Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/706im6gwoo1fylpd6m7-g92PGiA.roa
File: 706im6gwoo1fylpd6m7-g92PGiA.roa (raw, json)
Hash identifier: ga2E16t/aYo/TS/qbdpEvVy7WplATkKJlO8RZCw7ovE=
Subject key identifier: EF:4E:A2:9B:A8:30:A2:8D:5F:CA:5A:5D:EA:6E:FE:83:DD:8F:1A:20
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 018580E2C328D0354D70240A2129A2C2DCFF
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/706im6gwoo1fylpd6m7-g92PGiA.roa
Signing time: Thu 05 Jan 2023 07:43:42 +0000
ROA not before: Thu 05 Jan 2023 07:43:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.138.12.0/22 maxlen: 22
193.135.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:80:e2:c3:28:d0:35:4d:70:24:0a:21:29:a2:c2:dc:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Jan 5 07:43:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef4ea29ba830a28d5fca5a5dea6efe83dd8f1a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:60:67:b0:72:92:3e:89:5e:3c:b6:0c:f5:0d:
f7:48:8c:8c:bf:ac:46:3c:bd:d6:37:9c:30:14:e4:
3a:4e:56:ec:00:4e:c3:75:43:33:14:b3:9a:f1:e7:
10:63:04:a2:11:41:ea:93:34:3f:9c:ec:cf:6c:be:
17:7c:9f:de:21:c2:41:d3:3f:98:e1:f6:30:de:57:
e7:6a:74:33:67:ee:cb:73:82:e9:0e:f4:49:24:ec:
ba:61:62:42:58:8a:e4:cd:16:46:e6:d0:f5:54:35:
2c:a6:39:05:f2:d7:c0:46:0b:c8:bf:0d:30:2d:ad:
f2:da:b5:00:a8:b3:79:35:f8:9d:83:07:21:f5:ab:
c0:fa:98:5f:6f:5b:84:85:2e:77:30:9c:4c:46:3c:
f4:db:42:67:54:7a:70:f0:f1:d0:54:95:a2:b9:9d:
51:96:36:a8:4d:c8:2e:a9:43:49:94:82:42:f5:33:
79:31:b8:18:22:06:c6:4b:11:0c:32:24:c9:37:2e:
d1:1f:07:8f:75:0f:8c:f9:f3:42:7d:9d:0c:e9:a2:
ae:73:0e:85:0a:10:ee:0d:64:90:fa:23:d3:8d:e6:
19:6c:08:f1:cd:de:62:e6:44:d4:db:c3:87:f3:02:
71:06:99:ca:68:ca:fb:b5:25:9f:2c:2a:0b:77:7d:
b5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4E:A2:9B:A8:30:A2:8D:5F:CA:5A:5D:EA:6E:FE:83:DD:8F:1A:20
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/706im6gwoo1fylpd6m7-g92PGiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.12.0/22
193.135.174.0/24
Signature Algorithm: sha256WithRSAEncryption
49:c4:b4:32:3c:2f:ae:d8:3d:a7:25:64:71:fb:d2:68:51:17:
56:c2:4b:e7:dd:e1:23:a6:57:46:76:98:06:af:f8:dd:76:f1:
d9:09:16:5a:c5:5e:3a:3c:f1:fc:1d:81:37:b7:32:91:c7:f4:
70:89:d8:1f:26:6f:5e:5f:d5:90:eb:a2:24:8c:64:ad:9b:6b:
83:39:81:20:5b:2e:7f:8b:11:df:b5:bf:38:6e:a5:28:4c:9d:
ec:e5:79:f5:59:3f:0c:8e:c2:6f:c6:0e:27:94:19:95:77:82:
52:17:15:f0:f4:cb:37:6b:51:21:27:b8:8c:b5:a6:96:85:ae:
ef:2d:9a:2b:ed:43:f2:2a:46:13:e4:9b:e7:42:b3:04:55:3f:
43:c8:82:75:82:5d:c4:7d:58:0f:17:4e:64:7a:b4:18:c4:6f:
c7:0d:37:99:2c:72:30:1b:0b:f4:94:a6:d8:df:9a:f0:12:ac:
5a:f4:7b:cd:a2:c1:fd:1e:59:ca:8c:99:ac:25:e4:d3:c6:c9:
d0:64:3a:f9:33:31:ce:32:5e:1c:49:15:98:48:82:d1:d8:08:
1c:b2:2e:a1:2d:ba:98:ac:67:6f:9e:cf:c0:3f:63:c0:8e:46:
f2:2f:58:40:81:5b:e8:45:62:e5:b2:e3:32:96:a4:bb:9f:89:
95:bd:30:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:23 2025 by rpki-client