Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/dVOuIXsGYWwBmahhrmEZrMgviao.roa
File: dVOuIXsGYWwBmahhrmEZrMgviao.roa (raw, json)
Hash identifier: /1eErCRQtceAovlAHP7fiKZqLchja3tmwuucnJz9/98=
Subject key identifier: 75:53:AE:21:7B:06:61:6C:01:99:A8:61:AE:61:19:AC:C8:2F:89:AA
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 018A998D51A77889AB593547605440E6CAA0
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/dVOuIXsGYWwBmahhrmEZrMgviao.roa
Signing time: Fri 15 Sep 2023 15:54:50 +0000
ROA not before: Fri 15 Sep 2023 15:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 152.89.28.0/22 maxlen: 22
45.138.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:99:8d:51:a7:78:89:ab:59:35:47:60:54:40:e6:ca:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Sep 15 15:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7553ae217b06616c0199a861ae6119acc82f89aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d7:aa:f1:15:f8:d9:b9:22:60:a8:91:1e:45:
2b:fc:7d:11:1c:7e:5c:c7:92:9f:2e:a3:b9:97:52:
b3:e0:e7:4a:b5:08:3c:fb:d6:e3:55:bb:09:dd:b5:
d0:9e:3e:d0:a8:de:fa:cf:e9:35:4f:8d:5b:ca:0d:
6f:36:24:58:ad:3b:27:bf:6e:6f:de:09:2a:b3:05:
b3:2d:98:31:35:14:01:c9:d0:2c:48:14:32:d9:d7:
a0:c9:a0:94:46:64:71:55:26:ba:36:c1:02:16:a0:
4d:6f:2b:5f:fe:15:1a:8c:ad:93:97:d8:16:44:bd:
47:e4:d9:64:8f:c8:d3:98:aa:91:fe:80:87:a2:e1:
a0:38:d2:3b:8d:57:10:28:e6:f4:20:75:ae:6b:cc:
61:39:9c:ce:dc:cc:6a:62:ce:8b:06:fb:47:f2:21:
9e:c6:78:51:de:af:b4:9a:85:f7:0c:9c:6c:79:9e:
19:85:47:e1:c8:5d:f9:60:b5:db:7b:1a:1c:3e:5f:
7a:6d:e0:c1:c5:af:80:80:87:f0:89:48:f4:17:da:
01:a8:d0:28:43:71:d6:04:c8:ce:84:ea:52:bb:42:
2c:c1:85:f2:b2:07:11:f1:93:72:b6:54:21:3c:be:
95:f1:02:80:27:20:46:63:f3:73:c9:9d:61:a2:ac:
a6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:53:AE:21:7B:06:61:6C:01:99:A8:61:AE:61:19:AC:C8:2F:89:AA
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/dVOuIXsGYWwBmahhrmEZrMgviao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.12.0/22
152.89.28.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:82:d5:53:b4:3f:9e:0d:73:f7:af:24:99:c0:06:d7:6f:a5:
b8:0e:0e:c7:06:f7:0d:27:27:88:61:35:9e:c2:e1:db:c3:74:
6c:06:e0:53:88:ef:fe:e3:85:8b:2a:45:f9:17:31:05:93:a7:
29:5a:57:e5:93:97:a3:34:08:f7:40:f4:f1:d5:7d:88:c3:3a:
21:09:36:55:00:a1:bc:39:41:5c:d5:55:07:a2:04:9a:90:69:
7d:f7:a0:74:58:68:c1:d0:b6:5c:dc:65:2f:c1:d5:b9:3a:5d:
fa:7e:64:65:a7:5b:77:83:03:0f:a7:55:8d:fe:2c:3d:e1:db:
fb:99:f6:a3:e4:0e:9d:eb:b2:a1:8b:ac:15:30:b8:2a:8e:3d:
9f:25:a5:49:ea:fb:35:17:78:03:17:ef:f6:8c:86:84:85:fb:
40:55:73:9d:72:93:ce:42:c0:06:22:1b:9f:08:7c:9b:b6:a4:
67:da:96:89:2f:78:f8:5b:0a:3e:50:48:b0:b7:43:5d:db:7e:
35:3f:8f:04:87:38:57:78:6e:ad:2c:21:c1:19:a0:10:08:aa:
02:b4:72:e8:df:c2:9b:82:c7:6a:c6:fc:fb:11:56:61:97:47:
87:5b:10:e7:33:5d:22:31:2c:78:59:0e:f6:aa:02:f6:17:48:
55:d1:2b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:52 2025 by rpki-client