Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/6Hkf7RgyzpEESxmeHzVPS270TaE.roa
File: 6Hkf7RgyzpEESxmeHzVPS270TaE.roa (raw, json)
Hash identifier: VESDso6pgEjmDQgYCXcVhLJHy/f/SxNGBo+jIVtn/CQ=
Subject key identifier: E8:79:1F:ED:18:32:CE:91:04:4B:19:9E:1F:35:4F:4B:6E:F4:4D:A1
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 01825E3FE9B4A835411359CEFFD9386DF0F7
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/6Hkf7RgyzpEESxmeHzVPS270TaE.roa
Signing time: Tue 02 Aug 2022 11:10:23 +0000
ROA not before: Tue 02 Aug 2022 11:10:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.138.14.0/24 maxlen: 24
45.138.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5e:3f:e9:b4:a8:35:41:13:59:ce:ff:d9:38:6d:f0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Aug 2 11:10:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8791fed1832ce91044b199e1f354f4b6ef44da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e7:d8:89:b9:f5:3d:d5:f7:52:8f:25:91:8a:
2b:20:79:72:da:ae:b4:3c:ce:78:5a:a3:24:af:40:
7d:50:3e:9f:a9:ac:29:c9:cc:6a:be:7d:ff:f0:f8:
94:bc:56:04:ac:e7:ca:20:ba:3e:60:e7:3d:ba:c3:
19:d3:6a:7a:3a:16:73:dd:d9:de:b2:22:ed:41:3c:
e5:27:6d:e9:92:17:a0:e3:f0:81:f0:ff:96:d1:ac:
6d:79:27:6f:6e:b3:0b:5b:a2:e4:ec:31:20:16:13:
ae:2a:20:2e:a2:f4:64:4a:59:d8:58:ba:cd:38:10:
95:e9:c9:4c:33:c6:e3:a5:07:07:b8:44:0a:4f:1f:
b9:96:39:ce:de:24:6a:a3:42:13:cc:e1:45:5b:fb:
0e:15:d9:eb:5e:0f:d4:c1:29:15:16:28:0a:7f:a6:
49:18:69:c3:50:bc:44:66:b4:86:a0:76:fa:92:dd:
a3:c5:91:a6:6c:59:22:6c:30:91:90:b6:a3:a8:b8:
69:eb:0f:f8:6f:cb:d8:f8:84:ae:4a:8c:01:f3:6b:
10:df:25:a7:d2:77:1f:3d:ae:bd:e9:9d:11:96:e0:
c5:a2:a9:e8:ea:be:26:52:68:7d:03:d9:d0:f8:7d:
5c:a0:18:86:8a:b9:5a:39:50:43:67:02:c1:e2:3c:
4b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:79:1F:ED:18:32:CE:91:04:4B:19:9E:1F:35:4F:4B:6E:F4:4D:A1
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/6Hkf7RgyzpEESxmeHzVPS270TaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.14.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:35:46:33:f0:96:69:4f:77:99:6c:ba:64:82:d1:1a:06:90:
67:3a:63:b1:58:e0:80:cc:06:79:04:df:94:ff:26:98:8f:04:
8f:aa:70:b6:08:f6:42:ed:82:b2:33:9e:af:f0:6d:12:f9:c5:
cc:86:79:07:ab:27:91:7b:8c:fd:90:a6:7a:10:f8:a9:e1:18:
6e:e5:de:1e:46:0b:e1:32:0d:3b:5c:38:a3:9c:01:ae:ad:18:
6f:7d:fe:ba:9b:0f:0e:fc:ce:4b:06:cb:9b:db:75:80:30:2e:
25:d5:05:e1:73:ac:89:40:1c:e9:34:49:ee:3c:f8:a4:25:64:
5c:77:91:da:41:32:b1:35:90:b3:29:89:ff:25:69:3b:c4:6c:
2e:bf:6b:48:e9:20:c9:6b:ee:af:d2:00:84:2d:3a:58:07:73:
6e:81:b1:0e:5a:a9:ee:29:01:8c:84:97:54:7f:35:36:4b:25:
7e:10:02:a0:e6:59:d2:6a:30:62:6f:49:35:c6:8a:6e:bf:c9:
7f:b9:50:a0:f7:9d:7b:a9:bb:ae:55:37:87:ec:ca:b1:2b:91:
40:ae:e9:d6:c7:f3:16:19:14:58:f3:3d:05:dc:96:df:8e:ed:
50:d9:e6:ff:83:8e:5a:62:81:f6:d2:b3:3c:a1:6c:6d:92:a5:
2f:cf:42:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:32 2025 by rpki-client