Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/e988sMtj-DheqDgw9tJd3rGtCGM.roa
File: e988sMtj-DheqDgw9tJd3rGtCGM.roa (raw, json)
Hash identifier: ishWnlEvBfBf7tsXKZcdbU1Caj0d1EuuQ5wQvKplI/Y=
Subject key identifier: 7B:DF:3C:B0:CB:63:F8:38:5E:A8:38:30:F6:D2:5D:DE:B1:AD:08:63
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0182E57BC284D64158FB2FC377ADEB8DF0A8
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/e988sMtj-DheqDgw9tJd3rGtCGM.roa
Signing time: Sun 28 Aug 2022 17:24:29 +0000
ROA not before: Sun 28 Aug 2022 17:24:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44258
IP address blocks: 45.132.98.0/24 maxlen: 24
45.132.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e5:7b:c2:84:d6:41:58:fb:2f:c3:77:ad:eb:8d:f0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Aug 28 17:24:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bdf3cb0cb63f8385ea83830f6d25ddeb1ad0863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:88:b8:65:b8:97:b0:05:23:d5:e6:7a:a7:0d:
04:f9:52:3d:2b:84:23:20:ab:67:f7:fc:6e:60:eb:
d3:aa:b4:8a:e4:f3:85:df:43:f0:3a:74:4f:a3:66:
cb:0e:63:e6:82:1a:5a:88:73:2a:78:8d:83:f4:3c:
32:73:85:f4:9a:c2:db:d8:88:55:13:5e:6a:79:0c:
22:0b:73:26:76:80:19:6a:28:60:8e:52:6b:56:b1:
07:3c:c0:66:69:ae:75:37:e1:5c:e2:36:8a:5f:b5:
ea:31:a5:a6:79:f2:64:3f:3d:b4:fb:38:26:cd:8e:
9a:0a:d5:ce:19:e0:81:55:09:7a:cd:18:b4:d7:d6:
86:b7:fd:53:6b:65:7f:a2:9a:bc:7c:3a:db:52:3b:
16:9e:6a:89:c7:b4:56:c9:24:dd:2f:6f:21:bb:fc:
28:11:9e:20:f3:3c:75:ab:1f:1e:80:10:bf:e7:33:
f5:1e:ed:ae:c4:07:fc:2c:aa:7d:4a:0b:ad:6e:8f:
1e:09:46:87:55:15:44:05:75:85:59:15:08:c2:b3:
01:f0:f0:fa:97:6f:d6:b8:17:c0:ec:ca:fe:a8:03:
a1:a0:39:d4:49:16:db:9c:23:50:c4:9d:1e:18:6f:
7c:f3:35:c9:33:44:47:ce:b9:a7:eb:ac:9e:d0:1a:
ba:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DF:3C:B0:CB:63:F8:38:5E:A8:38:30:F6:D2:5D:DE:B1:AD:08:63
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/e988sMtj-DheqDgw9tJd3rGtCGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.98.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:b0:b3:93:01:f2:b0:f6:3e:66:2e:cc:43:8d:09:3a:16:18:
93:83:8b:18:93:e8:cd:f5:99:33:c0:c8:02:5f:02:79:f7:fa:
21:3f:64:97:c6:dd:35:02:90:dc:5e:6d:aa:35:df:94:b8:d5:
29:ea:53:c0:7c:f3:c7:0b:96:56:1d:1c:8e:ec:38:93:fa:7f:
05:9f:a9:09:ef:29:78:aa:cf:ad:55:c8:87:c0:12:cd:27:b9:
34:6f:79:87:57:eb:8c:2f:b4:2c:41:01:da:a2:24:f5:cd:55:
f8:7a:49:42:8d:77:c8:f2:7d:b0:a6:62:f1:e8:05:17:4e:18:
30:08:c6:1f:33:4b:0d:20:11:ee:76:cd:c3:95:90:ee:95:23:
ba:5f:a9:bb:9a:45:24:c7:22:02:c8:50:f0:ce:4c:8d:d8:5a:
2c:2d:7d:93:8d:64:77:f9:c7:56:a4:92:d3:4e:d3:5b:98:4d:
6a:0f:f1:11:fc:2f:c4:db:52:49:12:17:da:05:a6:7d:d0:9a:
85:ea:27:97:50:c6:4e:d3:7d:a3:f4:97:32:1f:29:71:e1:c4:
3c:a9:a1:a2:4c:e9:bf:79:7e:3d:f8:90:96:42:18:32:87:87:
4f:07:7b:9e:43:21:fd:9a:45:72:c6:84:78:56:be:6d:c2:d2:
e5:5d:c1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org