Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ee84b7-ae27-4ee5-952f-64da5c10cd1f/1/epIbphbZwcb5JX4_3aU3x6AavBY.roa
File: epIbphbZwcb5JX4_3aU3x6AavBY.roa (raw, json)
Hash identifier: XEMAkE42PFY0xmZm5aPi5UU7i22cu3wvb0plHJmcF14=
Subject key identifier: 7A:92:1B:A6:16:D9:C1:C6:F9:25:7E:3F:DD:A5:37:C7:A0:1A:BC:16
Certificate issuer: /CN=450f9ed05fe03f38cfa53d6a85db3b79bffe8c91
Certificate serial: 0182EDF91EC4537CED8EA81AAF5995E6D7FD
Authority key identifier: 45:0F:9E:D0:5F:E0:3F:38:CF:A5:3D:6A:85:DB:3B:79:BF:FE:8C:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQ-e0F_gPzjPpT1qhds7eb_-jJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ee84b7-ae27-4ee5-952f-64da5c10cd1f/1/epIbphbZwcb5JX4_3aU3x6AavBY.roa
Signing time: Tue 30 Aug 2022 08:58:22 +0000
ROA not before: Tue 30 Aug 2022 08:58:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212372
IP address blocks: 45.132.57.0/24 maxlen: 24
45.132.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ed:f9:1e:c4:53:7c:ed:8e:a8:1a:af:59:95:e6:d7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450f9ed05fe03f38cfa53d6a85db3b79bffe8c91
Validity
Not Before: Aug 30 08:58:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a921ba616d9c1c6f9257e3fdda537c7a01abc16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e6:d4:4a:c4:31:9f:06:0e:7d:29:20:67:d5:
28:4d:ce:50:59:54:b3:bc:49:30:64:f3:e8:17:81:
4b:4a:37:ec:8b:98:d1:90:6b:07:21:9e:89:fd:74:
83:c1:9a:b9:0d:84:7a:a2:ce:bc:6e:c7:70:1b:32:
e1:e6:c6:3f:59:2c:4f:8e:ad:e2:25:dd:e0:08:e9:
cc:e4:85:c5:6a:3e:95:79:3f:42:b3:d1:d2:7b:a9:
34:1f:fb:9c:b6:13:5c:cc:6d:f7:9b:12:ab:85:a2:
06:0a:4c:b0:5a:1f:52:75:9f:e2:d6:75:0f:3e:b5:
f0:1a:56:0c:05:39:da:92:c7:f1:19:2e:4a:a7:22:
09:69:09:9f:ce:ca:9c:50:6f:fc:26:92:8e:97:30:
46:d1:a7:8d:ab:99:fc:04:af:c7:64:6a:06:50:20:
d0:3b:24:4e:b7:b5:30:f9:2d:46:56:b6:f9:23:61:
0e:e2:b8:a4:f8:23:52:f2:35:4e:fe:0b:88:98:40:
f3:26:1b:f7:ae:73:3e:11:bd:b0:fb:17:00:20:43:
f6:79:13:c1:61:49:a0:2e:83:05:3f:1b:a1:f6:a9:
09:bc:d1:ec:8b:aa:95:c4:b3:92:33:a8:92:bf:43:
5f:39:4a:32:89:1b:b0:38:f6:8b:79:b9:b4:ec:28:
9c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:92:1B:A6:16:D9:C1:C6:F9:25:7E:3F:DD:A5:37:C7:A0:1A:BC:16
X509v3 Authority Key Identifier:
keyid:45:0F:9E:D0:5F:E0:3F:38:CF:A5:3D:6A:85:DB:3B:79:BF:FE:8C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQ-e0F_gPzjPpT1qhds7eb_-jJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ee84b7-ae27-4ee5-952f-64da5c10cd1f/1/epIbphbZwcb5JX4_3aU3x6AavBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ee84b7-ae27-4ee5-952f-64da5c10cd1f/1/RQ-e0F_gPzjPpT1qhds7eb_-jJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.57.0-45.132.58.255
Signature Algorithm: sha256WithRSAEncryption
21:c8:95:f0:52:95:62:52:6a:7d:3b:fe:01:87:b1:21:cc:d7:
81:0a:c8:5d:a3:b2:f9:16:72:e1:b5:6d:ae:f1:cb:eb:ee:86:
dc:0a:85:eb:dc:fa:2e:1d:81:2e:d7:0e:d9:b8:5e:dc:d4:24:
e9:d0:99:fd:62:5e:13:52:11:ba:5c:0f:4c:1b:29:99:91:82:
ad:37:e9:3e:db:e8:ca:1b:ce:c9:96:7a:1e:9d:a9:7e:e1:92:
1f:70:1b:35:53:79:53:1c:08:58:82:ab:69:72:65:8f:f2:68:
b4:3c:ee:21:c7:a8:37:a2:87:00:4e:0f:5e:c3:34:ba:bf:ab:
07:52:3f:23:83:77:b7:aa:f7:98:57:76:38:83:f1:37:2c:24:
44:ca:71:c6:06:c0:96:8d:c3:75:52:26:87:f7:4f:2e:2e:8e:
e8:80:3c:d0:01:98:4c:c3:60:27:55:39:ae:91:bb:eb:14:81:
69:d3:a6:f5:ac:ac:c0:b0:bb:52:00:b3:72:d1:a4:8c:63:a4:
a5:3e:84:76:fa:2b:e8:5c:56:db:b3:cd:8c:8e:a3:53:b9:e7:
14:2f:b5:f6:e1:a9:fb:d0:2e:0f:a8:8a:88:19:19:9a:36:c7:
6a:c4:7f:3e:c9:c9:8d:43:47:98:b7:b5:f3:d1:cc:1a:c4:bb:
82:0e:1b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:27 2024 by rpki-client on console-ams.rpki-client.org