Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/eDHEakbnntLExmZ_2GkODj8wKpc.roa
File: eDHEakbnntLExmZ_2GkODj8wKpc.roa (raw, json)
Hash identifier: rgbPJXNIwhy11JEgrk1SGcQG+aFgGO2DqNlyDLsCQU8=
Subject key identifier: 78:31:C4:6A:46:E7:9E:D2:C4:C6:66:7F:D8:69:0E:0E:3F:30:2A:97
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0184C88DB8A613ABDE8A5A770920A4DCAE3E
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/eDHEakbnntLExmZ_2GkODj8wKpc.roa
Signing time: Wed 30 Nov 2022 12:40:41 +0000
ROA not before: Wed 30 Nov 2022 12:40:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 92.114.4.0/24 maxlen: 24
45.132.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c8:8d:b8:a6:13:ab:de:8a:5a:77:09:20:a4:dc:ae:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Nov 30 12:40:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7831c46a46e79ed2c4c6667fd8690e0e3f302a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:9d:15:07:f4:f3:21:b1:e2:88:e4:2e:c7:
4b:11:b5:a4:1c:ba:64:4e:57:a2:d7:ff:9c:db:1b:
34:a3:8a:af:17:25:6f:7f:07:84:a3:26:e7:b3:c8:
d0:66:ea:17:45:7d:39:ea:3d:72:fc:3a:df:23:3d:
72:54:5a:52:35:80:95:cc:db:8a:9c:7e:5c:a0:a1:
41:3b:06:41:69:55:62:eb:cc:1b:9c:db:86:d9:c8:
65:3d:b0:81:42:1b:72:a1:26:16:3b:81:c3:36:f2:
a4:5e:d1:c1:b2:a6:6b:38:95:f1:7e:f8:31:8d:b6:
05:b2:3c:c8:34:e5:b0:03:6d:89:90:23:97:fc:a8:
46:3d:1f:37:fe:e6:69:b6:72:19:09:2b:c6:5a:db:
39:65:63:45:e9:fa:23:da:bb:89:e1:e7:fd:0c:0b:
e9:36:5f:1a:62:ae:8e:ce:c1:bb:27:cb:29:3d:9a:
98:9a:f8:1d:80:0c:25:5c:50:ae:27:ea:78:50:84:
4f:e0:da:41:a7:2f:f9:ff:a8:b1:77:ce:4b:74:4b:
c1:b3:b0:8a:d5:eb:99:7d:dc:9d:d6:0a:5b:a4:c0:
89:db:43:84:ca:9c:9b:8f:53:bd:65:3d:00:a1:79:
c9:bf:34:0c:d9:c0:5b:2d:26:51:3e:c3:f2:5c:e3:
a2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:31:C4:6A:46:E7:9E:D2:C4:C6:66:7F:D8:69:0E:0E:3F:30:2A:97
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/eDHEakbnntLExmZ_2GkODj8wKpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.97.0/24
92.114.4.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:a2:e7:93:9d:0e:95:3a:19:5a:61:b2:b0:3d:d9:35:ab:09:
e8:ae:65:2c:a0:9e:f2:81:cc:4e:c0:1b:74:53:f4:1f:24:7a:
ab:9c:77:8d:83:c2:a7:da:e7:00:ee:15:e8:18:39:bc:a1:c6:
a5:45:11:88:c0:eb:50:45:7c:92:6a:0b:ef:63:91:aa:cf:9a:
c2:d4:8f:88:58:e4:36:3f:af:ae:7a:24:4d:df:a9:f3:b3:fb:
69:da:30:c3:65:07:8b:09:83:a2:86:f0:9b:47:26:e3:c5:50:
d1:11:c9:ca:4f:d0:3f:53:93:8e:0f:cf:1a:d6:6a:77:74:1e:
0d:5b:ff:21:80:f7:72:54:67:0d:e2:2b:64:81:c2:32:cd:f5:
e6:d4:7d:3b:07:6d:9c:04:fe:57:32:69:98:97:d8:ee:ca:0d:
66:e9:17:aa:67:3b:67:f2:ea:18:01:bf:a5:de:c3:c6:76:e0:
4e:23:bc:2d:70:8b:d1:ff:28:c7:bf:dd:8c:db:03:7a:33:64:
7d:ed:21:5e:0c:82:94:5f:9d:f6:7a:49:14:64:bf:e8:2c:88:
dc:e6:ad:50:f4:e2:b3:e6:36:1e:05:a6:35:8a:74:44:fb:01:
ec:fd:6b:ed:89:60:e8:17:19:a5:40:1e:16:ac:cd:8c:9f:90:
bd:b2:10:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org