:29:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47516
IP address blocks: 45.131.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c5:de:d8:27:bf:94:95:37:64:21:4d:aa:01:ec:7c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Nov 12 23:29:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8448aac6831228355e8bcb17d973b1404f0c73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:7b:a3:78:59:a1:46:2f:1e:07:ee:e3:26:
b7:bb:dc:64:0f:3c:04:14:d8:f4:3c:a1:f1:a8:a4:
c4:dc:d8:7d:55:26:7a:d3:98:b9:e5:0e:01:6f:7c:
95:6e:96:a9:ff:3e:5d:48:d7:5b:58:68:9f:50:6d:
64:af:82:30:ac:5c:d9:42:48:dd:40:a2:2c:08:55:
09:94:72:47:e9:3f:b0:1b:2f:89:61:c2:21:2a:51:
ff:85:b1:b8:95:e3:d3:5f:e5:41:d9:ab:1d:30:9e:
57:09:46:1a:da:70:0c:9a:82:e3:3a:74:75:be:4e:
61:e6:0b:69:48:b7:ff:73:3d:5f:be:31:78:b8:13:
b8:2c:c6:f0:75:e9:65:d1:59:96:d6:9c:06:84:1a:
21:dd:ce:45:f1:82:52:a8:c5:8b:be:4b:c4:16:15:
d6:98:6f:5e:78:21:de:ca:49:34:97:d4:b9:d1:36:
ae:1f:cd:a6:c9:12:98:5b:b9:11:74:45:f1:17:25:
84:3a:7b:a3:cc:a3:37:8f:46:23:61:c7:8d:35:d6:
cd:62:4b:49:f7:36:1e:69:d3:38:c4:90:1c:60:b4:
e6:f9:c6:89:ca:fe:9c:d0:32:df:2e:d1:52:16:f1:
6c:bb:28:41:5f:ab:24:a7:39:aa:44:b2:64:ae:43:
52:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:44:8A:AC:68:31:22:83:55:E8:BC:B1:7D:97:3B:14:04:F0:C7:3C
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/yESKrGgxIoNV6LyxfZc7FATwxzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.2.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e8:63:82:f4:5b:54:6c:4f:f4:71:19:3a:4a:09:0d:35:fa:
6d:cf:4d:bd:5a:c6:35:b0:4f:9c:89:48:67:ae:a4:22:b2:93:
88:f4:77:f1:14:cc:a2:27:24:b8:27:26:76:ae:0c:c6:c5:ad:
28:7f:a6:40:e6:b7:ab:a0:81:e4:6a:8e:27:9a:35:10:c4:70:
08:7b:94:04:60:0c:36:14:7e:a2:8e:78:d1:81:6d:af:57:ce:
43:d8:63:78:86:53:95:a5:b5:bd:4f:73:5f:1c:f5:fc:7c:08:
73:be:e0:d8:3d:23:12:60:ef:11:fb:3c:4f:03:f1:bb:8b:3a:
c7:34:7a:e5:10:92:3f:a7:b7:8b:dd:1a:16:06:8c:10:e4:13:
b3:a6:d5:a6:ad:44:ab:6f:4b:77:2b:f1:8c:7b:e6:07:e7:73:
fa:ce:2a:2b:5b:bf:3e:41:72:21:e5:49:57:1e:21:c5:ad:27:
d6:e4:5d:51:08:9d:c2:78:49:7b:9b:e5:1c:70:6f:de:8c:3b:
52:63:c7:d9:0b:0d:75:5f:99:c6:81:24:73:f4:7f:14:23:35:
69:af:21:bd:0d:c0:2a:0a:57:d0:1f:52:12:3f:b9:c7:5b:6e:
2d:07:c8:4c:f2:26:43:ac:bb:3b:3a:fe:73:21:e1:0d:46:c0:
42:56:bf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:13 2025 by rpki-client