Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/54548b-112b-4128-b6ca-b46307201536/1/2abxdEP8_0CfdNEzXTj3Fcfu7Fk.roa
File: 2abxdEP8_0CfdNEzXTj3Fcfu7Fk.roa (raw, json)
Hash identifier: F9tK2j5HmpTozev73bS9pnxBRzKWXd/0fWiiZ3JVTDE=
Subject key identifier: D9:A6:F1:74:43:FC:FF:40:9F:74:D1:33:5D:38:F7:15:C7:EE:EC:59
Certificate issuer: /CN=b12d6e3f1b84293a2dc0f6f621668995b7067e49
Certificate serial: DB65D3
Authority key identifier: B1:2D:6E:3F:1B:84:29:3A:2D:C0:F6:F6:21:66:89:95:B7:06:7E:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sS1uPxuEKTotwPb2IWaJlbcGfkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/54548b-112b-4128-b6ca-b46307201536/1/2abxdEP8_0CfdNEzXTj3Fcfu7Fk.roa
Signing time: Sat 01 Jan 2022 08:03:45 +0000
ROA not before: Sat 01 Jan 2022 08:03:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1828
IP address blocks: 45.15.192.0/22 maxlen: 22
45.15.192.0/24 maxlen: 24
45.15.193.0/24 maxlen: 24
45.15.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14378451 (0xdb65d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12d6e3f1b84293a2dc0f6f621668995b7067e49
Validity
Not Before: Jan 1 08:03:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9a6f17443fcff409f74d1335d38f715c7eeec59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4a:f1:82:5c:56:b3:12:6d:50:09:1c:1e:ce:
78:d0:a7:d2:27:5a:6f:99:95:01:df:2c:d1:b2:6f:
13:0f:cc:ca:4e:7e:a2:3e:8b:d9:b0:b7:20:50:84:
54:5a:2f:42:6a:01:53:3f:40:fc:71:67:0f:79:56:
c0:ca:eb:2f:0a:4c:83:00:2b:6d:cd:a0:9a:b9:cb:
0f:61:bf:19:fd:5d:69:ca:c5:cb:dc:fc:de:21:de:
7b:35:a7:5e:82:99:c8:c3:84:0a:36:7b:8b:cb:6d:
ca:9f:78:4d:06:5f:a1:0c:c1:de:7b:95:8d:be:7a:
54:6a:5d:a5:fd:a3:4b:2f:8e:d1:2b:0e:33:6f:38:
64:1e:6c:68:97:94:76:5b:9e:54:2e:79:a2:a1:6f:
57:4c:8e:e7:dd:0b:7f:ae:57:f9:82:f1:ad:36:d8:
e5:3b:d5:5e:4a:e6:f1:7e:69:b0:3d:32:59:ff:4b:
c2:39:e1:12:7d:9b:2c:76:35:18:e1:de:3b:ea:91:
ab:18:cb:a5:d3:5b:5a:27:33:89:70:09:a2:94:46:
c7:4b:97:7a:e7:26:f6:ae:6d:66:e5:ff:cc:fc:5b:
1d:36:5e:c2:92:1b:6a:67:26:4b:3c:c3:a1:d4:05:
c7:aa:03:a6:99:75:3f:b7:2a:df:61:7a:a6:86:cd:
d6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A6:F1:74:43:FC:FF:40:9F:74:D1:33:5D:38:F7:15:C7:EE:EC:59
X509v3 Authority Key Identifier:
keyid:B1:2D:6E:3F:1B:84:29:3A:2D:C0:F6:F6:21:66:89:95:B7:06:7E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sS1uPxuEKTotwPb2IWaJlbcGfkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/54548b-112b-4128-b6ca-b46307201536/1/2abxdEP8_0CfdNEzXTj3Fcfu7Fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/54548b-112b-4128-b6ca-b46307201536/1/sS1uPxuEKTotwPb2IWaJlbcGfkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.192.0/22
Signature Algorithm: sha256WithRSAEncryption
91:c2:a8:1d:7a:38:35:ef:2d:0a:6d:15:e3:a1:9f:f3:5e:c1:
6c:75:f2:c9:b8:c2:f8:ee:45:2b:29:63:6d:9d:9c:09:e0:95:
98:ed:b5:e9:f1:96:3a:8c:21:a1:af:b5:64:36:e4:ad:96:29:
b4:50:25:64:bb:1e:7d:32:aa:69:b0:ca:f9:a6:02:e9:4b:63:
79:dc:6b:bc:02:ad:7b:c0:59:5b:c2:a3:35:0e:7f:7a:84:46:
c1:8f:6b:75:30:28:1f:5b:f8:26:50:b6:95:67:01:b0:09:95:
0e:ff:75:96:78:43:8a:f3:7a:00:aa:89:2e:d7:82:47:99:67:
e2:66:1f:a9:59:2d:67:bc:ab:5a:ae:d3:50:45:33:44:b5:9f:
b0:bf:73:13:49:98:31:fe:8e:cc:d3:4a:b0:7f:b4:81:b2:b2:
91:c3:f2:d1:54:d7:c9:fa:08:6e:ea:8a:29:4f:58:59:df:8e:
db:50:cd:bc:a4:ac:f5:0e:62:5c:18:03:b4:30:37:07:9d:cf:
99:ab:df:8d:39:5b:df:dd:a1:1e:4c:b1:d2:a2:2c:77:d2:8c:
49:03:64:a2:8b:46:77:5e:86:bb:0e:6b:39:98:b0:7a:75:1a:
c2:5e:d5:24:71:03:77:b8:02:1f:ca:70:07:ae:c0:e2:bd:9b:
ff:c5:02:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:34 2024 by rpki-client on console-fra.rpki-client.org