Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/EIHnFa4W0stK6QssTm4GMLBHec4.roa
File: EIHnFa4W0stK6QssTm4GMLBHec4.roa (raw, json)
Hash identifier: XY+zX/zL5WCcNL12cz0TBCNxOVN9Jo88X/jHUmkA2Xg=
Subject key identifier: 10:81:E7:15:AE:16:D2:CB:4A:E9:0B:2C:4E:6E:06:30:B0:47:79:CE
Certificate issuer: /CN=b2569bbd0a9ea5b705fabb90203aee3158d80553
Certificate serial: 02D773CA
Authority key identifier: B2:56:9B:BD:0A:9E:A5:B7:05:FA:BB:90:20:3A:EE:31:58:D8:05:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slabvQqepbcF-ruQIDruMVjYBVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/EIHnFa4W0stK6QssTm4GMLBHec4.roa
Signing time: Sat 01 Jan 2022 12:54:29 +0000
ROA not before: Sat 01 Jan 2022 12:54:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.84.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47674314 (0x2d773ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2569bbd0a9ea5b705fabb90203aee3158d80553
Validity
Not Before: Jan 1 12:54:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1081e715ae16d2cb4ae90b2c4e6e0630b04779ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:d3:ec:6e:1a:17:a5:92:58:31:99:37:77:
44:2a:e6:68:d4:34:01:d6:ca:d7:30:f4:ed:43:bd:
0e:8a:4c:8a:07:a3:fa:cf:ce:3b:f0:30:fa:e4:0e:
4e:f9:bc:2e:b1:84:54:b3:a7:73:fd:ec:b4:bb:b4:
4c:a2:3d:9e:84:b7:6d:61:09:b9:a0:71:59:6c:e1:
f7:06:48:a5:fb:82:07:46:06:c1:7a:da:09:be:84:
9e:8b:29:02:30:1e:ba:03:73:3a:1e:3c:e2:f4:52:
c1:20:40:cb:cd:54:41:49:10:c8:5f:65:17:f1:8d:
35:ca:43:e0:18:88:a6:75:be:53:e5:45:c0:ab:96:
dd:05:22:b1:d2:ea:49:fa:ac:6f:26:7c:a4:ef:f5:
2b:b3:82:1d:52:54:9a:a4:da:c8:d1:fd:05:de:29:
57:35:6a:6b:38:e2:de:c4:be:1e:b8:51:c6:a7:0a:
93:17:bd:49:49:27:e0:5f:c8:f4:09:e8:c1:a8:d4:
27:af:4f:31:0d:09:69:aa:80:6e:0f:48:13:ae:46:
e2:c1:dd:9a:f1:1a:56:34:44:fa:56:90:98:bf:05:
15:fd:fc:11:13:21:54:9d:af:ff:ed:c6:63:a1:46:
f8:b5:57:cb:b0:f4:23:a7:22:c2:40:af:ae:40:3d:
9b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:81:E7:15:AE:16:D2:CB:4A:E9:0B:2C:4E:6E:06:30:B0:47:79:CE
X509v3 Authority Key Identifier:
keyid:B2:56:9B:BD:0A:9E:A5:B7:05:FA:BB:90:20:3A:EE:31:58:D8:05:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slabvQqepbcF-ruQIDruMVjYBVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/EIHnFa4W0stK6QssTm4GMLBHec4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/slabvQqepbcF-ruQIDruMVjYBVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.88.0/22
Signature Algorithm: sha256WithRSAEncryption
18:9c:f3:0b:c9:94:63:dd:6e:f8:df:f2:a4:f5:b6:da:ea:88:
78:cd:08:25:2c:e3:bd:60:d9:85:ef:30:0e:f6:53:95:f5:4c:
87:af:76:97:b8:7a:cf:fa:63:ee:03:52:9f:b1:c0:ed:47:04:
47:4a:75:a8:ce:93:91:2c:fb:f4:25:8d:aa:4e:48:9f:b0:54:
8b:45:22:af:9c:45:41:4a:71:98:ea:ea:b5:11:6e:40:1c:e2:
c6:35:dd:11:a8:4f:a0:24:ad:19:ee:71:5e:54:9d:71:e6:f3:
57:86:91:b5:d7:a5:90:21:15:b5:ee:19:d6:c3:e7:58:eb:ac:
8f:b8:6b:f7:43:6b:24:66:92:f5:a6:09:57:18:e2:b7:90:94:
68:19:d9:70:32:e1:e3:76:b0:40:80:c5:df:86:3f:27:71:48:
e4:30:01:21:6a:de:0f:86:b7:03:c0:82:f9:cf:11:db:49:14:
2b:63:5b:f9:3c:ed:d4:fb:10:c8:ca:2a:9b:52:cb:1d:c3:11:
91:4e:d3:eb:44:85:87:80:f9:7d:8a:3b:9f:f4:cd:fc:de:2f:
a6:46:2b:9d:dd:3f:4d:14:c5:aa:6c:6e:ba:dc:1e:47:54:14:
5e:31:9d:24:31:83:23:55:99:a4:8f:c8:ea:e6:30:dd:aa:ce:
b1:63:2d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:53 2023 by rpki-client on console-fra.rpki-client.org