Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/1-CXeP_7x2ODiO1DHiYwKRF3w5Vw.roa
File: 1-CXeP_7x2ODiO1DHiYwKRF3w5Vw.roa (raw, json)
Hash identifier: hCqK224VOs+WDeMeWJahIPp/3o5i0lXRf8cowNHkpsM=
Subject key identifier: F8:25:DE:3F:FE:F1:D8:E0:E2:3B:50:C7:89:8C:0A:44:5D:F0:E5:5C
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 03077482
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/1-CXeP_7x2ODiO1DHiYwKRF3w5Vw.roa
Signing time: Sat 01 Jan 2022 01:50:25 +0000
ROA not before: Sat 01 Jan 2022 01:50:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46573
IP address blocks: 45.146.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50820226 (0x3077482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 01:50:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f825de3ffef1d8e0e23b50c7898c0a445df0e55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:fa:1a:6a:da:93:6f:e0:6d:e0:1e:a3:eb:
03:92:2c:91:8e:15:45:33:b6:dd:55:62:87:3b:98:
64:b9:11:85:f2:93:90:d8:61:f0:f0:ce:15:0a:5e:
42:a4:0f:6c:7e:bf:b0:76:15:36:a8:af:a9:fa:ce:
1c:da:ac:e8:88:87:26:50:21:3d:89:51:1d:9c:98:
15:4f:f6:20:8a:c0:2d:9f:9e:13:9f:2e:97:cf:76:
de:17:0d:e6:2e:76:fd:78:58:8d:16:06:45:72:76:
73:c7:8f:dd:a6:ee:d0:07:38:58:d2:41:be:b1:8f:
6c:4d:df:d3:0a:13:6a:22:a7:cc:7c:1c:5e:14:3a:
dc:07:09:fb:32:04:8e:53:f0:01:43:08:69:7e:c6:
23:f0:63:dd:f4:d5:3f:57:35:e5:22:4d:07:8b:dc:
71:a7:fd:ea:24:7b:cf:9c:1d:0b:5b:1d:7f:da:30:
ec:87:db:f7:cd:c4:8e:4c:15:9d:6d:60:30:85:5e:
fc:be:40:35:67:4a:e0:d0:35:32:73:24:c8:c6:b6:
22:fa:c6:96:e5:39:bf:f3:e4:23:a8:75:5d:e8:75:
4b:f9:22:b4:b2:ee:95:7e:85:7d:3d:19:32:0e:d7:
c8:a7:46:da:d0:05:d3:44:bf:9f:e2:a5:57:91:41:
4f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:25:DE:3F:FE:F1:D8:E0:E2:3B:50:C7:89:8C:0A:44:5D:F0:E5:5C
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/1-CXeP_7x2ODiO1DHiYwKRF3w5Vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.107.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:c5:37:e1:b0:3e:79:29:26:6b:44:ee:49:71:f6:03:b2:bd:
b0:34:a7:ed:85:df:b9:28:6e:88:16:54:97:41:dd:10:ab:1b:
25:b0:8d:7d:6e:bb:23:18:9a:e5:da:80:2b:35:38:26:f9:32:
23:56:cc:89:44:7b:99:b9:59:46:1f:ce:14:5e:a3:d4:bd:1d:
99:65:68:ee:c5:d8:aa:1f:31:98:7b:77:11:7e:8d:f8:87:6d:
fd:b8:c6:f5:9e:18:f4:13:6f:56:7a:9c:b6:32:85:b7:f4:38:
a6:aa:df:14:ad:98:91:bf:29:f2:ff:35:58:8c:9c:cc:68:6c:
4e:76:60:b4:3b:81:b3:2a:1c:25:cd:ec:f0:67:08:30:e2:f3:
75:f3:53:da:f9:1d:c2:89:49:90:65:0a:6f:94:90:23:94:26:
f8:fe:d6:d6:ea:df:60:6e:c3:69:7a:99:05:fd:45:63:85:25:
5a:cc:83:21:12:8d:83:47:8f:4b:48:56:d6:26:f9:5f:40:be:
44:78:d5:cf:f5:d3:27:e1:4e:7e:b9:3a:17:63:4f:34:58:c7:
9b:8f:e9:f9:2c:df:19:4d:2b:9f:b6:e5:d5:f2:73:f9:81:d7:
c9:91:da:64:26:4d:01:84:e3:bc:78:b6:d7:6f:e4:fd:57:68:
31:91:43:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org