Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/XEdSYkcJtCW_v2z9DofWWFhDbIc.roa
File: XEdSYkcJtCW_v2z9DofWWFhDbIc.roa (raw, json)
Hash identifier: P6RmI4FxVGEXFZbr68tiNScZJgKoumPqX1j2xMe7VkA=
Subject key identifier: 5C:47:52:62:47:09:B4:25:BF:BF:6C:FD:0E:87:D6:58:58:43:6C:87
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01856F8C554F1D8E73B33BDDBE95DBB06699
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/XEdSYkcJtCW_v2z9DofWWFhDbIc.roa
Signing time: Sun 01 Jan 2023 22:55:45 +0000
ROA not before: Sun 01 Jan 2023 22:55:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212411
IP address blocks: 45.87.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8c:55:4f:1d:8e:73:b3:3b:dd:be:95:db:b0:66:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 22:55:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c4752624709b425bfbf6cfd0e87d65858436c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:31:b3:0f:47:6c:93:ba:28:c3:2b:69:22:02:
ed:3d:56:03:51:26:60:02:7c:38:8a:61:80:dd:27:
41:29:ba:6d:d6:1e:9f:97:39:41:15:32:ea:0a:5f:
80:60:95:e6:09:cb:2e:90:3c:f2:f3:75:b8:61:89:
4b:e1:c3:ba:ff:b5:eb:74:5e:fc:d3:dc:e7:67:ef:
24:d2:e5:ca:c0:9d:d5:e4:04:58:49:b0:62:e4:9d:
19:64:da:d0:2d:76:a3:8f:11:a1:04:ae:55:5a:ac:
7d:6a:79:12:7e:ba:94:a8:cc:78:82:9b:1f:85:7b:
db:b8:7e:75:44:a4:2d:d4:c0:80:ef:f5:b0:84:09:
40:7f:fa:b4:87:33:af:0a:b3:0e:71:84:f7:3e:e8:
15:3e:b3:34:dc:c7:3c:ec:4c:46:56:42:17:74:f3:
2c:fe:87:5d:7c:39:10:1f:83:de:36:22:b2:7a:bd:
9a:fe:ba:2e:aa:fe:18:d4:dc:98:b8:67:08:f5:eb:
6f:5a:eb:26:04:ca:39:ca:37:19:91:99:9c:6b:66:
ef:28:4f:f3:cb:22:8e:49:2f:ab:a0:bd:9c:39:a0:
ce:ab:9f:e4:23:4f:97:a8:0c:1f:2f:da:36:85:9e:
1a:d9:97:83:7d:2b:3a:5f:bb:52:59:76:f4:05:3c:
be:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:47:52:62:47:09:B4:25:BF:BF:6C:FD:0E:87:D6:58:58:43:6C:87
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/XEdSYkcJtCW_v2z9DofWWFhDbIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.172.0/24
Signature Algorithm: sha256WithRSAEncryption
71:d2:b8:7b:18:76:3b:51:0c:8b:75:99:b2:b0:2a:d1:28:88:
c5:4d:54:e5:14:0d:25:07:52:c0:ef:18:c4:a7:60:36:3a:04:
a2:7f:39:23:86:ef:a9:07:b3:8a:cf:7c:7d:1a:44:b1:12:c3:
d4:b0:86:f3:ba:91:a8:67:41:3c:54:9a:d7:ed:56:49:99:74:
57:40:56:a0:d7:69:97:ce:9a:24:d6:82:94:5b:7c:8a:48:f2:
89:92:dd:cc:35:b6:86:42:53:15:87:3f:e9:cd:99:fe:09:5a:
a7:16:f5:ec:45:cd:b3:87:2f:66:9e:f6:f2:d8:1e:29:cb:ec:
d5:fe:fc:dd:cc:ac:59:5e:e3:cd:02:83:bf:6a:b8:bd:86:b3:
4d:e3:77:9c:fe:22:e2:f4:e9:57:63:02:69:63:c2:7d:ac:05:
a2:57:d0:58:6a:61:4a:99:1a:87:5d:5e:88:cd:95:7d:97:4b:
76:b1:c5:20:78:b6:40:a5:6d:6e:8f:7b:21:4e:81:5f:4c:78:
37:2b:53:6f:72:5d:b2:a0:11:1d:27:cb:2f:32:43:f2:6d:a3:
33:21:6d:1b:36:4f:a9:68:38:83:fc:4c:4d:f7:4b:72:93:a5:
98:fa:16:5f:66:39:3b:1c:bd:e9:af:a0:2d:26:15:2b:4e:cd:
6e:0b:8b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org