Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5f6ac1-b935-47b1-96c1-0a12969fbcfc/1/N25Ck8OLArADzW_p0OiGBIX5deo.roa
File: N25Ck8OLArADzW_p0OiGBIX5deo.roa (raw, json)
Hash identifier: 8z7gAtebcbDpL8NqVepQpsZ63SxGwlGwcGSvbEIK9FE=
Subject key identifier: 37:6E:42:93:C3:8B:02:B0:03:CD:6F:E9:D0:E8:86:04:85:F9:75:EA
Certificate issuer: /CN=be37cce14cb56b66497810e73baa0edf67007a48
Certificate serial: 06107235
Authority key identifier: BE:37:CC:E1:4C:B5:6B:66:49:78:10:E7:3B:AA:0E:DF:67:00:7A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfM4Uy1a2ZJeBDnO6oO32cAekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/5f6ac1-b935-47b1-96c1-0a12969fbcfc/1/N25Ck8OLArADzW_p0OiGBIX5deo.roa
Signing time: Sat 01 Jan 2022 14:55:51 +0000
ROA not before: Sat 01 Jan 2022 14:55:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43915
IP address blocks: 45.130.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101741109 (0x6107235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37cce14cb56b66497810e73baa0edf67007a48
Validity
Not Before: Jan 1 14:55:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=376e4293c38b02b003cd6fe9d0e8860485f975ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:72:0b:4c:a4:7c:44:70:ca:ac:a7:9c:a3:
a0:c7:51:6e:26:9e:b6:18:cd:d3:bc:aa:b5:4e:9a:
13:2f:3a:55:50:4b:f3:78:42:1f:f5:f4:f9:07:e0:
59:7b:95:9f:43:4b:f4:e1:5f:c5:7f:86:ab:61:c2:
fd:42:7a:6e:0f:dd:87:97:df:ea:df:03:ee:be:4e:
82:66:6d:a6:65:18:f0:e3:ff:c2:47:a6:fd:66:56:
87:af:33:a2:a6:0a:e2:b0:b1:7c:c5:50:b8:2d:85:
47:75:11:de:4c:99:30:78:77:70:b0:79:81:65:92:
fe:8f:3e:2b:20:53:d4:1e:22:08:f6:18:cf:9d:35:
e5:2e:45:34:de:f3:4f:7a:75:03:9f:fa:5e:bb:d5:
f8:18:c2:5c:88:d9:a9:e1:fd:64:c7:47:e2:54:78:
14:0b:85:e5:0e:a2:77:27:93:3e:19:43:b7:2b:b4:
a3:a2:37:09:52:cd:2f:76:1f:ee:38:6a:5c:f3:a5:
fa:57:6e:9f:b4:11:ef:eb:d2:8b:3c:4a:66:b8:fb:
1f:c5:76:bd:f5:1f:9b:56:b6:29:6c:ae:27:83:c3:
40:5b:d3:46:5a:94:0e:95:e1:3d:45:2d:47:07:1d:
36:f0:68:2f:f7:3a:50:3c:a2:fb:c1:71:63:af:ed:
a4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6E:42:93:C3:8B:02:B0:03:CD:6F:E9:D0:E8:86:04:85:F9:75:EA
X509v3 Authority Key Identifier:
keyid:BE:37:CC:E1:4C:B5:6B:66:49:78:10:E7:3B:AA:0E:DF:67:00:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfM4Uy1a2ZJeBDnO6oO32cAekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5f6ac1-b935-47b1-96c1-0a12969fbcfc/1/N25Ck8OLArADzW_p0OiGBIX5deo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5f6ac1-b935-47b1-96c1-0a12969fbcfc/1/vjfM4Uy1a2ZJeBDnO6oO32cAekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.56.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:00:7f:2c:f8:29:35:3c:72:06:4f:c4:42:4c:2e:13:00:4d:
f5:69:7a:9c:ed:c8:45:d6:5b:21:1b:cb:d6:39:d4:5f:95:b4:
ed:ec:8b:50:51:b2:9f:f0:c6:b2:78:4a:bb:9a:c3:1a:16:db:
39:42:bf:51:f7:1d:83:fe:ab:9f:6f:0a:c4:22:21:d9:d3:5a:
2d:1f:e9:85:05:b6:a1:5c:b9:01:22:8a:70:85:2e:be:57:26:
0f:96:3a:d4:fd:09:40:f3:8f:8a:3e:f2:cc:de:5c:2e:49:31:
ef:ca:e5:5f:e6:ab:75:72:b1:50:63:e5:33:de:66:40:39:0f:
66:7c:95:6d:83:a3:e2:c2:20:92:0a:e8:a7:e9:70:57:1c:be:
bc:16:ee:6f:09:53:64:60:df:4f:a0:9e:44:ea:0d:c2:a7:36:
cf:d9:80:92:40:e4:cf:37:5c:a3:16:69:a8:08:ca:02:dd:17:
06:30:05:03:a6:d6:c5:6e:82:57:3d:eb:0e:86:e2:cb:bf:6e:
7f:8d:b8:79:a4:e8:9d:13:d0:8d:c6:d3:3b:a0:89:39:7e:2e:
59:fa:93:b4:27:33:53:73:c9:96:ff:b8:01:b3:19:e7:aa:99:
c5:aa:e5:4f:90:f0:38:bc:5b:f0:85:94:25:43:8f:2c:60:cb:
ce:62:ef:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:42 2025 by rpki-client