Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/5h8ZLglzIonQHnsLi4Wuna5zDv0.roa
File: 5h8ZLglzIonQHnsLi4Wuna5zDv0.roa (raw, json)
Hash identifier: xJlaSUj8xVnTAHTH/Kg/w+ZHOqVb3QCeps8rnag80ig=
Subject key identifier: E6:1F:19:2E:09:73:22:89:D0:1E:7B:0B:8B:85:AE:9D:AE:73:0E:FD
Certificate issuer: /CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Certificate serial: 0187B799C8B5264BAD6A48FED43BB44AB425
Authority key identifier: F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/5h8ZLglzIonQHnsLi4Wuna5zDv0.roa
Signing time: Tue 25 Apr 2023 08:48:41 +0000
ROA not before: Tue 25 Apr 2023 08:48:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202656
IP address blocks: 45.129.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:99:c8:b5:26:4b:ad:6a:48:fe:d4:3b:b4:4a:b4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Validity
Not Before: Apr 25 08:48:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e61f192e09732289d01e7b0b8b85ae9dae730efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:20:df:7b:58:2a:3b:a9:8a:bd:9a:2d:ab:ef:
35:12:bd:42:6b:0c:61:23:08:d7:06:31:78:0b:78:
a9:13:81:4a:25:cc:68:a0:c7:ff:a3:ed:f0:99:58:
ee:60:e2:b4:c8:2a:b6:6f:4a:b0:9b:9c:79:13:29:
b8:58:26:1b:f4:68:ba:b9:18:28:e8:ea:18:45:c8:
79:54:4c:57:a4:57:0e:50:b5:53:c2:cd:6f:33:bd:
fa:b5:a9:09:64:45:5d:d9:24:a5:59:18:cc:5e:cc:
50:7d:33:b9:d8:ba:36:0c:41:b6:b3:55:92:eb:3a:
93:29:65:26:aa:04:5c:55:ae:87:da:27:bb:5d:1c:
d2:c8:88:cc:22:9c:00:23:37:fd:f5:c1:30:e7:d2:
97:3e:bc:90:5d:fa:bb:74:3d:c1:ee:ac:97:3e:9c:
c7:68:25:f8:10:d3:8a:61:b2:56:f1:4b:44:1b:96:
4b:34:10:c7:6e:8f:06:06:70:bc:df:5c:62:49:a3:
ce:f4:22:38:88:31:c7:a5:6b:b6:fd:01:49:6b:d4:
b3:9b:33:63:73:2f:53:6f:b9:13:f4:db:b1:71:01:
fb:43:63:e3:93:f7:6c:78:29:93:08:75:61:ef:73:
f4:4a:9c:94:f1:ad:60:aa:59:a1:26:1b:aa:3e:68:
d2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1F:19:2E:09:73:22:89:D0:1E:7B:0B:8B:85:AE:9D:AE:73:0E:FD
X509v3 Authority Key Identifier:
keyid:F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/5h8ZLglzIonQHnsLi4Wuna5zDv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/9NuV-dG1w-yTT_hNb_fwEkLahCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.1.0/24
Signature Algorithm: sha256WithRSAEncryption
24:80:9a:eb:ac:9e:aa:a3:45:ed:e0:60:55:0e:bb:35:3d:de:
5b:3f:3a:90:71:2d:70:c3:b0:9a:93:4b:d2:b5:c8:1a:e1:75:
54:4d:55:c3:40:76:4d:47:57:f2:3d:75:4d:c6:f8:93:36:c9:
07:3d:4e:42:fe:12:84:b0:ff:a1:72:50:b2:91:26:8b:56:b3:
ef:da:22:2a:e2:95:bb:71:19:cf:31:3c:8b:05:d5:1e:41:7b:
fb:39:48:f4:43:d0:9c:8c:5b:7d:f3:2c:c7:55:fc:57:92:44:
71:03:ea:3a:7f:02:a2:1a:e2:7b:79:a6:f8:85:a9:0b:75:0b:
96:92:f8:dc:6e:3b:76:e3:f5:61:af:c4:fa:ef:db:3a:7b:be:
25:92:cd:2c:b1:6e:0b:17:ae:c6:b9:d0:06:12:4a:66:73:36:
8d:dc:fd:86:9c:61:da:2f:6d:79:09:5c:cf:f8:00:3b:9d:e5:
48:c3:f7:59:c3:6b:ee:4d:bb:a7:98:ba:a8:d9:fe:8c:dd:65:
18:43:5d:d2:44:87:18:9e:99:b3:1c:8f:98:4c:93:da:02:84:
88:bb:84:81:8a:7a:ec:df:3f:32:20:b6:c4:54:5b:99:7d:5c:
2a:09:a9:fc:03:3a:31:97:b5:99:13:0f:79:63:0c:bf:b1:14:
d9:c3:aa:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:32 2025 by rpki-client