Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/OnPQFZ1_pZPtzK3x6cFW1fh8Gfk.roa
File: OnPQFZ1_pZPtzK3x6cFW1fh8Gfk.roa (raw, json)
Hash identifier: 7yzfHlXjsVIoq5pxVuMG2X7qYpHF65ajzq8pPbPVNnA=
Subject key identifier: 3A:73:D0:15:9D:7F:A5:93:ED:CC:AD:F1:E9:C1:56:D5:F8:7C:19:F9
Certificate issuer: /CN=7945a3a1efc0e6b3e03e8412726b0233c08e77fb
Certificate serial: 080B9AB0
Authority key identifier: 79:45:A3:A1:EF:C0:E6:B3:E0:3E:84:12:72:6B:02:33:C0:8E:77:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eUWjoe_A5rPgPoQScmsCM8COd_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/OnPQFZ1_pZPtzK3x6cFW1fh8Gfk.roa
Signing time: Sat 01 Jan 2022 00:51:34 +0000
ROA not before: Sat 01 Jan 2022 00:51:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7007
IP address blocks: 45.94.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134978224 (0x80b9ab0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7945a3a1efc0e6b3e03e8412726b0233c08e77fb
Validity
Not Before: Jan 1 00:51:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a73d0159d7fa593edccadf1e9c156d5f87c19f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a9:6b:61:39:75:eb:b5:64:11:0a:fb:47:a8:
e6:a1:46:12:0d:36:02:70:91:e8:47:3b:c5:78:19:
63:0a:2e:34:f8:e9:8b:fa:11:f3:5f:94:95:4d:f1:
f3:54:c4:b7:7d:ad:45:c7:8a:e1:e9:3c:ae:c3:0e:
3a:0e:ba:56:48:4e:fd:f1:ce:1a:cd:4b:55:41:4d:
43:29:ad:bf:af:4a:1a:f0:58:27:75:a2:dd:52:e0:
1f:d9:02:5d:b6:56:5f:08:d3:7e:a8:e6:1e:d6:a6:
47:05:4b:4c:eb:18:65:b9:75:3b:3b:69:ea:59:2c:
40:15:ab:20:3a:54:5e:e6:89:df:7a:2f:c7:3b:75:
c7:93:5f:3d:c8:2a:51:03:c7:2f:ca:d4:91:82:89:
03:c8:ce:5e:d4:2a:58:11:31:21:67:07:8a:97:c6:
cb:be:53:88:93:8a:2b:3b:37:14:90:05:d1:d6:5f:
11:3d:43:71:e1:68:b1:c0:7e:37:91:6b:e9:71:0f:
23:e3:e6:fd:7f:00:d9:6f:22:96:19:15:60:3b:02:
57:72:73:de:64:b9:3d:58:16:4a:2f:b2:51:d1:3e:
b9:34:5d:40:de:7e:1e:26:5a:5a:f4:5f:90:e8:e3:
9d:5d:4a:79:17:b7:a4:b3:18:b3:b6:de:24:94:69:
9d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:73:D0:15:9D:7F:A5:93:ED:CC:AD:F1:E9:C1:56:D5:F8:7C:19:F9
X509v3 Authority Key Identifier:
keyid:79:45:A3:A1:EF:C0:E6:B3:E0:3E:84:12:72:6B:02:33:C0:8E:77:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUWjoe_A5rPgPoQScmsCM8COd_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/OnPQFZ1_pZPtzK3x6cFW1fh8Gfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/eUWjoe_A5rPgPoQScmsCM8COd_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.184.0/22
Signature Algorithm: sha256WithRSAEncryption
45:e0:b7:d7:fb:82:f5:b4:e2:57:3a:f4:a3:18:b3:90:dd:c3:
fb:45:0c:43:06:fa:10:7a:a0:1d:ef:38:d0:c6:20:ed:3b:a3:
7e:cc:f5:5d:82:f3:56:b6:49:aa:41:f9:1b:c6:ec:7e:8e:eb:
28:ab:5b:8f:91:d3:42:0c:eb:be:77:6b:9a:52:b8:a6:c6:61:
6a:ac:20:fd:26:ce:98:d2:0c:44:e8:af:6e:d4:fb:5a:44:3c:
44:70:0d:7d:f6:a2:d7:b1:3e:14:35:8d:3f:bf:40:94:c0:39:
71:f2:f7:6b:e1:08:6c:01:35:f0:2d:5f:65:2a:95:64:6d:bb:
09:42:7d:ee:4e:93:d6:6d:78:5b:20:84:85:a2:a6:ea:2e:28:
27:3d:94:86:27:1f:84:e7:f6:7e:b5:06:d0:33:17:63:8f:ca:
ce:60:36:59:a4:bb:95:e1:83:97:ee:09:b0:72:a9:59:30:9d:
a0:12:01:7a:d9:fb:82:37:2c:eb:dc:f9:a4:bb:d5:5e:99:1b:
b2:53:06:6f:bf:5d:9d:b5:5e:01:4e:d3:77:2a:20:a7:28:5d:
68:91:10:5a:ff:ab:4c:94:fc:8b:a0:db:3f:04:6d:19:c6:a8:
68:18:5f:75:35:6f:cd:77:2e:52:68:43:8b:4c:b4:8f:07:16:
ff:27:fd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:33 2024 by rpki-client on console-ams.rpki-client.org