Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/m5wEKs5y2KBleheWcQuniBsNMBk.roa
File: m5wEKs5y2KBleheWcQuniBsNMBk.roa (raw, json)
Hash identifier: IJVo12eVd5NzUZ0u80lbu1BYQp6cX6hVxovzk0Ht0uc=
Subject key identifier: 9B:9C:04:2A:CE:72:D8:A0:65:7A:17:96:71:0B:A7:88:1B:0D:30:19
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 018FE7855BD1A317E8549EBF3B407295EC25
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/m5wEKs5y2KBleheWcQuniBsNMBk.roa
Signing time: Wed 05 Jun 2024 08:30:27 +0000
ROA not before: Wed 05 Jun 2024 08:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 45.138.12.0/22 maxlen: 22
152.89.28.0/22 maxlen: 22
193.135.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e7:85:5b:d1:a3:17:e8:54:9e:bf:3b:40:72:95:ec:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Jun 5 08:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b9c042ace72d8a0657a1796710ba7881b0d3019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:53:27:20:62:20:1d:e1:1b:16:82:46:50:a7:
5e:b9:86:76:b7:72:93:45:25:11:ea:d6:42:3b:8d:
29:db:57:c2:8d:9e:a6:b8:cf:f4:b7:f9:0e:8a:f2:
6f:66:8a:e3:6b:0f:9b:01:a9:35:16:9e:d5:6b:68:
5d:e7:c3:91:62:ab:88:2f:69:28:e8:1e:e0:46:88:
52:84:d6:74:b0:04:03:74:9a:ee:49:32:1c:31:2e:
9a:88:57:0c:1d:25:28:6e:f8:6d:b5:90:b1:c6:45:
22:34:24:1d:f9:0b:1e:a1:d8:3e:c4:63:31:47:4b:
ec:78:48:fe:67:9d:a5:e2:bb:fb:70:73:b6:f5:e0:
01:c9:e3:08:62:b8:47:06:f6:9f:2d:ef:9e:35:16:
cb:dd:ed:da:79:7a:68:94:4e:7f:5e:57:d7:78:6a:
2b:b2:7d:77:c1:7c:6f:c1:a4:03:71:c8:f9:18:67:
79:7e:6e:a1:c8:fa:b9:c5:72:c0:46:42:57:18:bb:
0d:72:1c:fc:48:88:96:c5:50:96:95:e0:96:aa:a3:
60:28:45:ac:cd:a4:86:7c:0c:16:ca:49:2a:8e:ff:
81:c3:78:81:df:cf:96:ef:3d:13:5e:c9:31:96:ae:
fe:0d:59:38:24:f8:ab:bb:11:e5:40:e3:bb:42:86:
fd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9C:04:2A:CE:72:D8:A0:65:7A:17:96:71:0B:A7:88:1B:0D:30:19
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/m5wEKs5y2KBleheWcQuniBsNMBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.12.0/22
152.89.28.0/22
193.135.174.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:14:92:03:44:46:93:61:d6:cf:f4:14:0a:96:66:4c:d8:42:
98:5d:e0:01:a4:0c:d9:67:3f:0f:a0:d3:c0:5c:f4:a0:d5:bd:
2a:2b:53:44:ec:b4:dc:fe:90:38:f3:03:13:42:cc:3e:17:ed:
6a:68:44:bb:52:45:c0:fc:29:11:08:c1:93:93:b7:15:51:75:
09:5c:de:d7:e5:41:60:e0:60:c5:8d:03:09:e0:d9:5b:09:73:
64:f3:f3:68:09:9b:75:70:4f:81:e4:58:fa:14:9f:54:71:89:
0c:c1:c1:3e:40:ca:48:28:82:65:c8:15:ca:15:aa:57:1f:05:
cf:e1:8b:6d:2e:e0:04:85:82:7a:9f:a6:9f:2a:87:19:ca:67:
85:ed:a7:15:2b:34:b4:33:f8:07:e2:ba:d9:0a:23:b6:36:42:
69:51:a6:54:df:cc:4e:c9:2e:94:3f:04:33:9f:b2:a9:f4:e5:
b8:43:a9:b6:40:7b:ab:49:ac:4b:a1:13:ee:48:6e:9e:19:a2:
c6:33:88:92:1c:4c:01:23:e2:61:6c:21:6b:75:8c:74:3f:bd:
1b:bf:04:b1:df:da:af:85:e0:fe:0a:be:65:f2:7e:af:fb:58:
2f:a7:53:d3:86:5c:31:47:be:5e:49:80:69:3f:e8:be:fb:af:
c7:50:1a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:08 2025 by rpki-client