Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/CRab_fMpXGT8Jvez_05S349HJ4o.roa
File: CRab_fMpXGT8Jvez_05S349HJ4o.roa (raw, json)
Hash identifier: t2EjJBUxp5tyVX48qkgWFbJ0okm90P9rN1Y7vv7+dxs=
Subject key identifier: 09:16:9B:FD:F3:29:5C:64:FC:26:F7:B3:FF:4E:52:DF:8F:47:27:8A
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 018B186CA8D4CF5688C1216005270B120B61
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/CRab_fMpXGT8Jvez_05S349HJ4o.roa
Signing time: Tue 10 Oct 2023 07:10:56 +0000
ROA not before: Tue 10 Oct 2023 07:10:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209043
IP address blocks: 45.156.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:18:6c:a8:d4:cf:56:88:c1:21:60:05:27:0b:12:0b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Oct 10 07:10:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09169bfdf3295c64fc26f7b3ff4e52df8f47278a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:56:6d:12:90:62:35:21:7d:a5:37:a5:c1:e1:
37:e4:98:62:e4:8e:b8:be:ec:d1:e0:f2:a9:9c:8f:
58:5e:4a:49:0b:f0:ae:97:27:88:f6:4e:5a:b3:6c:
80:06:4a:75:88:af:b3:07:74:79:bd:4c:66:e0:c9:
07:7f:0c:e9:c3:7f:6b:6f:a3:df:29:84:9a:99:5c:
70:c6:ad:7c:7e:69:4f:5c:a2:b0:47:9e:6d:81:a2:
e0:ad:87:03:3a:0b:1d:4f:ac:da:57:40:d1:c4:b3:
d9:1b:55:46:ee:6d:30:98:fa:2e:79:b0:4a:f0:f8:
42:fb:74:8e:d2:96:b7:87:22:cc:a4:1a:c2:04:e1:
45:46:d5:d4:ef:26:47:34:93:ec:fa:67:c4:86:1e:
18:7f:f5:b4:09:b7:06:db:3e:02:bf:c9:12:63:e5:
94:a7:f9:b3:03:3a:ac:00:0c:af:d3:11:9f:c1:d4:
44:25:c4:04:39:46:1b:97:f2:59:f1:d1:2f:1d:42:
21:fb:c0:24:a6:bc:ad:3b:0e:e0:b9:31:aa:32:28:
18:bc:42:ff:02:c1:76:28:ab:02:70:a4:d4:bf:ff:
a5:ec:56:17:b3:37:dd:62:26:f5:7b:90:68:2f:83:
f7:0f:3f:be:d2:1c:0c:e8:9b:a6:4b:ad:31:4c:7d:
44:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:16:9B:FD:F3:29:5C:64:FC:26:F7:B3:FF:4E:52:DF:8F:47:27:8A
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/CRab_fMpXGT8Jvez_05S349HJ4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.145.0/24
Signature Algorithm: sha256WithRSAEncryption
93:5b:0a:38:b9:77:72:a7:c3:ce:2f:09:5c:3b:4d:92:9c:2f:
8c:4f:73:a5:3f:ed:94:8c:40:e8:e4:ae:bd:c6:0a:17:fc:8c:
c9:7b:2a:d8:ef:30:79:28:b7:36:8e:e8:53:f8:fa:6e:98:54:
1d:9a:1b:8d:b2:42:aa:13:71:7c:99:2e:f8:41:12:7b:1f:37:
fc:93:4b:9c:d5:42:c7:c6:7d:95:c5:2c:ee:b4:83:2b:7b:43:
d3:1a:f2:86:12:57:f0:ed:6a:d5:ab:d7:5a:25:78:19:6c:b8:
69:47:f3:47:73:69:14:4d:4b:00:ce:05:6d:04:55:8b:4d:bf:
d1:63:41:1f:f4:ec:17:eb:71:bb:19:ef:7a:c0:d2:cb:17:f9:
2f:7f:d0:5a:81:bd:c9:e8:c3:da:38:2f:98:1c:91:8a:b2:a6:
8c:d8:8a:67:c6:87:3b:07:b2:83:f7:8d:98:e0:f8:9c:c9:9b:
03:2f:70:f5:7c:4b:82:62:2e:ea:3e:91:0f:6f:06:bc:e2:94:
be:19:59:e0:08:d2:21:7e:84:31:2b:67:73:f2:9a:aa:72:00:
22:d9:f5:c7:28:41:a3:19:bd:db:09:e2:27:a8:ca:74:e3:30:
e7:7e:db:65:02:25:23:50:2b:cb:72:80:34:ff:4b:2a:ac:52:
ae:bb:8d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:02:29 2025 by rpki-client