Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/6c71c4-1869-4064-b87f-ab879256b4db/1/6hRwlSnCTaod4opQ0CTgo1xFIkE.roa
File: 6hRwlSnCTaod4opQ0CTgo1xFIkE.roa (raw, json)
Hash identifier: 22yhqmJtXBk11UHgCf9fA9qMO4StkqudrM9RGxrcDAY=
Subject key identifier: EA:14:70:95:29:C2:4D:AA:1D:E2:8A:50:D0:24:E0:A3:5C:45:22:41
Certificate issuer: /CN=238b3637c42a811723b9576bff7b6ff3333ef6cf
Certificate serial: 039638ED
Authority key identifier: 23:8B:36:37:C4:2A:81:17:23:B9:57:6B:FF:7B:6F:F3:33:3E:F6:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4s2N8QqgRcjuVdr_3tv8zM-9s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/6c71c4-1869-4064-b87f-ab879256b4db/1/6hRwlSnCTaod4opQ0CTgo1xFIkE.roa
Signing time: Sat 01 Jan 2022 02:55:51 +0000
ROA not before: Sat 01 Jan 2022 02:55:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42926
IP address blocks: 45.89.246.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60176621 (0x39638ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238b3637c42a811723b9576bff7b6ff3333ef6cf
Validity
Not Before: Jan 1 02:55:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea14709529c24daa1de28a50d024e0a35c452241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:29:da:db:4e:b9:26:6f:31:93:c6:41:18:e6:
4b:da:ad:f4:93:21:aa:43:58:ad:71:14:04:f9:ce:
8b:d0:9a:5f:db:e0:9c:17:66:0b:d6:71:46:10:ed:
b8:7c:cf:76:37:d5:53:e7:83:ae:3b:48:d0:0c:68:
d9:76:16:20:01:9b:17:cf:49:0c:b4:4b:36:b2:cc:
71:fe:9e:e4:03:f5:07:29:5a:2e:37:f0:dc:1c:93:
19:4c:5d:68:c8:e8:c0:b6:24:97:e6:3a:5f:ed:f4:
1f:d0:a0:6c:d8:45:46:7d:64:bc:0a:e4:2e:56:9a:
80:d2:c9:9f:08:39:50:a1:87:4f:e9:cb:27:2f:3e:
48:e6:a0:e9:05:ed:9c:18:64:e6:c9:93:90:37:8f:
f5:3a:39:5b:8f:ba:82:f7:d9:ec:69:9e:48:ca:b9:
35:ec:c2:5b:ce:ba:23:2a:0d:07:cc:8a:70:d0:0d:
8a:75:71:cb:66:0c:56:cd:e8:76:31:5b:3b:f7:fd:
3a:a1:b2:e2:d0:cf:1e:76:03:15:c9:94:77:88:26:
63:73:65:b1:a8:46:a3:20:bc:62:fe:fa:7c:78:d8:
ab:fc:76:4f:a8:6e:85:f8:2a:0c:1c:6c:1e:b2:48:
cd:41:57:c9:f2:09:43:71:ef:2c:13:19:c5:fd:71:
76:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:14:70:95:29:C2:4D:AA:1D:E2:8A:50:D0:24:E0:A3:5C:45:22:41
X509v3 Authority Key Identifier:
keyid:23:8B:36:37:C4:2A:81:17:23:B9:57:6B:FF:7B:6F:F3:33:3E:F6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4s2N8QqgRcjuVdr_3tv8zM-9s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/6c71c4-1869-4064-b87f-ab879256b4db/1/6hRwlSnCTaod4opQ0CTgo1xFIkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/6c71c4-1869-4064-b87f-ab879256b4db/1/I4s2N8QqgRcjuVdr_3tv8zM-9s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.246.0/23
Signature Algorithm: sha256WithRSAEncryption
be:98:e0:4d:19:a5:e0:27:96:0c:0c:50:71:66:bb:1e:e1:72:
38:3f:07:dc:95:00:15:82:d6:d7:13:de:a7:14:04:e7:05:50:
e4:f6:74:8d:53:40:78:a1:51:e4:23:c6:cd:81:5c:20:73:4d:
e0:5e:68:53:a8:d2:39:e2:08:35:22:6e:0c:b7:95:cd:93:d8:
f8:88:86:de:f4:45:37:40:72:0a:ce:0e:50:9a:6a:7b:a8:2a:
22:c6:f9:a4:be:fa:dd:65:84:0f:b4:36:f4:8b:9a:c9:a1:bb:
1a:5d:9c:a3:01:03:e1:13:17:23:33:ec:4c:cf:f3:d7:27:ee:
99:4d:42:aa:5a:80:54:be:58:91:26:a6:79:ce:7f:81:01:39:
cb:72:a2:b1:68:8b:d0:79:6c:e5:d1:65:79:22:ff:83:6a:9c:
d7:73:2a:31:19:0c:58:0d:9a:e8:59:8c:dd:67:78:29:b9:63:
94:21:a2:f0:ea:52:b4:f4:d3:89:36:ac:c6:bd:15:82:0b:ee:
dd:65:d8:fb:be:a7:18:4c:d6:30:b4:89:9d:d6:84:64:7a:a4:
3b:6e:93:a8:f2:79:bb:b3:49:c6:4b:46:82:e5:e2:29:d1:aa:
cb:5b:49:44:c5:29:23:99:65:7e:21:16:5b:9c:03:c4:3e:2b:
cf:d9:4a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:05 2025 by rpki-client