Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/aba05f-83f9-46c3-841f-26e754b42e07/1/FUi0X1EkPwE-UqZzBTRo5qgIJlo.roa
File: FUi0X1EkPwE-UqZzBTRo5qgIJlo.roa (raw, json)
Hash identifier: wd84xP+q/mcjcF43KMPw5YOu4k4r0/T426e3IiWDsn8=
Subject key identifier: 15:48:B4:5F:51:24:3F:01:3E:52:A6:73:05:34:68:E6:A8:08:26:5A
Certificate issuer: /CN=5ba1abf7df1e026646a9ef0a71e8769521bc9f81
Certificate serial: 01833C7973AD4E327CB90CE3AD4631F6D698
Authority key identifier: 5B:A1:AB:F7:DF:1E:02:66:46:A9:EF:0A:71:E8:76:95:21:BC:9F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W6Gr998eAmZGqe8Kceh2lSG8n4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/aba05f-83f9-46c3-841f-26e754b42e07/1/FUi0X1EkPwE-UqZzBTRo5qgIJlo.roa
Signing time: Wed 14 Sep 2022 14:48:55 +0000
ROA not before: Wed 14 Sep 2022 14:48:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.14.164.0/24 maxlen: 24
45.14.165.0/24 maxlen: 24
45.14.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3c:79:73:ad:4e:32:7c:b9:0c:e3:ad:46:31:f6:d6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ba1abf7df1e026646a9ef0a71e8769521bc9f81
Validity
Not Before: Sep 14 14:48:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1548b45f51243f013e52a673053468e6a808265a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:a9:eb:27:df:74:d5:0a:b3:f8:7f:57:15:
57:21:51:c0:20:f2:fe:b0:7b:9d:ac:d2:d7:8f:dc:
76:bc:7f:61:92:71:c0:65:61:e5:74:52:a7:f6:6e:
d6:c7:38:23:3b:55:64:57:f2:00:b9:9d:7f:72:f1:
90:6e:10:8d:0f:52:00:0e:fb:67:6c:e5:db:ca:af:
90:49:8a:f1:16:b1:0a:cd:71:90:57:47:57:f3:c8:
a7:f6:9a:38:88:57:df:38:52:81:1e:b8:9a:8b:f0:
23:72:53:7b:ec:d9:df:4f:ef:77:2b:13:49:9c:97:
84:e7:07:2f:c4:b3:29:13:08:88:8d:d0:32:b4:28:
fc:51:cb:4a:e1:2f:f6:b1:e7:29:fb:49:c0:b6:73:
d7:76:1d:fe:58:39:be:ce:51:25:88:35:18:39:3c:
0d:cc:b8:4f:03:a2:b4:cf:bb:9f:f6:0b:44:35:a3:
9e:a2:5e:ca:83:41:37:30:37:d5:52:1a:15:0d:20:
c6:56:4b:ad:b2:d1:f3:6d:82:5f:3e:99:1a:da:1e:
91:0a:7f:ed:fa:5a:5e:07:6a:62:df:e9:8d:54:99:
d7:6b:b2:3a:14:39:4e:12:6c:62:1d:14:70:e8:6a:
e1:87:50:fc:96:eb:7f:bf:a0:d6:c5:9b:e2:b2:7d:
2e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:48:B4:5F:51:24:3F:01:3E:52:A6:73:05:34:68:E6:A8:08:26:5A
X509v3 Authority Key Identifier:
keyid:5B:A1:AB:F7:DF:1E:02:66:46:A9:EF:0A:71:E8:76:95:21:BC:9F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6Gr998eAmZGqe8Kceh2lSG8n4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/aba05f-83f9-46c3-841f-26e754b42e07/1/FUi0X1EkPwE-UqZzBTRo5qgIJlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/aba05f-83f9-46c3-841f-26e754b42e07/1/W6Gr998eAmZGqe8Kceh2lSG8n4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.164.0-45.14.166.255
Signature Algorithm: sha256WithRSAEncryption
2f:2b:8b:87:77:f4:df:8e:70:6b:8f:dd:98:5d:ef:36:bf:ad:
38:f2:ac:7c:61:58:2e:84:26:0c:61:20:36:55:51:13:87:0b:
97:eb:5e:3a:7a:6e:97:91:0a:0a:01:75:0a:5c:d5:ee:86:9a:
d0:68:49:12:80:eb:19:c4:93:83:86:8c:18:b6:10:41:ef:67:
a1:fa:2f:0a:78:23:1c:74:46:da:2c:a8:77:ea:d9:30:1e:c3:
d6:6c:d7:6a:5f:94:e2:ee:e0:e2:e2:f8:a8:9b:16:d8:34:66:
a0:d0:69:22:c9:1b:85:76:f0:a4:9b:ec:22:fc:b7:3f:eb:b6:
f1:de:2a:ca:81:78:a0:00:9a:59:b8:b5:12:47:02:95:c5:e7:
19:5e:b3:fa:f5:cb:08:92:7e:c6:a0:e5:25:d6:65:6f:16:5e:
a3:8f:2c:e6:d0:54:f2:07:07:d0:32:c6:cd:b7:01:24:76:93:
36:4f:12:b2:32:5c:ee:4a:93:0a:70:24:f5:a7:8f:17:51:75:
11:48:a2:fa:e0:ed:de:f0:3b:b2:57:80:b8:93:95:4a:68:70:
42:c6:52:73:26:30:ea:49:00:43:c4:af:28:9e:e8:c5:5a:1b:
dc:25:17:fb:0f:62:0e:b0:7e:a0:c0:67:29:51:e0:df:05:81:
54:9a:e2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:51 2024 by rpki-client on console-fra.rpki-client.org