Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/R03r5m7aQHEf4Ug9S_vweFGBKMo.roa
File: R03r5m7aQHEf4Ug9S_vweFGBKMo.roa (raw, json)
Hash identifier: NRCCEv8mzrvFGY8hirSrqsqOgFGOfEK/8NODuGtFnVY=
Subject key identifier: 47:4D:EB:E6:6E:DA:40:71:1F:E1:48:3D:4B:FB:F0:78:51:81:28:CA
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 0184092CBBC1D3DB32A4CE8DF8C8A42D28ED
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/R03r5m7aQHEf4Ug9S_vweFGBKMo.roa
Signing time: Mon 24 Oct 2022 08:47:17 +0000
ROA not before: Mon 24 Oct 2022 08:47:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 152.89.28.0/22 maxlen: 22
45.138.12.0/23 maxlen: 23
91.132.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:09:2c:bb:c1:d3:db:32:a4:ce:8d:f8:c8:a4:2d:28:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Oct 24 08:47:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=474debe66eda40711fe1483d4bfbf078518128ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0e:57:9b:d4:95:84:4f:d0:1a:a9:61:57:e9:
6b:68:5e:26:4e:53:cd:5c:26:90:6d:73:ab:cd:2a:
2a:d1:0a:5e:7c:f7:86:04:cb:07:af:e5:c1:31:a7:
d9:05:ff:9b:7e:c8:b8:fc:c7:8a:c3:96:8b:f3:35:
a3:58:67:d8:ba:b3:55:09:9b:0f:23:6b:86:84:ea:
15:74:10:e5:cd:96:d7:69:9f:e9:39:16:14:57:d2:
9f:3f:3c:9b:8f:01:ea:8c:17:dc:8b:96:80:fe:8d:
23:1b:c2:59:25:3e:a1:c9:6b:f4:a8:7d:59:b2:4f:
a8:1e:8b:ab:66:80:e5:69:8f:79:de:44:4c:d3:4b:
05:49:7f:51:fb:7e:20:86:3f:c4:30:c8:d1:8d:7a:
34:95:0a:32:0e:31:a7:52:db:0d:d8:45:5c:01:9f:
bc:2b:27:d2:8e:60:ce:62:4f:42:d9:30:f7:dc:e1:
41:5c:38:8f:e8:57:2f:65:33:90:45:10:c4:09:a2:
1a:9b:15:bd:9b:8d:9c:f7:71:2a:8d:25:71:94:34:
9f:51:4a:fc:ce:92:a9:9b:dc:c6:de:8b:04:92:8e:
6d:f3:85:5c:6e:fd:85:b5:b8:75:50:ee:8c:52:8c:
f5:23:ab:74:70:b2:57:98:d2:d6:58:b2:20:38:61:
8e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4D:EB:E6:6E:DA:40:71:1F:E1:48:3D:4B:FB:F0:78:51:81:28:CA
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/R03r5m7aQHEf4Ug9S_vweFGBKMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.12.0/23
91.132.160.0/22
152.89.28.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:d2:d4:d7:7e:1b:90:39:19:db:8e:1b:5e:3f:32:54:03:42:
b5:15:f0:35:47:9c:f0:b5:c3:85:2f:69:5f:4a:61:38:5a:1a:
30:c3:09:14:fc:f6:b6:58:4d:35:dc:e8:d6:37:b6:7b:83:ac:
3b:c0:d7:49:36:56:d7:72:51:45:0c:86:5e:bb:40:d2:cf:0e:
fc:70:d0:01:f7:f5:3a:c6:0a:08:31:1d:b0:50:dd:b6:9e:20:
75:db:2b:ef:4d:03:e6:4b:c8:d5:17:c7:be:d2:a2:ea:97:60:
46:73:42:f8:50:21:ac:ea:36:0c:57:fe:b0:15:61:3f:a9:94:
5f:36:4e:3e:a6:1d:3d:30:88:24:48:05:cc:95:30:6e:99:be:
dc:26:95:a2:ec:38:b3:98:61:90:c6:93:f2:6f:0c:e7:eb:a6:
33:83:8f:63:c2:d4:2f:dc:3d:95:d9:fc:33:e7:b2:a4:12:aa:
d1:11:34:57:81:cc:13:08:2c:83:24:39:11:ad:e5:ab:8b:65:
38:9b:e4:c4:fe:c4:c4:48:62:54:71:1e:91:0a:80:47:cf:bb:
f5:69:b9:b6:32:49:cf:56:a4:97:4d:a3:93:a1:71:a1:ae:6e:
4b:fa:86:72:e5:7d:89:33:9e:13:c5:b4:50:21:45:8e:f4:1a:
59:f1:33:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:14 2025 by rpki-client