Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b1e1c5-621b-458a-8e53-de37a01c6c39/1/1-akFc2AkqX1K3PcD5dBgrh95sKI.roa
File: 1-akFc2AkqX1K3PcD5dBgrh95sKI.roa (raw, json)
Hash identifier: Ptj1OgzVfWJrp7m04q28U5Ato2JoHIqCTmXeJI6fhxs=
Subject key identifier: F9:A9:05:73:60:24:A9:7D:4A:DC:F7:03:E5:D0:60:AE:1F:79:B0:A2
Certificate issuer: /CN=07ff23644ee765f1731dbd559e608bdc0053c34b
Certificate serial: 01867525CEB2D038B4BF260A013B12177977
Authority key identifier: 07:FF:23:64:4E:E7:65:F1:73:1D:BD:55:9E:60:8B:DC:00:53:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_8jZE7nZfFzHb1VnmCL3ABTw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1e1c5-621b-458a-8e53-de37a01c6c39/1/1-akFc2AkqX1K3PcD5dBgrh95sKI.roa
Signing time: Tue 21 Feb 2023 18:04:17 +0000
ROA not before: Tue 21 Feb 2023 18:04:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199785
IP address blocks: 45.132.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:75:25:ce:b2:d0:38:b4:bf:26:0a:01:3b:12:17:79:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ff23644ee765f1731dbd559e608bdc0053c34b
Validity
Not Before: Feb 21 18:04:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9a905736024a97d4adcf703e5d060ae1f79b0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:98:39:35:fd:22:37:59:6a:7e:ab:36:50:48:
be:03:35:26:45:93:41:52:83:4e:ee:8c:b2:42:17:
8d:b1:5d:e2:73:66:d9:97:17:3b:15:42:5f:44:ae:
87:dd:6b:e9:75:38:d6:74:5d:5b:ec:64:e9:b8:6c:
ed:8a:2b:c7:19:c1:05:e3:34:34:ca:5c:26:51:7f:
36:cd:48:43:bb:bb:85:84:2f:ff:dc:eb:35:d8:dd:
a1:04:d2:05:14:5f:b1:43:ca:f8:8a:c1:2c:aa:03:
b0:ae:dd:91:ce:19:a6:f1:73:9d:d2:ad:3e:3a:46:
48:63:25:fe:0a:f3:e9:43:84:a7:11:bb:6f:99:f5:
9d:92:e2:20:32:ab:af:a2:d6:39:bf:c8:99:03:68:
02:48:2f:ff:0c:22:2a:83:06:59:18:47:23:92:4a:
3d:45:fc:c3:8d:8c:a0:ce:41:08:22:b0:cc:db:68:
0e:5c:b3:db:5e:af:10:48:53:95:c4:bb:8d:c5:e2:
57:22:27:5f:af:d0:46:49:1d:f7:ea:29:82:60:7f:
b5:ed:7e:89:c4:ed:d3:24:6e:0b:27:7c:0c:e1:2d:
fb:e4:c6:9d:29:0a:78:9f:3e:c0:c0:e3:05:dd:9e:
8a:50:82:bd:b3:aa:02:0b:a1:19:0c:f5:4b:35:6b:
e6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A9:05:73:60:24:A9:7D:4A:DC:F7:03:E5:D0:60:AE:1F:79:B0:A2
X509v3 Authority Key Identifier:
keyid:07:FF:23:64:4E:E7:65:F1:73:1D:BD:55:9E:60:8B:DC:00:53:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_8jZE7nZfFzHb1VnmCL3ABTw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1e1c5-621b-458a-8e53-de37a01c6c39/1/1-akFc2AkqX1K3PcD5dBgrh95sKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1e1c5-621b-458a-8e53-de37a01c6c39/1/B_8jZE7nZfFzHb1VnmCL3ABTw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.1.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:16:4d:e0:f2:be:a0:91:6b:6e:f3:c0:fe:fb:f9:5e:4c:58:
e5:9e:f7:09:ad:45:f3:5c:1f:52:f2:ac:b5:19:99:a0:48:09:
9e:74:fa:69:73:33:95:90:db:d6:12:91:0a:81:52:0f:18:05:
4a:bf:b1:e8:3a:bd:d1:bf:ea:6c:c3:ef:32:73:47:98:22:1a:
f6:10:e0:fb:80:ef:c6:67:0c:92:46:fd:93:29:63:6b:ea:d5:
b0:2f:8b:b2:cf:24:fb:fa:19:c7:8d:1c:07:51:ce:88:8d:58:
46:2f:dd:8b:1f:2f:0b:45:fb:4c:aa:2b:65:ad:5c:0d:23:be:
df:c7:81:0c:e7:1d:53:ca:86:8e:0c:9b:9e:a9:84:bc:4b:e0:
16:2c:f5:61:2a:2b:de:de:91:ba:2b:1f:10:c2:48:e2:6a:9d:
1a:91:22:c5:b7:1a:dd:f3:9f:6c:9c:e1:b4:fb:4a:34:0e:c4:
3a:51:4f:44:0d:2b:f2:63:89:d0:ad:b9:7f:8f:ad:5e:e6:8c:
be:b3:3a:ab:c6:96:0a:2d:ee:b5:fd:7a:f6:07:78:f0:2c:b6:
60:2c:bd:ce:a8:ad:d3:66:6f:44:d5:c2:1b:f3:0a:ac:65:1c:
6c:2b:8c:d9:8b:91:4c:d0:fe:bf:9d:cc:42:6d:30:9a:2f:83:
2d:6f:d0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:27 2025 by rpki-client