Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/W5k6ng8_x-NngDyx-OtpkDBPh_A.roa
File: W5k6ng8_x-NngDyx-OtpkDBPh_A.roa (raw, json)
Hash identifier: syKYb5EqSkIQt93DBv9fNgtFuZLQgeSvaFPDI0W7jZc=
Subject key identifier: 5B:99:3A:9E:0F:3F:C7:E3:67:80:3C:B1:F8:EB:69:90:30:4F:87:F0
Certificate issuer: /CN=45c491362b2e386197b9a0746124288bc0bcf031
Certificate serial: 01824AC33C7D6D400A972042D619EA3F252F
Authority key identifier: 45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/W5k6ng8_x-NngDyx-OtpkDBPh_A.roa
Signing time: Fri 29 Jul 2022 16:21:24 +0000
ROA not before: Fri 29 Jul 2022 16:21:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42375
IP address blocks: 45.8.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4a:c3:3c:7d:6d:40:0a:97:20:42:d6:19:ea:3f:25:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c491362b2e386197b9a0746124288bc0bcf031
Validity
Not Before: Jul 29 16:21:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b993a9e0f3fc7e367803cb1f8eb6990304f87f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:75:37:14:f8:5c:42:52:87:e7:39:aa:26:
cc:a7:88:bd:31:0a:10:96:9c:90:c3:7a:ab:e3:5f:
22:7e:21:80:63:1b:e2:d5:52:13:67:fa:3f:27:8b:
fd:62:df:17:1d:7c:a6:7d:32:c7:c5:bc:68:c0:6d:
3e:ce:24:7d:07:28:83:37:09:20:ff:39:43:f8:6c:
97:06:1f:75:4b:f6:11:20:9c:37:db:b8:a9:3a:a0:
9f:80:3c:5a:f8:b9:ef:01:94:e6:19:d3:be:05:a9:
5b:50:b1:a6:39:18:2d:49:87:19:dc:80:39:25:5b:
db:dd:ff:21:34:d9:1e:0b:4a:d3:ae:51:6c:a7:1e:
bb:fd:74:70:3f:3c:62:80:73:de:8a:e9:9f:96:f9:
5f:2c:5d:7a:3f:16:23:f1:6e:4c:54:6a:08:6e:09:
98:b6:b9:05:87:eb:21:bb:eb:02:17:d0:76:b0:c9:
73:a3:28:5d:53:3c:e8:cc:43:86:1b:d4:00:a3:dc:
40:70:82:92:86:6d:db:2c:63:3d:00:9a:4e:ff:41:
49:61:5b:83:26:64:6d:04:20:a3:f2:73:05:31:d0:
25:24:52:ce:34:00:63:20:15:d1:f1:81:bb:70:ed:
6a:04:b5:c3:16:5f:65:09:05:3e:94:a1:eb:d9:bc:
d2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:99:3A:9E:0F:3F:C7:E3:67:80:3C:B1:F8:EB:69:90:30:4F:87:F0
X509v3 Authority Key Identifier:
keyid:45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/W5k6ng8_x-NngDyx-OtpkDBPh_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/RcSRNisuOGGXuaB0YSQoi8C88DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.91.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:5f:51:83:f9:c1:7c:ce:f0:5b:ca:2f:c4:16:74:4f:98:33:
40:fc:86:64:6b:d0:82:51:e3:25:4e:7b:f5:a6:33:9e:d8:8b:
51:de:ec:f4:1a:bf:b7:e1:74:99:d6:9a:24:71:9d:4e:d6:d2:
96:a9:ce:36:70:82:c0:4b:63:52:08:61:b5:0d:61:c8:f4:04:
c1:31:a1:da:93:25:fe:da:f5:f8:13:04:d2:90:ec:ea:2d:75:
45:55:f4:75:21:ed:b8:0d:ac:17:64:3d:43:0e:70:de:fc:f1:
63:91:24:2b:02:c5:2f:c1:a8:44:19:29:df:2d:83:4b:c6:36:
3f:0c:20:43:43:ac:c8:fc:f6:1a:22:69:54:6b:c0:24:7d:ec:
2d:1c:5b:c0:9a:fd:03:75:ce:74:76:a1:10:49:ac:62:1c:93:
75:1e:6b:f9:2e:ea:05:c7:e8:5f:4a:70:83:24:be:d2:f9:b9:
d0:ae:29:ec:78:bd:e0:f8:02:2f:23:d8:cd:e4:7e:8b:4a:db:
d6:53:b1:14:0e:a8:ed:d5:3f:14:84:e7:7d:a2:23:09:ad:0e:
a8:4e:d3:69:cd:d3:c5:52:7f:25:9e:0e:e9:13:63:69:96:b4:
02:5c:b4:2b:9f:e3:2a:90:58:05:c2:9f:1d:8b:f2:f3:9f:c3:
7c:18:dc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:58 2024 by rpki-client on console-fra.rpki-client.org