Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/FVe-vlsgKjC841E_nA2zmx2hepM.roa
File: FVe-vlsgKjC841E_nA2zmx2hepM.roa (raw, json)
Hash identifier: uiziTYlmOh4OCd802K++mtvb7cyCzx8ye98oSutrH48=
Subject key identifier: 15:57:BE:BE:5B:20:2A:30:BC:E3:51:3F:9C:0D:B3:9B:1D:A1:7A:93
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 018501187F42E804A79A512720A1391CA415
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/FVe-vlsgKjC841E_nA2zmx2hepM.roa
Signing time: Sun 11 Dec 2022 12:11:00 +0000
ROA not before: Sun 11 Dec 2022 12:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 212.2.236.0/22 maxlen: 24
45.132.98.0/23 maxlen: 24
45.132.96.0/22 maxlen: 24
45.132.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:01:18:7f:42:e8:04:a7:9a:51:27:20:a1:39:1c:a4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Dec 11 12:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1557bebe5b202a30bce3513f9c0db39b1da17a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:b7:cb:85:a7:13:cf:e6:e1:04:84:5b:a4:
c0:f1:a8:3c:ed:e0:10:20:40:26:e4:1e:3b:7e:2e:
e6:b5:8e:8f:70:24:a0:02:24:96:fe:51:f2:4e:27:
c1:bc:1e:06:5b:5a:84:80:79:65:ff:79:9b:1d:e7:
7c:92:09:f4:51:04:9a:36:98:5e:a3:25:76:bc:b9:
56:ca:5e:62:81:8d:76:1f:d8:39:1c:65:b9:55:ec:
9e:5d:88:c5:9e:7d:d9:e6:11:e3:3b:2d:ea:16:dc:
5a:64:0f:a3:47:37:0c:97:a5:7f:f4:aa:5a:f6:d4:
8d:5a:7f:54:bd:47:11:11:02:eb:0e:fd:6e:8e:b0:
1e:f8:9f:30:fd:5b:7c:78:16:b4:8f:62:d0:f3:4c:
8f:91:15:64:85:b6:b5:c1:f3:77:08:3a:e0:a2:2c:
99:c3:1d:2d:fb:ca:20:36:dd:18:27:75:a4:f6:36:
52:66:71:74:4d:e8:ff:95:32:b0:75:95:b4:7f:54:
b9:e7:11:78:ae:ff:9a:0c:d1:f4:6e:f5:5a:b5:f2:
81:5a:f0:bc:05:81:aa:f9:bd:ae:cd:e8:76:29:96:
8a:b6:90:27:7a:37:68:d5:6f:14:a3:d5:aa:fe:00:
b8:ae:cf:60:b7:ec:89:46:4d:37:24:25:60:04:c5:
25:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:57:BE:BE:5B:20:2A:30:BC:E3:51:3F:9C:0D:B3:9B:1D:A1:7A:93
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/FVe-vlsgKjC841E_nA2zmx2hepM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.96.0/22
212.2.236.0/22
Signature Algorithm: sha256WithRSAEncryption
85:3a:74:58:52:a9:44:2c:28:55:e4:7b:8e:01:ea:fb:7e:3b:
70:ea:36:91:0c:cc:28:02:bb:a8:04:85:2c:6d:de:ae:39:ad:
7f:79:8d:a1:3b:e8:85:6d:92:8f:70:2e:a7:f9:07:f6:d0:aa:
4f:b2:54:a7:35:37:f8:5d:52:5f:16:24:95:9b:21:ec:9e:5f:
34:7e:bd:2f:bb:ad:b4:f4:12:de:2e:70:5c:a7:2f:39:6c:1c:
7c:70:49:40:67:ad:49:34:76:f6:5b:2c:e0:e0:75:1c:a9:3d:
a4:33:75:c6:a5:aa:10:34:73:49:fe:3e:fa:da:70:5c:96:2d:
5a:cd:43:41:92:6e:32:ee:95:79:e3:e3:39:73:5e:83:2e:0e:
8b:02:31:e9:52:bd:b8:45:ee:6d:8c:15:32:06:cf:89:3f:4c:
bf:bf:85:32:0c:a5:59:78:e6:7e:2c:e6:a4:a9:f2:00:2d:66:
d9:54:39:1b:49:f8:d6:72:8a:40:b1:53:74:37:f3:6f:77:6e:
af:39:9d:fe:b0:1c:66:34:b9:f4:03:f8:e7:e4:30:bf:23:13:
7d:61:84:fa:47:bf:4d:a0:18:7a:ae:22:a1:53:62:fc:cb:6a:
4b:b4:c5:1f:17:4a:b1:54:cf:2d:7e:60:0d:71:62:79:61:06:
03:2a:fa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:23 2025 by rpki-client