Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/7FvIkPTboAKEkarzjPFGFpqvYgM.roa
File: 7FvIkPTboAKEkarzjPFGFpqvYgM.roa (raw, json)
Hash identifier: iOxs2xtTxOwe9rQl/8lGjmEhQlNd6MVloYBXRbNy62w=
Subject key identifier: EC:5B:C8:90:F4:DB:A0:02:84:91:AA:F3:8C:F1:46:16:9A:AF:62:03
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01856F8C4737B0EC9AA5B2D0F4E441219D21
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/7FvIkPTboAKEkarzjPFGFpqvYgM.roa
Signing time: Sun 01 Jan 2023 22:55:42 +0000
ROA not before: Sun 01 Jan 2023 22:55:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6939
IP address blocks: 45.12.83.0/24 maxlen: 24
45.12.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8c:47:37:b0:ec:9a:a5:b2:d0:f4:e4:41:21:9d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 22:55:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec5bc890f4dba0028491aaf38cf146169aaf6203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:23:fb:72:78:61:6a:56:25:aa:30:6a:e3:0d:
fd:f2:1e:2a:2c:47:bc:fa:55:9a:b1:1e:ab:c5:df:
48:94:d5:44:87:9b:07:c0:39:a4:27:e5:58:9d:67:
1b:9f:4e:7b:32:71:dd:21:cd:21:64:ba:d2:93:c8:
c4:9c:63:77:a8:c8:4a:b7:97:20:c3:62:a7:96:62:
ad:d7:07:54:40:b9:39:ad:e7:49:82:3c:35:2c:1b:
d9:d7:79:0e:29:60:5e:17:d9:88:19:fa:24:81:23:
04:92:e4:66:de:21:1a:12:59:3c:24:26:c7:bf:f3:
33:01:a9:98:84:7a:5a:f6:bd:a9:27:8a:b3:cc:fe:
21:9d:e7:51:15:45:d0:c5:9f:14:59:19:f9:2a:98:
ba:fc:b7:3d:45:40:5b:e5:d2:1c:0f:15:24:d5:75:
cc:b0:20:30:21:06:08:b3:04:8e:37:a7:72:33:f9:
07:6d:e2:69:84:f2:9b:11:bd:2f:3e:65:31:00:75:
09:f1:75:e6:a4:62:26:19:df:02:16:88:7b:51:ef:
ee:8c:60:95:8b:dd:53:10:51:52:f1:b0:27:37:32:
fb:0c:97:b1:aa:8c:d9:2d:60:80:0b:fe:19:fd:fb:
be:05:e8:1c:fc:36:96:0d:47:4d:65:83:32:2c:52:
e3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5B:C8:90:F4:DB:A0:02:84:91:AA:F3:8C:F1:46:16:9A:AF:62:03
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/7FvIkPTboAKEkarzjPFGFpqvYgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.80.0/24
45.12.83.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:3d:40:95:63:9d:97:20:55:87:b7:e1:65:07:de:35:1c:78:
72:80:ec:3d:db:b2:a7:83:27:5e:e3:38:5f:37:39:bb:71:64:
b6:a8:a4:6f:6f:c2:e0:40:7d:4d:91:a6:a0:82:0f:d1:1a:a3:
54:a3:98:3a:19:d5:a4:e7:fa:6d:03:ed:d7:a2:5c:56:1b:f5:
bc:04:da:1b:2c:a1:ca:69:78:81:bc:17:cd:e5:8a:b5:e9:51:
33:22:3b:1c:05:b9:f8:32:d7:78:e7:48:3c:d0:a7:1d:6c:04:
7c:4d:2b:d8:d2:32:33:90:f9:be:cc:1a:28:90:a4:3c:08:80:
bb:6c:61:5a:4e:ca:c7:b5:48:dd:3e:59:3c:af:7e:48:e7:3e:
de:eb:e2:ee:dd:e9:1d:be:6d:ee:a2:54:26:b6:c3:6b:ef:aa:
87:e2:5c:3d:77:6e:93:01:17:82:76:09:61:10:33:9b:25:91:
d1:be:b9:a8:f9:68:e6:b0:28:a9:ce:3a:d4:83:5c:2f:04:6e:
eb:95:f7:6f:bf:cd:3d:0d:1d:86:ae:d0:8e:94:29:a7:46:cc:
66:6c:1c:75:9a:d4:b4:10:ae:9e:79:d1:b4:7c:34:db:38:5e:
3e:5b:6c:8f:ee:6c:17:1f:80:fe:b2:c2:de:6b:67:47:04:16:
f6:c5:03:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:08 2024 by rpki-client on console-ams.rpki-client.org