Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/gbuy3Ar3oeZBKHvCxntEihZQStI.roa
File: gbuy3Ar3oeZBKHvCxntEihZQStI.roa (raw, json)
Hash identifier: yxZPkN/11NxzfixuVABMabXNuxcyLszV3WY2wl93v14=
Subject key identifier: 81:BB:B2:DC:0A:F7:A1:E6:41:28:7B:C2:C6:7B:44:8A:16:50:4A:D2
Certificate issuer: /CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Certificate serial: 018FF42E52EA0ACFF37537CD8F3355657455
Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/gbuy3Ar3oeZBKHvCxntEihZQStI.roa
Signing time: Fri 07 Jun 2024 19:30:27 +0000
ROA not before: Fri 07 Jun 2024 19:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 45.83.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f4:2e:52:ea:0a:cf:f3:75:37:cd:8f:33:55:65:74:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Validity
Not Before: Jun 7 19:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81bbb2dc0af7a1e641287bc2c67b448a16504ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a7:8a:0f:f8:bb:6f:25:8c:a9:d9:b0:f9:2a:
a1:d9:fa:76:bb:a0:40:2d:4b:e5:84:26:e4:34:7a:
af:5c:5f:f0:1e:a3:24:4a:4e:0e:95:fc:3a:60:41:
50:84:d1:4a:69:41:3a:43:d4:3d:10:52:5a:92:ae:
73:ed:a6:89:94:b3:ea:17:1a:ba:06:cf:ad:53:af:
4c:74:79:28:1e:ed:86:38:80:0b:06:0e:80:27:d8:
55:74:d6:81:e5:c1:cf:da:75:52:4d:bb:dd:e7:36:
dd:af:ea:45:e7:c2:21:7f:15:30:fe:60:39:ca:1c:
ea:91:38:a3:a1:0d:93:57:e0:5c:0f:43:d4:52:87:
55:8e:09:f3:8c:13:5a:e9:7f:17:b4:90:44:03:88:
87:3f:03:3f:5b:52:f9:84:e5:bc:d5:4e:0b:d3:9d:
ef:e0:67:b7:43:00:dc:64:e8:bd:e3:bb:70:b5:53:
a6:4c:51:6f:dc:ee:c8:88:31:d2:c8:74:44:86:7d:
9d:05:69:06:e4:f4:cc:ee:82:b0:61:aa:68:10:1e:
40:ea:fd:0f:ef:5c:65:2a:28:7f:84:42:91:d5:77:
2a:6b:fb:c1:5c:a0:8b:3a:6b:2a:68:af:85:c7:77:
53:81:cf:f4:90:5b:d0:f8:83:a8:a8:49:8c:06:db:
1c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BB:B2:DC:0A:F7:A1:E6:41:28:7B:C2:C6:7B:44:8A:16:50:4A:D2
X509v3 Authority Key Identifier:
keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/gbuy3Ar3oeZBKHvCxntEihZQStI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.200.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:9f:6e:ad:ed:c1:d9:6f:3e:40:5f:40:c4:0c:26:31:84:ec:
cf:5e:da:8e:9a:64:97:ed:f8:d2:3c:42:02:db:17:9f:fb:dc:
6e:5c:3e:5b:7f:24:68:56:bb:01:ac:67:93:d7:f5:47:82:3d:
a8:72:6d:fa:26:72:31:2e:4a:ef:21:0a:57:0e:4e:d2:b0:fb:
39:73:c8:c6:9d:0d:54:cb:42:e5:c6:ca:2b:15:c8:dd:a4:d9:
77:74:a2:ae:fc:5a:b4:4d:10:b0:3a:54:b2:11:57:ba:31:41:
c5:6f:fa:3a:f7:19:e8:e2:a1:16:06:64:b7:a2:b1:3b:54:a4:
f9:29:e4:db:84:bc:bd:1f:f2:01:1c:6b:6d:c9:ff:9c:6c:95:
1b:3d:98:0c:0e:70:bc:a0:58:c8:ee:0e:81:00:57:3e:8d:81:
4a:08:73:ce:7d:11:cc:62:da:31:07:b7:23:5e:eb:50:55:44:
e9:70:e8:40:0d:93:78:02:68:88:ff:5e:c3:2b:af:41:1d:56:
b5:ce:1b:a1:55:5b:3a:25:b0:99:02:6a:b8:25:7b:a5:7e:ce:
7d:6d:d9:5f:7a:b0:57:58:a0:33:ec:a6:85:5c:2c:3c:82:04:
98:7a:5c:2f:3a:4c:45:a4:40:ff:09:3a:64:55:73:f2:58:d4:
97:fa:a8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:04 2025 by rpki-client