Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d0de72-ebc2-4dce-8af8-4ab3350709e9/1/OcbsIvk5_hW2oAHjB0eLed0aRFQ.roa
File: OcbsIvk5_hW2oAHjB0eLed0aRFQ.roa (raw, json)
Hash identifier: QryTawVwXKaE/nU4uidLnz4zFpZOMVlXe5/FfqLOHp0=
Subject key identifier: 39:C6:EC:22:F9:39:FE:15:B6:A0:01:E3:07:47:8B:79:DD:1A:44:54
Certificate issuer: /CN=5b016b00711429c6bc31b03833f2f5e14d8d3049
Certificate serial: 01856DD3F9A1B48EA9415882D0C0878F77E0
Authority key identifier: 5B:01:6B:00:71:14:29:C6:BC:31:B0:38:33:F2:F5:E1:4D:8D:30:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwFrAHEUKca8MbA4M_L14U2NMEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d0de72-ebc2-4dce-8af8-4ab3350709e9/1/OcbsIvk5_hW2oAHjB0eLed0aRFQ.roa
Signing time: Sun 01 Jan 2023 14:54:46 +0000
ROA not before: Sun 01 Jan 2023 14:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201986
IP address blocks: 45.153.212.0/23 maxlen: 23
45.153.212.0/22 maxlen: 22
45.153.214.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d3:f9:a1:b4:8e:a9:41:58:82:d0:c0:87:8f:77:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b016b00711429c6bc31b03833f2f5e14d8d3049
Validity
Not Before: Jan 1 14:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39c6ec22f939fe15b6a001e307478b79dd1a4454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cc:ed:ec:be:65:d9:45:e4:e8:11:55:e9:ba:
a4:23:6d:b1:9e:04:88:30:a4:30:aa:0a:91:33:ae:
37:81:70:fd:d7:2f:6a:79:28:0f:34:85:cd:d1:ed:
20:b3:3b:81:cf:a6:1e:ae:a4:c5:ca:f4:e8:6e:72:
d3:ca:17:b2:c4:33:6d:4c:3d:96:38:36:d1:48:71:
f8:24:22:b1:fa:e6:82:ca:ce:83:3f:90:93:07:6f:
56:84:d5:80:b0:36:ba:a5:39:00:c4:73:e3:d4:e9:
40:45:32:43:95:33:45:e4:39:cd:7a:e6:e0:ff:bc:
06:f0:3f:11:ec:cc:d0:54:80:93:ed:2c:76:bd:f2:
a2:af:0b:ba:c4:58:df:09:07:31:38:35:1b:17:ac:
00:03:d8:ed:8a:7a:3e:3d:be:c0:7d:ae:6a:03:cd:
33:f2:9d:e2:ca:b9:16:f8:86:a2:a0:30:c5:a0:e0:
df:a8:9e:7d:1c:c7:dc:c0:82:4b:3e:5f:59:b3:8e:
ab:73:7f:51:33:4c:0a:47:94:d3:9a:ec:02:19:9c:
e1:a1:9e:a6:56:a6:d3:e1:68:eb:c4:7b:d4:44:88:
da:d1:2b:a5:4a:85:15:3e:59:24:c3:04:1e:12:07:
66:3c:60:12:30:41:6f:25:9d:ae:0c:97:96:92:70:
32:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C6:EC:22:F9:39:FE:15:B6:A0:01:E3:07:47:8B:79:DD:1A:44:54
X509v3 Authority Key Identifier:
keyid:5B:01:6B:00:71:14:29:C6:BC:31:B0:38:33:F2:F5:E1:4D:8D:30:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwFrAHEUKca8MbA4M_L14U2NMEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d0de72-ebc2-4dce-8af8-4ab3350709e9/1/OcbsIvk5_hW2oAHjB0eLed0aRFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d0de72-ebc2-4dce-8af8-4ab3350709e9/1/WwFrAHEUKca8MbA4M_L14U2NMEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.212.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:7b:8e:0a:7c:5d:95:1e:e3:d3:2a:9e:58:4c:bd:67:a7:f3:
36:0b:f6:5a:b0:08:9b:50:64:d4:57:c4:f6:06:fe:a4:26:c4:
eb:3c:a2:fe:ac:0c:ae:b5:50:88:fc:e3:cc:c8:52:2a:ac:91:
3a:af:e5:b9:8e:bd:fc:e4:6a:dd:12:44:8d:dd:23:f5:75:7d:
d1:d8:79:1e:0a:d6:4e:ae:66:0b:98:48:38:4d:f9:d0:ff:51:
e7:56:2e:55:53:cf:54:1b:4c:71:38:4c:fe:91:e6:58:27:90:
90:59:f6:f6:2b:93:a9:cd:2d:3a:9f:c9:73:3b:de:83:f5:43:
6f:aa:50:e5:dd:11:d7:62:d6:a0:8e:b2:9e:16:28:70:49:a5:
ac:64:68:d0:00:c1:2f:63:69:95:d9:3d:03:13:1e:2a:2b:f9:
75:13:67:2c:93:b4:01:a1:0b:79:b7:96:90:46:6b:19:4d:7e:
72:da:60:50:94:5c:c8:d3:67:49:b9:2f:7b:5c:61:83:9b:62:
1b:c0:61:59:9b:84:0e:8d:6a:c4:18:3b:2d:e6:1b:2b:18:4a:
11:f1:73:d3:23:91:43:64:26:75:ae:f0:9b:92:d0:a7:68:b9:
b1:42:7a:34:10:95:50:de:42:bc:e4:25:3b:21:10:fa:58:11:
b9:8a:9c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:04 2024 by rpki-client on console-fra.rpki-client.org