Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/1LPOBogs0rVA8VykjGflHMolOe0.roa
File: 1LPOBogs0rVA8VykjGflHMolOe0.roa (raw, json)
Hash identifier: tLaTTBJSnN2f7EQR/Ee+ZXDEFQ2dKWBSk/kUc/mxsWY=
Subject key identifier: D4:B3:CE:06:88:2C:D2:B5:40:F1:5C:A4:8C:67:E5:1C:CA:25:39:ED
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 0183C808B2CC7CE55B46F94AC5D3C690AC54
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/1LPOBogs0rVA8VykjGflHMolOe0.roa
Signing time: Tue 11 Oct 2022 17:12:36 +0000
ROA not before: Tue 11 Oct 2022 17:12:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.8.172.0/22 maxlen: 22
45.66.148.0/22 maxlen: 24
45.13.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c8:08:b2:cc:7c:e5:5b:46:f9:4a:c5:d3:c6:90:ac:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Oct 11 17:12:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4b3ce06882cd2b540f15ca48c67e51cca2539ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bd:a8:13:2c:e8:86:7f:22:dd:ee:fb:e9:be:
13:45:f5:8c:e8:e9:f1:4d:e0:57:53:6a:e6:8c:22:
99:75:7c:e4:b0:ca:45:80:e7:66:4b:9e:86:05:e0:
5b:41:66:da:b9:4c:21:06:b8:8f:9f:2a:ee:59:52:
c1:00:5a:47:7e:ee:33:a4:a5:68:53:db:27:f5:2c:
18:93:01:53:2c:65:a6:24:c9:58:5b:ea:2a:64:02:
84:e6:e8:c1:ab:2c:4c:3c:9f:2b:b8:6c:21:8f:9a:
35:51:d9:e5:24:c8:9d:e2:fe:b4:e3:c2:bf:f0:29:
05:3c:9f:53:9b:5e:b8:5a:f7:b0:6d:60:a7:14:99:
da:bc:8c:fe:19:4e:b7:7a:7d:c1:02:fe:f6:04:14:
fa:29:d4:6d:0c:51:cb:db:97:ba:dd:15:06:c6:66:
d6:a0:b0:72:9a:59:3b:a1:ee:13:81:6f:88:97:42:
7a:ae:7d:9e:d7:1f:a6:73:d7:9d:3d:4c:cd:a9:35:
be:63:2c:e0:aa:d8:d5:8d:04:30:af:46:6e:db:5b:
6a:c0:30:ab:42:ce:b7:13:c0:0b:bb:e1:2d:b4:e6:
cd:31:e1:ed:9e:99:23:e6:cd:f8:72:b9:d9:ba:b7:
c4:d4:f8:c3:c7:f3:56:6a:48:ca:b6:58:c2:43:35:
6c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B3:CE:06:88:2C:D2:B5:40:F1:5C:A4:8C:67:E5:1C:CA:25:39:ED
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/1LPOBogs0rVA8VykjGflHMolOe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.172.0/22
45.13.149.0/24
45.66.148.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:ba:cf:00:b6:d7:8b:a1:dc:1e:3e:dc:f6:7f:e0:27:1f:b7:
9a:8f:ad:ee:76:be:84:c2:35:07:41:ce:35:07:4e:5a:73:27:
a6:aa:fa:ce:d5:15:5f:8c:10:79:95:ee:c0:44:0a:af:ae:7b:
bb:46:ed:4f:3b:38:d2:39:33:43:5f:cb:ba:b8:58:25:dd:b3:
c7:e5:3f:eb:0a:44:83:61:b1:12:ca:7e:b4:2f:61:f0:58:e8:
4a:c8:33:c6:62:d4:af:b0:f3:54:68:9c:b6:ab:f1:c8:70:83:
f1:9f:7e:b0:a6:c5:3e:a3:90:b5:31:07:bf:67:74:a2:f5:e0:
b4:8f:11:61:07:ec:5b:95:60:08:57:72:b9:fb:54:6d:c0:b3:
22:a8:4e:4d:a3:98:25:9f:9e:9a:1a:4f:c6:a5:4b:b6:fd:de:
5b:37:d4:9c:e9:7a:a7:bc:c8:a2:e5:22:80:11:bb:d9:7e:00:
06:50:55:e8:36:4d:66:ed:41:36:c4:1a:de:ca:c8:c4:55:1b:
9c:3e:93:53:5d:67:32:ca:9a:62:c3:0e:e3:f8:81:45:36:41:
2c:a1:dc:5b:3b:86:55:14:95:3e:51:44:ea:2b:71:ac:6a:a7:
37:51:e5:e5:9c:31:d5:13:55:9d:30:4c:7f:1f:14:ef:99:06:
d9:1e:6b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:30 2025 by rpki-client