Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/HpRk_8AAabfUoM4F4UXxlwr78Ls.roa
File: HpRk_8AAabfUoM4F4UXxlwr78Ls.roa (raw, json)
Hash identifier: 5yCWKLhKd/MkTFtE5y7CE5K7q87IaMZe/G+vqaXHItY=
Subject key identifier: 1E:94:64:FF:C0:00:69:B7:D4:A0:CE:05:E1:45:F1:97:0A:FB:F0:BB
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 0184490358F3FBC96936BE19427B0C479D1B
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/HpRk_8AAabfUoM4F4UXxlwr78Ls.roa
Signing time: Sat 05 Nov 2022 18:17:46 +0000
ROA not before: Sat 05 Nov 2022 18:17:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33387
IP address blocks: 45.138.14.0/24 maxlen: 24
45.138.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:49:03:58:f3:fb:c9:69:36:be:19:42:7b:0c:47:9d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Nov 5 18:17:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e9464ffc00069b7d4a0ce05e145f1970afbf0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:04:21:2a:30:c1:4f:c2:5c:b0:80:93:41:
d7:d8:42:db:71:e9:e5:57:e8:b0:bb:8c:85:78:1f:
c9:30:e5:a9:11:ac:56:83:5a:d3:d0:94:52:64:be:
f3:62:6a:f9:d8:0b:57:f7:2b:9e:ea:0d:25:11:25:
c8:7c:7b:6a:e2:4f:cc:10:19:83:51:dc:4c:b0:7f:
39:d3:7d:47:21:7e:cb:00:7c:bb:f4:63:15:1f:3d:
4d:54:b4:7c:9a:d3:df:26:cf:0a:73:a3:d2:7c:34:
f7:ff:80:da:37:b9:10:c4:08:7a:7f:6d:30:ea:3f:
bb:19:58:5b:7f:a8:0e:f2:a0:7a:89:5d:54:7c:d5:
fa:6a:8e:9c:e8:b6:b5:72:45:a0:d7:4f:0a:bc:06:
b5:37:33:c7:52:44:31:47:01:ca:bb:75:f3:00:3c:
e0:d4:52:f1:c5:c4:0f:34:73:ac:b1:98:0c:be:da:
06:dd:33:d3:45:30:4f:31:ba:80:41:d5:ed:ed:8e:
83:01:8c:fa:e1:7d:dc:09:70:63:64:f8:e3:3a:bd:
ca:89:eb:71:0b:c6:b6:bf:02:2e:95:2f:b4:c1:9e:
a6:41:45:a7:3b:82:9c:7b:9d:44:45:ba:61:dd:b2:
6e:31:b4:13:51:a7:88:65:52:9c:f5:49:75:40:ab:
ab:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:94:64:FF:C0:00:69:B7:D4:A0:CE:05:E1:45:F1:97:0A:FB:F0:BB
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/HpRk_8AAabfUoM4F4UXxlwr78Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.14.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:1b:d4:c0:66:91:6b:a5:5e:56:30:e5:a7:cd:29:61:fd:f6:
ce:c7:3a:44:2f:b2:12:93:14:a1:b8:4a:12:60:64:b3:c0:18:
e2:b6:43:2f:29:05:37:0d:27:0b:da:3b:f4:b6:75:ef:89:f5:
51:7e:f0:3d:92:1c:0d:8a:3b:04:0f:5b:5f:7b:27:30:93:49:
6a:4e:bb:83:0f:61:f7:19:23:0c:f1:7b:87:a4:6d:73:8e:fe:
94:33:20:97:d8:8d:e5:10:38:99:9e:54:f9:52:b1:58:cf:8f:
bd:f8:8c:68:da:fd:9b:aa:c7:55:49:2b:6a:8d:3c:02:0a:a0:
4e:c7:cb:c9:0a:c7:0f:9b:0c:dc:20:02:e5:33:9e:34:c8:9d:
50:50:33:34:28:c9:43:83:be:85:37:53:cd:e2:ea:87:82:b3:
0d:88:c9:eb:52:35:bc:c0:8b:38:1c:6a:27:a1:d9:80:af:83:
99:6f:7b:8b:cb:43:08:b5:59:bb:6c:f8:a6:ea:83:06:41:6d:
31:9e:fb:fc:37:c8:94:3f:1e:e3:55:68:cc:91:e7:cb:ba:31:
be:68:da:88:a3:59:45:78:93:b9:35:95:03:a1:34:92:34:dd:
ad:6f:31:f5:ff:3f:4d:e0:0a:cc:21:18:a0:c2:5b:b3:66:66:
82:2d:2e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:42 2025 by rpki-client