Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7b1eb6-548d-433e-b2e5-3b3364695ae5/1/AEbM-IlFhSG81isnhMWvN8ItF1o.roa
File: AEbM-IlFhSG81isnhMWvN8ItF1o.roa (raw, json)
Hash identifier: tBW2JdChen8MRrA89AmkUs3rif/gTgCftzv9XLfryl0=
Subject key identifier: 00:46:CC:F8:89:45:85:21:BC:D6:2B:27:84:C5:AF:37:C2:2D:17:5A
Certificate issuer: /CN=4413d539698fe7f892f164610fcc6b95960875df
Certificate serial: 07FF9FE9
Authority key identifier: 44:13:D5:39:69:8F:E7:F8:92:F1:64:61:0F:CC:6B:95:96:08:75:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBPVOWmP5_iS8WRhD8xrlZYIdd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/7b1eb6-548d-433e-b2e5-3b3364695ae5/1/AEbM-IlFhSG81isnhMWvN8ItF1o.roa
Signing time: Sat 01 Jan 2022 04:52:57 +0000
ROA not before: Sat 01 Jan 2022 04:52:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57704
IP address blocks: 45.130.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134193129 (0x7ff9fe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4413d539698fe7f892f164610fcc6b95960875df
Validity
Not Before: Jan 1 04:52:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0046ccf889458521bcd62b2784c5af37c22d175a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5e:59:ec:c4:0b:54:81:6f:8b:22:72:75:5e:
6f:83:1c:fc:91:bf:81:59:60:0d:f6:fc:fb:f3:5d:
b2:e7:da:8e:3f:c8:9e:5c:3c:63:d9:da:09:9d:d6:
7c:94:2d:72:ca:9a:ed:08:6c:fa:66:55:90:ce:e5:
3c:55:b2:6f:55:a8:ba:c7:f7:82:3c:29:fa:f7:ce:
e2:4c:43:37:62:2c:e9:c0:0c:84:89:11:6d:d0:43:
05:53:06:a8:39:0f:9b:9d:f4:c3:47:68:1a:63:2d:
60:7c:4e:0e:96:d3:87:b5:08:0a:41:b3:58:fa:c7:
7b:89:9a:39:8a:99:fa:b1:1c:95:43:a8:21:97:bc:
2b:fd:ea:76:ea:7c:bc:35:7c:33:52:b3:53:03:7b:
26:2f:b1:87:57:9b:63:2d:c9:85:4c:9f:ab:eb:7b:
c8:38:1e:cd:e8:9f:c1:8d:6e:6d:1c:94:ac:58:15:
05:26:61:14:c8:51:8e:83:d8:71:25:b3:a7:3c:41:
89:a1:4f:d0:b2:61:ae:ab:1f:02:7f:47:fd:55:f9:
cf:0e:95:b5:ed:a9:36:d7:5a:59:0f:26:8c:00:1d:
84:52:03:34:65:2a:de:7b:dc:06:f0:81:c1:ad:dc:
cf:ca:b8:78:7d:25:1e:ee:36:66:60:9b:65:95:d0:
53:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:46:CC:F8:89:45:85:21:BC:D6:2B:27:84:C5:AF:37:C2:2D:17:5A
X509v3 Authority Key Identifier:
keyid:44:13:D5:39:69:8F:E7:F8:92:F1:64:61:0F:CC:6B:95:96:08:75:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBPVOWmP5_iS8WRhD8xrlZYIdd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7b1eb6-548d-433e-b2e5-3b3364695ae5/1/AEbM-IlFhSG81isnhMWvN8ItF1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7b1eb6-548d-433e-b2e5-3b3364695ae5/1/RBPVOWmP5_iS8WRhD8xrlZYIdd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.96.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:33:c2:34:a1:0b:2e:10:6a:76:2b:f3:14:1c:a9:b0:bb:a1:
8a:fb:5c:16:e3:26:fd:01:49:63:68:f7:af:e0:5c:43:2e:fb:
ed:d6:f1:ca:81:7e:ba:fc:bf:06:38:bf:d2:37:db:a0:2e:31:
a7:cd:34:b1:68:e5:fd:fe:6c:f5:f4:fc:0e:9a:32:ce:6b:bf:
0b:9f:d4:50:0a:38:c8:ef:33:af:f9:64:ac:02:b9:d0:eb:b0:
f9:c2:0a:49:b3:42:81:0e:81:f3:dc:9b:6f:59:f2:b9:97:2b:
7b:a4:55:fe:a1:a0:2b:45:86:55:7c:71:5b:6d:12:8c:14:7e:
75:e7:46:76:d7:b2:a9:cf:8f:ff:01:0a:14:b4:5e:2f:5d:25:
a7:25:66:1f:17:30:7c:75:47:24:7a:2d:46:dd:d6:bc:39:39:
fb:3d:d0:4f:04:36:9b:6a:8a:d0:2f:f4:88:90:e6:26:35:6b:
31:fe:19:e3:35:fb:e0:ed:7a:ad:e0:f0:69:d8:e1:f3:a9:2b:
80:fe:28:5d:76:d1:71:fd:aa:cf:65:6b:57:f1:d9:24:64:b6:
c9:76:a9:09:90:f0:28:4f:77:bc:f2:76:58:19:6d:b8:d1:7b:
d6:11:39:2f:12:b3:dd:78:4d:af:cb:a8:9d:cc:60:a3:2a:15:
72:b2:32:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-fra.rpki-client.org