Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/tDXGP34BrKgO8wkoWUgSBbTx1vM.roa
File: tDXGP34BrKgO8wkoWUgSBbTx1vM.roa (raw, json)
Hash identifier: sds1hYvbr+fzNF4hlgXVTHxyXEFEoTXALOAFJzKL54Q=
Subject key identifier: B4:35:C6:3F:7E:01:AC:A8:0E:F3:09:28:59:48:12:05:B4:F1:D6:F3
Certificate issuer: /CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Certificate serial: 01F4250A
Authority key identifier: F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/tDXGP34BrKgO8wkoWUgSBbTx1vM.roa
Signing time: Sat 01 Jan 2022 15:59:40 +0000
ROA not before: Sat 01 Jan 2022 15:59:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 45.89.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32777482 (0x1f4250a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Validity
Not Before: Jan 1 15:59:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b435c63f7e01aca80ef3092859481205b4f1d6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:35:52:c5:cb:7f:f6:88:f1:2f:9b:40:55:
33:c0:ae:4e:a0:0f:a6:93:36:64:2b:1c:34:b9:3b:
27:c0:eb:ef:27:02:07:ce:69:cd:39:d6:ab:b4:6d:
c4:67:05:3e:55:46:16:73:59:ca:b7:f5:c4:31:0b:
2d:ca:7e:17:7c:b4:dd:ac:8d:55:fd:d7:c3:d2:be:
40:dd:27:b7:ab:4e:d8:08:11:85:05:22:2d:58:f7:
eb:5b:15:ef:1d:9a:b7:17:e8:8b:fd:96:11:13:38:
78:97:1c:6a:01:77:0d:8f:22:ca:a6:16:02:f4:d5:
ff:d8:39:91:e4:ef:fb:93:c0:20:e5:d7:cb:ad:21:
a7:6f:bf:60:6d:74:88:b9:a4:52:17:46:f7:47:be:
5d:e7:71:ca:55:48:14:96:3b:68:51:95:31:f9:44:
e6:90:0c:cb:68:ab:4b:16:2e:f4:c9:7b:d5:6c:1b:
4b:7c:91:9f:af:5a:39:12:cb:4b:c7:39:77:6c:7b:
f6:f6:35:0b:79:43:67:be:66:84:0c:99:7d:6a:99:
b4:04:af:bd:43:7c:31:11:f0:9f:ef:e1:19:26:1b:
11:f9:d9:07:79:4f:14:89:32:8d:02:d1:c4:08:03:
09:9c:37:2a:a8:9f:48:2c:ac:2a:14:a9:a8:28:fd:
eb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:35:C6:3F:7E:01:AC:A8:0E:F3:09:28:59:48:12:05:B4:F1:D6:F3
X509v3 Authority Key Identifier:
keyid:F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/tDXGP34BrKgO8wkoWUgSBbTx1vM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.21.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:ff:dc:fe:7d:d5:c9:7c:5f:fe:ec:94:0d:fa:68:07:6e:00:
31:6b:c9:04:e5:ae:5a:3d:50:9f:5e:82:be:83:f2:5d:7a:50:
c7:11:17:a3:47:37:b7:05:2f:ca:ec:e9:a3:a3:d6:9f:40:90:
59:5e:a4:2a:b6:a9:cd:ac:8e:ae:a1:6c:78:52:ab:fc:19:f2:
a3:a5:c2:be:fb:70:c5:66:b8:20:a1:b7:13:f3:1b:f7:47:64:
80:35:42:8f:37:3c:29:62:48:7d:84:43:93:a2:0d:76:dc:d0:
87:ca:9f:d2:7d:85:8f:dd:b1:90:ce:ea:4e:67:9e:49:8b:2c:
5c:96:b9:99:fe:fc:b7:4c:53:00:a3:61:c1:79:85:75:5e:a3:
8c:aa:11:14:7b:d2:53:35:1a:5a:cf:a4:c0:04:b1:87:eb:9a:
7f:cb:d9:17:26:0e:f7:17:fe:d1:d4:7a:91:df:18:ba:29:fc:
a3:18:e3:b7:4b:ef:a5:14:bf:86:cd:c5:d2:45:16:92:37:18:
1c:2f:b5:b1:cb:cc:b4:fb:b6:8e:00:a8:0b:c8:35:d7:5b:b2:
f3:d6:c1:84:32:00:ea:91:89:cb:d9:ec:46:eb:c5:e8:a2:25:
a0:50:29:2c:e2:42:3b:3f:ca:cd:81:2b:8f:bc:20:80:72:b0:
4f:f8:fd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:06 2025 by rpki-client