Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/nIh-F__ncXz0CNNQJC4zP-WoDmo.roa
File: nIh-F__ncXz0CNNQJC4zP-WoDmo.roa (raw, json)
Hash identifier: my73J9sv7cQx80efOz3KsI7k4YXJiLt3pv63Fo4MXBI=
Subject key identifier: 9C:88:7E:17:FF:E7:71:7C:F4:08:D3:50:24:2E:33:3F:E5:A8:0E:6A
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 018BD1EFD39E812AC8925C2384AE578D2595
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/nIh-F__ncXz0CNNQJC4zP-WoDmo.roa
Signing time: Wed 15 Nov 2023 07:43:57 +0000
ROA not before: Wed 15 Nov 2023 07:43:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 45.138.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d1:ef:d3:9e:81:2a:c8:92:5c:23:84:ae:57:8d:25:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Nov 15 07:43:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c887e17ffe7717cf408d350242e333fe5a80e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:60:25:75:b4:99:e4:cf:42:3a:95:91:c0:
71:f8:72:11:93:13:30:35:56:ce:83:1e:36:b2:27:
8f:18:18:d2:d8:53:ef:25:cd:5a:46:f9:7b:ad:d4:
9e:e2:ee:f5:57:ab:41:d3:d3:39:bc:92:84:a4:70:
ff:14:16:d1:11:57:57:be:56:25:42:67:48:63:2d:
3c:6f:2d:15:50:a3:0f:d7:1c:7f:e5:4d:de:f6:f4:
22:eb:6b:c2:bd:8a:00:ce:5b:d4:94:18:63:e2:f0:
ba:e3:68:b7:e6:cb:9c:93:4e:3f:69:57:36:71:eb:
7c:ad:39:e8:b3:e2:d3:9e:e6:51:82:c8:2d:fb:c0:
d8:05:4f:5c:15:2a:9c:14:5a:ed:49:9a:8a:05:2d:
26:31:b7:84:26:f4:cf:fa:9c:dc:a7:c7:e0:53:f0:
82:32:86:2d:19:a0:44:86:aa:73:a6:b8:6e:c7:fe:
ae:fb:16:c1:ee:92:d5:fb:3f:76:fe:cd:85:1e:95:
e5:08:1b:7b:a5:db:99:c4:d8:e6:bf:be:77:c9:1b:
8e:dc:94:68:d9:83:8b:e3:36:06:fd:41:7b:ec:dd:
ab:0d:a6:77:65:51:fa:76:bc:8a:cd:c0:b5:99:fa:
b8:39:74:d3:49:0d:f9:79:18:15:2f:6d:74:2c:4e:
6d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:88:7E:17:FF:E7:71:7C:F4:08:D3:50:24:2E:33:3F:E5:A8:0E:6A
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/nIh-F__ncXz0CNNQJC4zP-WoDmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.12.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:77:04:6c:f0:1e:ae:69:cb:a3:3b:b3:65:d5:c2:43:e9:c9:
61:de:7e:82:9e:45:50:94:33:71:53:33:e6:af:e5:8b:9c:d9:
58:91:bb:c4:36:dc:28:5c:cb:41:fe:bd:fa:ed:6d:de:4a:35:
1b:28:00:a4:dd:5b:dc:c7:8b:04:ff:e4:87:3c:28:f9:3f:20:
d4:82:15:a7:76:87:10:a7:11:05:3e:5b:2f:a5:ff:16:a1:9c:
77:a2:e7:66:18:2f:74:46:bc:41:14:96:31:6a:4b:88:c2:b0:
af:f4:0f:75:84:2c:51:a0:86:6a:c5:50:4b:2f:e2:71:91:e8:
0f:84:ff:92:f7:78:b0:49:83:c2:81:f4:a1:e2:30:75:74:9e:
16:7d:00:bc:0d:a0:45:58:7e:80:cd:99:bb:d9:1a:bf:43:fd:
af:32:46:3e:11:f7:2c:c0:54:de:3d:51:30:e1:f0:a4:f2:4a:
e3:c1:0d:5f:3c:1b:c5:b0:08:fe:a6:24:6a:84:01:91:95:e4:
ff:13:48:45:24:99:7d:ca:8a:2c:32:ef:1a:7a:63:e7:36:cb:
61:bc:41:55:79:8b:f3:ff:96:76:0b:93:dc:82:90:1d:13:62:
77:5c:7f:51:21:ad:6f:2a:b9:86:52:e5:15:5e:8a:b1:a6:a6:
fb:6b:76:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:02 2025 by rpki-client