Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/gHBP4DCsYVbAuX2gHktKQx2XRdE.roa
File: gHBP4DCsYVbAuX2gHktKQx2XRdE.roa (raw, json)
Hash identifier: b118ucJNduPJTtNgfSqpQsoPBgsX6x93L1Iv4LgwGu0=
Subject key identifier: 80:70:4F:E0:30:AC:61:56:C0:B9:7D:A0:1E:4B:4A:43:1D:97:45:D1
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 07F5DEE8
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/gHBP4DCsYVbAuX2gHktKQx2XRdE.roa
Signing time: Sat 01 Jan 2022 15:07:06 +0000
ROA not before: Sat 01 Jan 2022 15:07:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397373
IP address blocks: 45.138.14.0/23 maxlen: 23
193.135.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133553896 (0x7f5dee8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Jan 1 15:07:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80704fe030ac6156c0b97da01e4b4a431d9745d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8f:76:af:ac:4f:47:b0:b5:a5:3e:5d:8b:04:
bb:ef:1b:d3:0b:14:e5:06:b5:29:98:97:8b:5b:92:
8e:51:90:3a:41:a0:51:b2:b0:26:16:7a:c0:5f:05:
eb:7b:9a:62:c7:61:5f:d2:98:92:cd:02:de:9f:96:
1e:a8:3b:45:cf:fd:f1:78:d2:36:7a:c3:f5:79:16:
9c:ab:df:5a:a0:08:6d:34:a8:b8:04:07:ad:fc:82:
94:d6:63:3b:aa:bd:dd:51:61:f0:b1:f3:06:ce:c9:
68:74:7b:63:54:97:6e:8b:18:04:fc:53:a3:0b:60:
ee:86:7b:e8:5e:ba:fa:d8:f2:34:54:a3:79:32:03:
b3:ed:86:74:d8:b9:1d:e9:ae:c4:1a:24:c0:9e:58:
86:f2:16:bc:d9:1a:61:c1:ed:20:f8:c4:24:52:5d:
58:a1:75:96:4f:df:ef:9c:65:9f:5d:2d:64:5b:08:
94:e4:2d:48:c8:15:f4:14:ac:87:26:ba:e9:1f:e9:
e9:69:b2:30:a2:2e:fe:ed:38:5b:64:24:14:c9:e3:
d9:3f:c1:fc:c6:ae:0d:84:f0:fe:f4:4d:ef:22:10:
f5:7f:a0:96:f3:77:ce:a6:fb:1d:0d:6a:43:e8:d8:
67:a9:37:7e:6f:9c:0f:ea:8d:e0:7a:bb:80:0e:3d:
3c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:70:4F:E0:30:AC:61:56:C0:B9:7D:A0:1E:4B:4A:43:1D:97:45:D1
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/gHBP4DCsYVbAuX2gHktKQx2XRdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.14.0/23
193.135.174.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:59:79:fc:64:74:f4:f4:c1:a6:b9:e0:78:5d:24:b5:0e:c7:
0c:8d:61:78:1c:c5:0b:b1:bf:c6:0b:18:f5:67:fa:d0:3e:59:
4f:fe:f9:97:d5:a9:a4:29:d7:c0:7a:07:a6:c1:b2:96:17:36:
5a:9e:74:24:ee:3b:1f:2c:8a:98:61:93:26:ea:7c:19:6f:41:
3e:5d:64:3d:c8:0f:09:df:e7:13:4f:7f:7d:2e:63:58:f2:56:
3e:c2:50:ce:af:73:61:5d:b3:a8:1b:92:74:c8:35:19:0e:c1:
70:f5:2d:e5:89:3e:56:7e:4f:b7:75:ac:0f:73:4a:37:62:01:
0d:86:92:99:e7:d7:80:7c:70:8d:cc:fe:e2:fe:f0:68:d4:b8:
03:39:06:54:36:c4:35:87:0f:b3:d9:d3:f6:71:7e:a3:6e:68:
3e:d6:da:ff:22:d6:e4:c2:83:89:6e:d1:3a:ae:a5:9e:b7:c2:
62:e3:6a:da:c7:20:fd:5f:fc:df:e9:37:ea:21:f6:3a:fe:ce:
35:e7:f3:d0:ed:2c:d9:48:e0:c4:b5:1b:1c:b8:7b:fe:07:f6:
78:72:15:46:4c:dc:83:00:fe:16:89:46:5c:3e:10:3a:e1:db:
b3:6b:57:4d:b4:22:1e:ed:89:c4:c7:bf:9c:f0:6d:73:97:2e:
45:62:5b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:58 2025 by rpki-client