Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cbd3e2-39bd-43bd-a2ee-0fe07e2100b4/1/upzRMOCaau0VaOonyDTcgo3Kaqk.roa
File: upzRMOCaau0VaOonyDTcgo3Kaqk.roa (raw, json)
Hash identifier: 7AcX82uBu719aCFznuqcxvwwZuxnimYObATN5pFHxeM=
Subject key identifier: BA:9C:D1:30:E0:9A:6A:ED:15:68:EA:27:C8:34:DC:82:8D:CA:6A:A9
Certificate issuer: /CN=952879533d71204ec6c8c3ea217ac5165a576f59
Certificate serial: 0183B6FB3B83A2BC8C09C8F8F36AB28B7DF2
Authority key identifier: 95:28:79:53:3D:71:20:4E:C6:C8:C3:EA:21:7A:C5:16:5A:57:6F:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSh5Uz1xIE7GyMPqIXrFFlpXb1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cbd3e2-39bd-43bd-a2ee-0fe07e2100b4/1/upzRMOCaau0VaOonyDTcgo3Kaqk.roa
Signing time: Sat 08 Oct 2022 09:44:21 +0000
ROA not before: Sat 08 Oct 2022 09:44:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206065
IP address blocks: 45.156.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b6:fb:3b:83:a2:bc:8c:09:c8:f8:f3:6a:b2:8b:7d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952879533d71204ec6c8c3ea217ac5165a576f59
Validity
Not Before: Oct 8 09:44:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba9cd130e09a6aed1568ea27c834dc828dca6aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:9d:e5:e5:3e:49:9b:d4:91:43:b7:d7:ca:
be:4c:59:8e:c7:c1:ff:b7:cb:0d:4c:8d:60:4d:40:
f9:05:c5:aa:d7:46:d3:f0:4c:50:f1:92:e2:9c:43:
ab:0e:a1:f5:5e:41:97:b8:72:b4:5a:e4:53:18:53:
6c:2f:80:c6:c3:db:e2:56:39:36:e2:77:80:2a:09:
ee:fa:99:bf:11:fc:e7:dd:fc:5a:b3:7d:c8:4b:22:
b0:31:16:03:9e:47:47:1f:b7:de:b2:a4:b8:2b:b1:
9e:5e:5c:3b:3e:14:1a:71:a5:a0:4c:75:28:96:e0:
f8:78:4c:47:3e:0c:b8:b1:3b:b3:1f:50:99:b5:9a:
e4:58:1b:ff:8a:9a:69:c1:d8:6b:74:b8:f7:66:bd:
28:54:bc:26:6a:9c:17:2c:c7:cc:b3:2b:10:3d:79:
b5:5a:39:f5:6c:64:e1:c0:c4:a9:6e:47:5e:22:6d:
98:ba:e5:79:87:94:bb:3e:c1:0d:23:59:d9:9f:06:
3e:33:ba:0d:81:29:44:4e:f2:6e:8c:77:cf:c3:6b:
c3:7c:c2:14:b6:d7:b4:43:1b:37:10:b4:d1:4b:d7:
77:e8:ce:56:9a:5b:5a:fb:b9:43:48:2c:29:46:b0:
c6:71:b9:b9:c9:72:2b:74:ef:b8:3d:b8:d3:b7:b2:
48:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9C:D1:30:E0:9A:6A:ED:15:68:EA:27:C8:34:DC:82:8D:CA:6A:A9
X509v3 Authority Key Identifier:
keyid:95:28:79:53:3D:71:20:4E:C6:C8:C3:EA:21:7A:C5:16:5A:57:6F:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSh5Uz1xIE7GyMPqIXrFFlpXb1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cbd3e2-39bd-43bd-a2ee-0fe07e2100b4/1/upzRMOCaau0VaOonyDTcgo3Kaqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cbd3e2-39bd-43bd-a2ee-0fe07e2100b4/1/lSh5Uz1xIE7GyMPqIXrFFlpXb1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.180.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:0a:45:9f:e4:5a:77:2c:02:8c:c4:44:e6:c0:06:96:5c:72:
35:b7:aa:a6:96:8e:41:7c:a4:02:fc:f1:b0:22:96:16:c3:d5:
27:dd:90:25:41:66:36:f0:46:06:e2:75:a4:d9:0b:5a:49:0c:
20:47:87:e8:10:b9:06:6b:fc:d3:f8:1a:71:34:ab:af:4f:03:
8e:c9:21:5d:6e:22:18:0c:0f:87:9b:9d:a7:b0:88:c0:1f:3a:
d6:f4:4c:1b:48:a4:a6:be:52:53:01:4f:f0:d0:c6:e6:4e:40:
c5:1c:c5:15:26:0f:87:ec:ef:03:52:3a:d3:39:80:b8:2e:b8:
24:56:e2:50:63:f8:84:ad:4e:28:4b:4d:d3:dc:56:64:75:53:
88:10:06:87:a8:4a:96:8a:38:8f:e9:cb:d6:f6:d9:05:17:9e:
29:76:0c:44:1e:f3:53:a7:09:42:b9:51:b7:17:13:85:b6:0f:
9e:b8:b2:36:bc:bc:c3:96:b4:e6:60:57:d4:56:c2:4d:de:3e:
52:30:7d:bc:32:4d:d4:87:8d:7a:69:f0:12:5f:7c:34:a5:17:
d1:d1:94:6a:15:79:ea:c2:39:aa:06:e7:8f:f2:9c:28:56:f6:
31:fd:e9:a5:e4:c4:f5:44:16:f5:a8:1d:0a:36:ef:70:de:c3:
fc:7c:55:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:15 2025 by rpki-client