Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/khD3qADb68_tRjv22aA7vgB5qMs.roa
File: khD3qADb68_tRjv22aA7vgB5qMs.roa (raw, json)
Hash identifier: jg6Pb1BhrAxAL5EpaujTgHQ0Ki8zQqsq/vKaJVwrDS0=
Subject key identifier: 92:10:F7:A8:00:DB:EB:CF:ED:46:3B:F6:D9:A0:3B:BE:00:79:A8:CB
Certificate issuer: /CN=ff94c4b1d33ba3094ec388f7a73d8d39cd950861
Certificate serial: 01856F0B300A4DCE3000B79A3353EB3639E7
Authority key identifier: FF:94:C4:B1:D3:3B:A3:09:4E:C3:88:F7:A7:3D:8D:39:CD:95:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5TEsdM7owlOw4j3pz2NOc2VCGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/khD3qADb68_tRjv22aA7vgB5qMs.roa
Signing time: Sun 01 Jan 2023 20:34:42 +0000
ROA not before: Sun 01 Jan 2023 20:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47536
IP address blocks: 45.12.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:30:0a:4d:ce:30:00:b7:9a:33:53:eb:36:39:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff94c4b1d33ba3094ec388f7a73d8d39cd950861
Validity
Not Before: Jan 1 20:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9210f7a800dbebcfed463bf6d9a03bbe0079a8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:24:01:49:85:3d:56:b9:47:78:65:7c:0e:7b:
06:c2:54:3c:6b:9d:79:05:cc:04:03:7e:14:b6:2e:
06:b0:45:d5:9f:54:49:e5:3c:97:74:ce:1a:28:03:
bb:ec:29:3c:a3:a3:d3:3a:d9:d7:33:a7:67:5e:10:
aa:8a:68:7f:55:57:52:fc:2c:67:f0:17:04:33:cf:
52:82:a1:09:42:67:18:69:8e:cf:70:48:0b:e8:79:
ff:5b:96:7b:d0:1f:2b:09:1f:12:1a:f8:6c:e0:c4:
fc:a8:6f:20:e1:a3:7a:d4:d7:33:6e:16:fc:9f:6a:
6e:35:ea:ac:1f:11:32:7b:2d:6d:b1:0e:0e:8b:d8:
ef:36:f0:cb:4d:2b:88:66:2e:ae:ae:c3:88:ef:67:
37:a7:58:75:0b:36:57:ae:8f:d9:dc:b7:5a:ce:e8:
90:3e:40:0f:af:b9:78:7e:0f:92:3c:af:6b:d4:d9:
75:79:ff:61:b0:c4:90:25:7a:d7:f3:d0:3a:1b:e2:
72:ec:34:79:22:cd:d2:24:38:d7:07:a4:3e:7b:3a:
68:71:64:f7:94:fe:ed:90:3d:e7:8a:5f:ff:dd:5e:
02:d3:e1:33:57:45:bb:33:7b:44:de:96:b4:b8:79:
68:bd:c5:cd:13:d0:22:40:d0:7f:51:19:7e:5b:3f:
09:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:10:F7:A8:00:DB:EB:CF:ED:46:3B:F6:D9:A0:3B:BE:00:79:A8:CB
X509v3 Authority Key Identifier:
keyid:FF:94:C4:B1:D3:3B:A3:09:4E:C3:88:F7:A7:3D:8D:39:CD:95:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5TEsdM7owlOw4j3pz2NOc2VCGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/khD3qADb68_tRjv22aA7vgB5qMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/_5TEsdM7owlOw4j3pz2NOc2VCGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.201.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:83:ea:85:6b:40:73:d5:05:dd:8e:68:d3:3f:c6:b2:2f:39:
55:88:83:f9:56:9f:c7:ce:91:52:2d:c0:91:eb:a1:ad:64:84:
ec:1f:8c:2e:8b:68:d5:c6:81:8c:70:34:44:9b:20:11:a8:84:
2a:ea:c2:a1:de:45:61:a8:23:f9:b5:f4:d0:97:be:ae:04:4d:
74:42:3c:7e:f8:76:7e:68:47:22:03:8c:76:e7:6a:80:4e:97:
6c:0f:97:29:d2:53:d1:f4:9b:63:f1:93:23:13:a5:cd:3a:b1:
2e:08:b8:d5:9d:37:a4:4c:7c:65:32:15:d5:ae:89:49:32:de:
9d:e6:e4:03:93:5e:c8:98:f7:32:d9:dc:64:1b:df:48:cd:04:
59:d0:a9:a6:94:f2:42:9e:f3:51:e6:cd:ef:ed:93:e7:e8:91:
91:7b:7d:af:a9:2b:ff:81:9c:72:03:16:0f:a1:a9:bc:b2:7b:
12:82:5f:f8:b1:9d:62:d2:eb:ae:e0:9d:58:de:6b:a1:94:4f:
ef:e3:e7:33:82:27:44:89:9f:68:02:05:6b:1a:24:91:9e:87:
a3:10:2c:6a:49:7e:68:b6:f0:6b:05:0d:2c:55:6f:42:ee:b1:
e0:0d:84:50:3a:ad:7a:e0:b9:e9:ea:a8:8c:91:a5:45:62:b0:
de:a3:07:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:22:18 2025 by rpki-client