Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/6c71c4-1869-4064-b87f-ab879256b4db/1/hV45ZFDxfcofp2gm01-cQ9XxagE.roa
File: hV45ZFDxfcofp2gm01-cQ9XxagE.roa (raw, json)
Hash identifier: whbnwbWWXBeR0E9SgbzjzawWgyI2GnuXjqfAm03Nir4=
Subject key identifier: 85:5E:39:64:50:F1:7D:CA:1F:A7:68:26:D3:5F:9C:43:D5:F1:6A:01
Certificate issuer: /CN=238b3637c42a811723b9576bff7b6ff3333ef6cf
Certificate serial: 039671F8
Authority key identifier: 23:8B:36:37:C4:2A:81:17:23:B9:57:6B:FF:7B:6F:F3:33:3E:F6:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4s2N8QqgRcjuVdr_3tv8zM-9s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/6c71c4-1869-4064-b87f-ab879256b4db/1/hV45ZFDxfcofp2gm01-cQ9XxagE.roa
Signing time: Sat 01 Jan 2022 02:55:51 +0000
ROA not before: Sat 01 Jan 2022 02:55:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206776
IP address blocks: 45.89.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60191224 (0x39671f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238b3637c42a811723b9576bff7b6ff3333ef6cf
Validity
Not Before: Jan 1 02:55:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=855e396450f17dca1fa76826d35f9c43d5f16a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:74:18:90:12:90:b5:12:e5:29:9b:f5:7d:
2c:68:af:06:ec:b1:85:f6:e9:01:25:8e:61:2b:2f:
97:bb:85:d5:43:0f:fc:7e:51:e5:c9:92:24:72:96:
d1:e0:d1:86:de:42:45:c1:53:e5:1c:93:47:33:cb:
16:57:55:c8:32:6f:40:3f:89:8a:5e:da:9a:04:f4:
69:04:f0:c4:75:e2:6c:46:98:f0:c8:10:95:60:3d:
dc:e3:45:ab:d4:9b:a5:b6:68:c6:44:34:8d:69:91:
6d:fa:bb:3f:2e:32:18:c4:5b:4d:2f:60:e7:79:ce:
c6:a4:b2:ec:eb:e1:eb:1d:5f:61:c5:c2:74:f6:7a:
aa:a4:b2:eb:3b:d3:a0:ea:8e:2d:a9:14:53:db:da:
f6:11:c5:d8:2c:f8:e8:8b:a6:46:a7:92:f2:6a:46:
a2:0e:32:13:8a:e5:9a:a0:4d:2b:37:b3:be:f8:d1:
ca:ff:5f:62:19:25:04:4b:09:0b:d2:12:5d:86:be:
51:2e:b3:1e:73:37:27:dd:09:44:4e:48:be:a1:04:
70:57:a3:aa:28:c7:f1:de:16:49:20:7f:49:94:b5:
63:6c:80:50:d7:18:6d:81:87:a0:d3:6c:59:af:21:
a4:3a:dc:bf:cb:81:cc:59:d9:1e:e6:e1:d1:39:4d:
66:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5E:39:64:50:F1:7D:CA:1F:A7:68:26:D3:5F:9C:43:D5:F1:6A:01
X509v3 Authority Key Identifier:
keyid:23:8B:36:37:C4:2A:81:17:23:B9:57:6B:FF:7B:6F:F3:33:3E:F6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4s2N8QqgRcjuVdr_3tv8zM-9s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/6c71c4-1869-4064-b87f-ab879256b4db/1/hV45ZFDxfcofp2gm01-cQ9XxagE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/6c71c4-1869-4064-b87f-ab879256b4db/1/I4s2N8QqgRcjuVdr_3tv8zM-9s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.244.0/24
Signature Algorithm: sha256WithRSAEncryption
ec:ef:bc:5b:55:2c:66:34:af:af:7d:98:95:04:58:83:8d:ec:
b6:c9:d0:30:14:ef:1b:e1:de:b1:bc:43:97:bd:26:fc:b4:93:
49:89:ac:8e:b9:ac:b8:59:39:81:0c:d1:26:ea:5b:59:eb:a8:
06:f5:ea:5a:43:27:8b:8c:fe:41:e0:81:f4:2b:4b:9e:cf:f9:
6a:01:ce:54:4b:c7:16:59:c4:d2:82:3a:0a:9a:2f:97:74:3a:
d1:e2:cf:7d:4c:9a:2a:15:f5:b3:3c:65:5a:14:97:c4:2f:ff:
9d:ca:0d:ba:a7:90:b6:b1:bb:a2:e3:bd:cf:9d:19:3e:d0:a1:
1e:93:f0:8a:e2:31:aa:7f:8c:c7:95:72:78:2e:56:ca:c7:7c:
10:0d:eb:cc:7c:f8:a2:05:c5:11:0f:5a:7a:e9:ac:b1:bf:f3:
51:e7:82:ea:8d:07:ac:5a:08:d7:81:01:62:df:14:83:48:2b:
0b:de:bd:3f:82:7c:f5:d7:58:c8:07:66:d8:64:24:6e:2c:6d:
7d:51:ca:99:13:9c:61:ab:8b:51:da:fa:d8:68:4f:17:83:9a:
50:02:e5:a2:cb:64:b4:01:2d:b6:d4:71:0f:68:9c:f4:5c:37:
d9:2e:ae:b4:59:f0:42:42:33:4f:ed:68:f7:4e:40:d4:cc:27:
ed:45:44:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:26 2025 by rpki-client