Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/80OS4aSBHRb8kkzwQ4FC8o6wRJY.roa
File: 80OS4aSBHRb8kkzwQ4FC8o6wRJY.roa (raw, json)
Hash identifier: dD/3ZaqJpn5GegRKawc9QaDk/julNwc0nJNoCycJkoQ=
Subject key identifier: F3:43:92:E1:A4:81:1D:16:FC:92:4C:F0:43:81:42:F2:8E:B0:44:96
Certificate issuer: /CN=424e8bd525b199edc1b7392da20225f74896da9d
Certificate serial: B0D8B5
Authority key identifier: 42:4E:8B:D5:25:B1:99:ED:C1:B7:39:2D:A2:02:25:F7:48:96:DA:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk6L1SWxme3BtzktogIl90iW2p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/80OS4aSBHRb8kkzwQ4FC8o6wRJY.roa
Signing time: Sat 01 Jan 2022 00:58:50 +0000
ROA not before: Sat 01 Jan 2022 00:58:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 45.9.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11589813 (0xb0d8b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424e8bd525b199edc1b7392da20225f74896da9d
Validity
Not Before: Jan 1 00:58:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f34392e1a4811d16fc924cf0438142f28eb04496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:85:9b:f0:36:10:5f:e6:c7:87:dd:e2:f0:
d0:cb:38:a1:4b:26:e8:13:c2:27:85:b8:91:da:59:
bd:21:b3:87:41:e1:45:94:b4:c1:b4:19:97:5a:6b:
11:75:8c:25:0a:a2:2a:d7:19:17:6a:cf:59:e7:85:
61:4e:fa:da:ae:e0:6e:a6:d1:d5:1d:b9:07:c5:48:
8a:97:ee:56:83:df:38:77:b9:45:ed:b7:a0:94:cd:
2b:c1:34:50:db:23:7c:51:8e:ce:2f:43:f5:28:94:
dc:f1:ba:d1:ca:d9:21:73:9b:09:ed:68:24:60:7e:
31:cc:35:56:dc:ed:ac:17:84:ff:66:55:ce:8c:67:
2b:74:92:a2:47:93:bf:c6:06:87:4e:44:9c:a8:eb:
f3:1c:c8:9f:b3:4b:01:18:e1:ad:28:1c:fe:61:9b:
78:41:23:95:d8:ff:7b:67:07:4c:5e:11:d3:60:15:
74:65:46:a0:ae:37:2d:e3:1e:13:07:43:17:a1:13:
7a:a5:84:32:82:d4:0a:bc:6c:eb:ee:1c:89:56:97:
6f:a5:db:58:f0:41:c0:5e:27:83:b0:5b:9e:6d:f3:
be:7a:a6:ec:3d:65:06:80:8f:77:ce:14:30:ea:33:
2a:51:63:3c:02:16:ae:e1:bb:6b:78:c4:58:de:81:
5d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:43:92:E1:A4:81:1D:16:FC:92:4C:F0:43:81:42:F2:8E:B0:44:96
X509v3 Authority Key Identifier:
keyid:42:4E:8B:D5:25:B1:99:ED:C1:B7:39:2D:A2:02:25:F7:48:96:DA:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk6L1SWxme3BtzktogIl90iW2p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/80OS4aSBHRb8kkzwQ4FC8o6wRJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/Qk6L1SWxme3BtzktogIl90iW2p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/22
Signature Algorithm: sha256WithRSAEncryption
57:70:6a:08:71:e9:03:3d:3a:fc:f3:a9:ef:23:38:42:f7:53:
03:48:e3:90:ea:8d:16:59:32:71:b7:a3:8d:33:66:21:41:ad:
46:79:d1:6d:b2:c7:90:ca:8c:42:c5:fd:c0:ad:86:65:ed:42:
5c:2b:49:0b:af:1e:07:a7:46:fd:f7:7a:02:e6:6a:2b:bd:6d:
1b:63:01:24:ea:c1:2e:2a:3a:0e:f6:97:f7:2c:8a:91:dd:a5:
f9:6c:cf:14:04:48:d8:26:a1:c1:81:9f:82:43:05:d8:55:44:
62:03:60:cf:87:af:f9:a5:0e:66:25:16:8a:74:32:98:6d:04:
b1:1a:27:56:ab:f1:1d:03:b6:48:80:ce:ba:bf:e5:1b:b1:3c:
eb:59:70:4d:55:b6:ac:ec:7b:d2:09:1a:33:62:8d:73:0f:4f:
d1:10:73:5e:c3:83:3e:08:05:1b:91:1b:55:c3:48:3d:b2:8a:
f2:ae:8a:ad:e0:ff:9b:d1:06:78:0b:18:42:be:31:aa:49:49:
0a:67:e4:96:c7:04:f1:49:4c:ba:9e:72:67:3a:7f:a6:87:2b:
d9:5e:89:e5:55:4b:10:48:6f:8f:08:20:db:64:b4:e2:06:56:
04:7c:f7:c4:67:d7:a1:97:27:83:1b:9c:b2:dd:08:a0:72:c5:
15:be:49:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:31 2024 by rpki-client on console-fra.rpki-client.org