Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5cf307-650a-4384-a6b4-545d3068c666/1/EqA2AY_BFzInheGdvoIbdiAUJ7U.roa
File: EqA2AY_BFzInheGdvoIbdiAUJ7U.roa (raw, json)
Hash identifier: kmZtZJ5/zPGeSaDHsqc5z5TYzbulYyPQ+Igmow2aG8k=
Subject key identifier: 12:A0:36:01:8F:C1:17:32:27:85:E1:9D:BE:82:1B:76:20:14:27:B5
Certificate issuer: /CN=094895a071a3add9df3ec84e64547afdca6b62a3
Certificate serial: 08A81A87
Authority key identifier: 09:48:95:A0:71:A3:AD:D9:DF:3E:C8:4E:64:54:7A:FD:CA:6B:62:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUiVoHGjrdnfPshOZFR6_cprYqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5cf307-650a-4384-a6b4-545d3068c666/1/EqA2AY_BFzInheGdvoIbdiAUJ7U.roa
Signing time: Sat 01 Jan 2022 06:06:40 +0000
ROA not before: Sat 01 Jan 2022 06:06:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201333
IP address blocks: 45.11.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145234567 (0x8a81a87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094895a071a3add9df3ec84e64547afdca6b62a3
Validity
Not Before: Jan 1 06:06:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12a036018fc117322785e19dbe821b76201427b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:b6:a1:45:4c:36:26:fd:6b:37:67:a3:c2:
80:e6:4b:06:b8:24:d8:67:96:d7:be:13:fc:84:98:
ab:76:ae:b3:29:49:98:09:09:f6:d3:af:4d:99:4c:
eb:b4:d4:97:0d:b0:44:5f:35:62:52:7f:54:ad:73:
ae:33:75:8c:28:50:eb:6a:5b:02:c2:c8:bc:bc:58:
6a:7a:27:05:d3:47:9a:7f:37:5f:2b:de:d5:5e:b9:
a3:fc:ce:0e:e0:d0:3f:99:1c:8c:6f:d5:5c:44:8e:
f7:dc:af:63:6c:ef:ec:89:ce:da:30:a7:91:16:4b:
6c:2e:53:46:80:aa:88:76:19:fb:87:c9:cf:93:b8:
a3:a1:77:16:39:a5:65:a4:f2:89:8d:9f:12:7f:4b:
23:56:c6:16:95:96:22:f7:c3:c9:81:fa:c4:17:1f:
45:01:9b:58:12:37:16:19:6f:a1:cc:68:74:65:7b:
29:a1:19:40:b3:d0:8d:f0:52:52:08:ac:38:ce:9c:
03:9e:02:15:1c:d1:4b:0e:7a:2b:4a:e3:82:3d:dd:
4c:82:d6:a7:9c:e3:c5:76:71:02:5d:e7:34:e9:c6:
8e:ce:c0:0a:09:0c:75:9d:ed:9c:b3:64:37:7b:06:
95:e7:fa:17:34:51:5b:7d:12:61:42:45:3a:d1:5e:
b4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A0:36:01:8F:C1:17:32:27:85:E1:9D:BE:82:1B:76:20:14:27:B5
X509v3 Authority Key Identifier:
keyid:09:48:95:A0:71:A3:AD:D9:DF:3E:C8:4E:64:54:7A:FD:CA:6B:62:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUiVoHGjrdnfPshOZFR6_cprYqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5cf307-650a-4384-a6b4-545d3068c666/1/EqA2AY_BFzInheGdvoIbdiAUJ7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5cf307-650a-4384-a6b4-545d3068c666/1/CUiVoHGjrdnfPshOZFR6_cprYqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.116.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:4d:d0:a2:ad:9f:ec:4e:6a:5a:fc:dc:b4:ba:78:40:f6:28:
a9:cc:6f:0a:71:32:ab:97:ce:ad:2f:f6:79:d4:db:4a:65:38:
c8:19:b2:a6:ad:3d:44:13:25:67:70:bc:f4:61:8e:b7:ce:cb:
af:83:e4:cc:ee:89:db:07:49:ae:ce:a1:b8:ae:47:b5:88:5c:
40:95:5c:90:82:39:c4:92:bf:36:a6:de:d0:ed:54:d8:6b:f4:
8f:ab:5d:52:20:38:bf:2f:5a:ba:85:60:45:24:f8:bb:15:d1:
1e:84:1f:68:70:d0:14:5f:28:e4:3d:1f:26:09:f7:63:cb:f6:
32:e6:f8:4a:ea:83:3a:cd:37:82:d1:21:38:35:27:ce:ea:fe:
61:71:94:3a:93:90:d3:a8:8b:45:69:3b:79:5f:77:25:4f:46:
2c:d9:c9:67:e2:fe:48:01:dd:62:31:9e:bc:c9:8b:5b:49:33:
9d:a7:c4:28:7b:38:76:a8:88:65:9b:0d:57:b4:50:0f:dd:36:
7f:7f:3f:58:13:d3:fc:4f:53:68:10:b7:b4:ab:ac:20:09:11:
82:b6:93:11:bd:d6:b5:06:77:20:65:89:05:8a:3f:16:15:a4:
ba:ff:30:34:e5:99:30:7a:fa:2e:87:7c:e8:0f:f5:67:04:94:
ee:94:72:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:58 2023 by rpki-client on console-fra.rpki-client.org