Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/h2EeuCk63Zea_eiWF4EIdmRx7k4.roa
File: h2EeuCk63Zea_eiWF4EIdmRx7k4.roa (raw, json)
Hash identifier: ElQ32yyCIsecTKYbm68QO5ukwN48rDPiFZ4Xq/XXTHw=
Subject key identifier: 87:61:1E:B8:29:3A:DD:97:9A:FD:E8:96:17:81:08:76:64:71:EE:4E
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 0183B30EE6738FBB4C72BF4B1612770B4DA2
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/h2EeuCk63Zea_eiWF4EIdmRx7k4.roa
Signing time: Fri 07 Oct 2022 15:27:21 +0000
ROA not before: Fri 07 Oct 2022 15:27:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 45.138.14.0/24 maxlen: 24
45.138.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b3:0e:e6:73:8f:bb:4c:72:bf:4b:16:12:77:0b:4d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Oct 7 15:27:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87611eb8293add979afde896178108766471ee4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3d:c6:a5:2c:99:6a:08:10:ae:7f:fd:a8:47:
56:51:44:75:e4:38:e9:14:fa:30:71:df:60:7e:05:
d5:3b:ba:d4:a1:50:c6:97:73:c8:e4:ad:e8:cc:13:
e7:2a:66:d1:bf:a3:71:4b:2b:48:2b:9b:9a:30:52:
6d:39:e1:d1:51:b6:61:0c:fd:9e:15:b3:17:0c:7b:
b1:15:db:f3:3f:7c:5e:58:75:85:63:88:1d:17:75:
b2:20:1f:22:f6:b2:3b:a7:8a:8e:4f:f7:f9:1c:a7:
52:75:a2:99:f3:0c:ff:eb:ce:eb:13:b3:fb:96:7b:
15:84:32:e7:1d:5c:4c:e8:5b:e8:78:e8:43:91:c8:
4e:f6:32:67:1e:0b:42:27:69:c3:80:d4:78:aa:b3:
5b:12:e5:d6:21:6e:21:1a:ab:31:eb:a3:9d:8e:87:
c5:a4:ec:8f:c0:d0:68:5d:46:d7:ef:0c:25:c3:f6:
fa:e1:ae:76:2c:1b:a8:aa:27:f5:1b:e8:2a:f9:62:
7d:06:eb:55:84:60:8e:f5:fc:8a:eb:81:30:e6:7a:
d4:14:64:28:f9:66:48:06:32:e3:9c:a9:3a:35:53:
cf:62:71:72:a6:67:d7:76:81:2e:ef:86:c2:05:98:
05:ea:15:e6:2f:7d:85:15:fa:c3:82:3b:37:83:a8:
48:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:61:1E:B8:29:3A:DD:97:9A:FD:E8:96:17:81:08:76:64:71:EE:4E
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/h2EeuCk63Zea_eiWF4EIdmRx7k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.14.0/23
Signature Algorithm: sha256WithRSAEncryption
51:5e:31:c1:4e:df:84:fc:9a:f9:9b:8f:81:45:47:70:81:03:
d4:2f:2a:ec:61:e4:b6:2b:51:d4:b2:ea:f7:54:f1:ec:c4:64:
e8:22:c8:76:4e:c5:81:27:86:19:2d:a0:b4:f4:1f:23:c0:4c:
ed:b1:da:e5:9d:55:4d:9a:dd:d1:80:6f:42:37:f0:95:ff:de:
3d:94:3a:f5:b6:b8:eb:d5:97:76:c7:11:f8:67:bd:2f:03:c6:
63:88:a9:60:54:32:37:05:89:16:f5:4e:90:45:6b:0e:71:bf:
04:6e:fe:e1:99:e8:bb:4c:e6:c1:a0:0c:ae:a4:8d:88:bd:11:
8f:83:b8:2f:4d:ca:8c:ae:a0:ec:6b:1f:af:5e:bf:95:fa:b1:
cf:9a:9e:59:c2:77:18:43:76:a7:04:e7:30:d3:d7:41:77:38:
d9:cf:65:04:56:1f:1b:4e:d9:86:65:17:1b:97:8f:3f:99:87:
98:96:9e:59:fa:0f:86:07:2b:d0:8b:96:3f:b1:80:34:99:b8:
4a:b3:fe:c5:71:1d:ae:35:57:64:74:9d:e9:51:40:8e:de:0b:
e9:f2:6c:8b:e1:8c:39:48:ac:45:69:1d:37:f4:2a:a4:b7:b9:
ce:e4:ea:c7:a2:58:40:49:ec:de:9f:20:01:d3:11:25:f2:34:
21:14:dc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:43 2025 by rpki-client