Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8e0a30-7d70-486d-83f5-ca8a847b330a/1/ji5KE9GOPuEjsasuhBGQzbeR-EA.roa
File: ji5KE9GOPuEjsasuhBGQzbeR-EA.roa (raw, json)
Hash identifier: tOrJaA2xoFo3US34m5ghbc3Go8Jj+ztqZX/AsWT/jCA=
Subject key identifier: 8E:2E:4A:13:D1:8E:3E:E1:23:B1:AB:2E:84:11:90:CD:B7:91:F8:40
Certificate issuer: /CN=62428d1adcf82ec1c4f7c4d24e8292dd7b088557
Certificate serial: 04520835
Authority key identifier: 62:42:8D:1A:DC:F8:2E:C1:C4:F7:C4:D2:4E:82:92:DD:7B:08:85:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkKNGtz4LsHE98TSToKS3XsIhVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8e0a30-7d70-486d-83f5-ca8a847b330a/1/ji5KE9GOPuEjsasuhBGQzbeR-EA.roa
Signing time: Sat 01 Jan 2022 01:01:23 +0000
ROA not before: Sat 01 Jan 2022 01:01:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61323
IP address blocks: 45.131.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72484917 (0x4520835)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62428d1adcf82ec1c4f7c4d24e8292dd7b088557
Validity
Not Before: Jan 1 01:01:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e2e4a13d18e3ee123b1ab2e841190cdb791f840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:51:78:fb:69:f0:50:84:2e:f1:16:f8:d2:
81:ca:a1:45:41:bf:a9:80:5d:ef:e4:ab:ba:5d:38:
f4:2a:67:41:5c:4f:5c:df:45:02:9b:26:0f:82:10:
a4:63:37:d7:52:4c:99:ff:6c:e7:3b:5b:53:cb:36:
cd:87:3f:80:fd:a5:97:e7:ba:6a:78:ba:57:ba:14:
c5:6d:20:ec:66:43:b9:ae:a1:f2:b8:56:8f:25:29:
e2:5a:d0:ff:bf:d2:0d:b5:c4:bf:eb:f2:34:f8:1d:
e7:05:dd:13:0b:7c:ad:23:e2:17:ba:5b:9d:ce:c3:
88:43:55:04:77:ff:2d:75:da:25:62:d9:a4:c5:52:
b7:49:28:d4:1e:a0:b3:14:6a:21:aa:5f:a5:fb:a6:
37:9f:ce:13:38:b2:03:01:b8:03:f8:3f:55:53:ee:
9c:08:dc:fe:35:b6:94:66:bf:bb:7c:73:76:bf:b1:
73:64:f1:0b:2b:2f:85:f0:5d:58:92:5e:aa:73:fb:
7c:3e:a4:0c:ae:a4:50:33:8b:7d:2f:6e:10:30:7b:
a0:b5:47:b3:2d:17:a0:b5:b2:2e:9d:2b:65:c9:f1:
a4:b3:8d:a7:d5:0c:53:20:c1:e5:c9:6d:81:be:b6:
66:82:00:56:f7:8a:39:f9:ba:e0:85:82:30:5d:33:
d7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2E:4A:13:D1:8E:3E:E1:23:B1:AB:2E:84:11:90:CD:B7:91:F8:40
X509v3 Authority Key Identifier:
keyid:62:42:8D:1A:DC:F8:2E:C1:C4:F7:C4:D2:4E:82:92:DD:7B:08:85:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkKNGtz4LsHE98TSToKS3XsIhVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8e0a30-7d70-486d-83f5-ca8a847b330a/1/ji5KE9GOPuEjsasuhBGQzbeR-EA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8e0a30-7d70-486d-83f5-ca8a847b330a/1/YkKNGtz4LsHE98TSToKS3XsIhVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.136.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:3a:49:b0:58:7d:46:02:1a:92:7f:ce:3f:74:57:6f:51:8f:
18:a9:1b:3c:cc:77:d5:88:b6:6c:88:d1:23:2d:4b:91:fd:77:
94:11:42:34:8a:d7:ea:f2:a1:89:65:65:72:f3:3f:bf:0a:b6:
fe:7b:0a:66:8c:d9:c2:66:7a:9b:22:8e:5e:f1:79:33:d8:12:
83:f2:d5:5d:54:7c:4b:09:b7:32:f3:4e:5d:31:e9:9d:1f:01:
d9:bc:4f:ae:6d:cb:56:a3:d0:3c:c6:2b:7d:e2:26:db:d0:f2:
57:7b:2d:a6:ca:5a:d9:5f:bb:5f:33:98:9b:8d:ae:8c:21:d7:
36:d6:ee:f8:d8:a6:9c:56:85:f9:a6:84:bf:43:53:2c:41:84:
68:68:e0:95:ac:a3:3a:09:c6:c8:a7:a7:cd:db:48:bd:9c:6c:
73:3b:ef:da:5c:aa:ee:bf:50:d1:f3:17:97:ac:af:67:d9:1f:
52:fa:ae:0f:c4:8a:e7:79:89:7f:8b:b3:2c:e4:68:c0:e8:82:
d3:87:57:ea:70:ab:c1:ff:3d:56:cc:86:a1:90:f3:40:5e:da:
b5:cc:f3:10:b9:94:af:de:8e:66:49:50:75:13:07:f5:d9:15:
11:6e:8e:c0:95:f2:10:1b:fb:aa:0f:5e:b1:c4:c1:44:ea:86:
8e:6d:fc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:53 2024 by rpki-client on console-fra.rpki-client.org