Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/e0MTC4_IxBBsxHiiPPFuo3rYK3w.roa
File: e0MTC4_IxBBsxHiiPPFuo3rYK3w.roa (raw, json)
Hash identifier: H0HJQYQgBRqIGTn4zFqo0XLeNzk84dbUagwOmVV8RRs=
Subject key identifier: 7B:43:13:0B:8F:C8:C4:10:6C:C4:78:A2:3C:F1:6E:A3:7A:D8:2B:7C
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01873C54AA8E96FACC6E5EB7410A70806E68
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/e0MTC4_IxBBsxHiiPPFuo3rYK3w.roa
Signing time: Sat 01 Apr 2023 10:19:54 +0000
ROA not before: Sat 01 Apr 2023 10:19:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.146.104.0/24 maxlen: 24
45.132.98.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3c:54:aa:8e:96:fa:cc:6e:5e:b7:41:0a:70:80:6e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Apr 1 10:19:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b43130b8fc8c4106cc478a23cf16ea37ad82b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:05:ac:9f:25:eb:f8:4b:05:45:19:15:b4:78:
97:7f:b4:aa:56:09:53:f8:5b:9d:3a:20:fd:26:76:
fb:c1:41:10:4c:77:7a:42:04:a4:18:6e:ae:d0:d4:
dd:aa:60:09:5e:cc:99:5b:0d:09:61:07:ea:e0:e9:
50:b8:13:25:5a:9c:93:48:eb:db:4b:be:58:89:ee:
e7:a7:0f:a0:73:25:0d:c9:2d:07:84:7f:82:4e:47:
51:ed:87:94:5d:9a:8c:bf:da:23:63:63:b9:2d:bc:
f1:57:ca:89:28:b3:46:1d:c0:35:cd:08:70:17:14:
8e:2b:29:cf:79:06:73:74:a0:e1:52:8b:18:cb:00:
1e:93:d3:77:d5:cb:1e:11:56:0e:f5:7a:fd:f1:40:
32:45:8f:2b:59:06:0c:40:63:38:5b:17:77:91:04:
db:d5:d1:70:92:73:db:86:36:ba:74:05:72:a2:d4:
ea:63:a4:1e:6e:20:67:d7:6c:55:fd:0c:48:3c:4d:
ae:7e:5f:58:4a:df:87:9b:59:31:7f:54:98:fd:59:
1c:d1:44:04:55:03:bb:df:63:6e:0c:48:51:0a:0a:
f2:56:72:11:44:ac:b0:df:43:0c:82:92:f0:fd:0b:
38:4e:0d:48:97:f1:4d:ad:bf:76:4a:83:4e:4d:e2:
dd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:43:13:0B:8F:C8:C4:10:6C:C4:78:A2:3C:F1:6E:A3:7A:D8:2B:7C
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/e0MTC4_IxBBsxHiiPPFuo3rYK3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.98.0/23
45.146.104.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:e3:80:41:51:2b:d5:4f:81:0a:20:d4:7a:c8:f9:da:64:19:
aa:77:01:25:db:25:81:97:92:62:96:10:51:99:ba:47:8d:68:
b4:d3:61:14:1f:bb:16:6b:50:33:c8:d6:81:45:69:36:0b:6d:
55:f8:54:8c:17:5d:c9:f5:7a:56:b0:67:7c:6c:77:48:da:d7:
0d:28:21:a0:f6:72:cc:22:99:03:1c:33:19:65:0a:f2:74:bd:
60:ed:f0:15:f7:63:b6:87:c8:a0:53:74:c5:67:f4:60:68:96:
2b:89:41:19:0a:03:8a:5d:19:07:b5:db:fc:e3:c5:83:ab:1f:
c2:41:44:be:06:67:79:e5:52:cc:63:bc:05:94:2e:d6:77:58:
07:8b:95:cd:42:c6:86:12:da:ae:f1:87:68:bd:c5:8c:42:36:
76:01:c1:9c:1e:81:05:f5:99:59:a9:a0:b4:fd:f4:57:9e:1b:
8e:9e:60:aa:ec:37:79:65:39:f4:9e:7f:89:be:7e:c1:e0:a9:
17:9c:73:1c:20:7f:53:86:42:35:3e:54:de:94:71:f5:02:2b:
70:d8:fc:3f:6f:ed:82:c0:9a:65:59:e6:e7:93:ab:3e:49:8a:
78:ae:3c:69:79:46:c8:c6:f7:0b:a1:69:bd:e9:8c:d0:2c:7b:
39:21:51:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org