Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/5c8GGIfKCfgd34OZ4S_wx5snPTw.roa
File: 5c8GGIfKCfgd34OZ4S_wx5snPTw.roa (raw, json)
Hash identifier: Qb3x1BG24RVByuUydwpjBCIQHt+nfl0Wipm2ymljNxQ=
Subject key identifier: E5:CF:06:18:87:CA:09:F8:1D:DF:83:99:E1:2F:F0:C7:9B:27:3D:3C
Certificate issuer: /CN=45c491362b2e386197b9a0746124288bc0bcf031
Certificate serial: 01876F637CAF978BA4DB0B06739C9EEED5EC
Authority key identifier: 45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/5c8GGIfKCfgd34OZ4S_wx5snPTw.roa
Signing time: Tue 11 Apr 2023 08:16:43 +0000
ROA not before: Tue 11 Apr 2023 08:16:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 45.8.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:63:7c:af:97:8b:a4:db:0b:06:73:9c:9e:ee:d5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c491362b2e386197b9a0746124288bc0bcf031
Validity
Not Before: Apr 11 08:16:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5cf061887ca09f81ddf8399e12ff0c79b273d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fe:97:c6:6b:ce:0c:04:66:54:e3:40:8e:f6:
64:6c:0b:b8:d7:87:92:a0:22:f6:74:38:a2:b5:62:
1c:fb:0f:44:53:2b:34:89:cc:21:f9:ac:d1:c9:e9:
fd:c2:bb:b8:d2:3a:7d:09:65:40:c0:a6:37:ff:fd:
b9:38:25:53:90:e9:3c:fb:ea:f7:f1:81:61:db:c9:
b0:32:e9:f2:5c:61:78:05:e3:a4:98:09:80:ef:c7:
bf:0c:41:9d:a6:f2:2c:4d:31:78:e6:f0:ce:d9:11:
19:c3:1c:d8:6a:db:eb:30:98:2d:6b:a4:40:af:4c:
8a:a2:d1:90:e2:8a:ea:e2:0a:79:a1:4e:05:b8:52:
e7:19:ff:aa:49:86:60:74:c3:5d:f7:61:02:4a:fa:
46:d2:8c:64:7b:2c:d2:4a:35:a6:75:66:35:ee:ba:
bb:de:f7:ed:8e:7a:22:42:79:e4:fc:d1:48:d7:ad:
a0:2e:b4:53:12:db:dc:7b:13:6d:6c:0c:28:34:e9:
28:9a:23:01:56:d0:04:74:fe:61:dd:67:1d:f6:34:
1f:cd:aa:8b:61:67:47:f4:89:4a:c5:df:05:1e:b5:
8e:b6:26:a0:8f:be:9e:e8:51:21:46:64:1f:3f:8a:
49:c8:81:59:8f:15:a1:a5:a5:a0:59:45:4a:b2:4b:
65:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CF:06:18:87:CA:09:F8:1D:DF:83:99:E1:2F:F0:C7:9B:27:3D:3C
X509v3 Authority Key Identifier:
keyid:45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/5c8GGIfKCfgd34OZ4S_wx5snPTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/RcSRNisuOGGXuaB0YSQoi8C88DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.89.0/24
Signature Algorithm: sha256WithRSAEncryption
54:91:8c:43:21:07:9e:c7:41:5b:f5:35:a2:7c:d3:eb:f2:a7:
c6:11:4a:66:b5:0a:88:3d:9b:25:ec:69:00:0b:ce:88:37:de:
0f:a4:8c:02:e9:47:2f:b1:36:70:9b:14:5d:cf:06:64:f2:44:
9d:c2:9b:84:24:5b:b2:26:66:a4:ee:db:22:af:4e:4d:7b:d2:
eb:31:62:02:91:61:4e:88:3c:35:c0:83:0e:71:6d:f5:c0:52:
65:dc:d4:41:c0:d4:a2:ab:63:75:93:60:a3:88:37:47:4f:30:
bc:2e:11:ab:35:a6:37:eb:ce:c4:3f:ac:90:34:a2:2b:53:65:
f9:f0:d6:79:27:cf:4a:2d:6c:2d:3c:f8:48:72:d0:f1:2a:08:
1b:03:c9:ea:c1:22:46:02:82:90:35:f1:6a:92:c5:1c:19:b8:
6f:f7:a9:37:45:14:77:77:49:79:47:cd:31:6c:22:33:60:fc:
01:71:d3:42:f0:97:ab:a3:1a:0b:02:63:8e:6c:5d:c6:3c:c5:
3f:e9:2e:70:f7:9e:49:fd:a8:5b:9e:64:b1:db:b2:d3:27:09:
68:96:1c:76:b1:ca:2e:5b:a3:e4:50:33:26:75:11:05:5b:d1:
10:74:6f:4f:28:4e:9e:4f:e2:17:40:31:47:bf:27:09:64:8a:
bb:bb:5d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:46 2025 by rpki-client