Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/8eRQtTJ24R9u8vDkJNLgr_S2cJ4.roa
File: 8eRQtTJ24R9u8vDkJNLgr_S2cJ4.roa (raw, json)
Hash identifier: spyHA9o0g0OMsCKT8UNKYMc2i12dwCfVbv1RW4l6DuU=
Subject key identifier: F1:E4:50:B5:32:76:E1:1F:6E:F2:F0:E4:24:D2:E0:AF:F4:B6:70:9E
Certificate issuer: /CN=dd82de4f1304339fde527ba06033ca9e511171bd
Certificate serial: 01856D38785FC9C084A172FFB7B2CAB18455
Authority key identifier: DD:82:DE:4F:13:04:33:9F:DE:52:7B:A0:60:33:CA:9E:51:11:71:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YLeTxMEM5_eUnugYDPKnlERcb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/8eRQtTJ24R9u8vDkJNLgr_S2cJ4.roa
Signing time: Sun 01 Jan 2023 12:04:55 +0000
ROA not before: Sun 01 Jan 2023 12:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212900
IP address blocks: 45.159.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:38:78:5f:c9:c0:84:a1:72:ff:b7:b2:ca:b1:84:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd82de4f1304339fde527ba06033ca9e511171bd
Validity
Not Before: Jan 1 12:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1e450b53276e11f6ef2f0e424d2e0aff4b6709e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:08:a6:0b:3f:ac:ca:15:f1:01:48:69:33:7d:
f9:e7:06:dc:c6:96:69:45:38:c6:ad:a7:e6:48:65:
c9:9f:cb:99:76:a1:ef:a5:3c:97:85:7b:ac:f8:85:
30:98:8a:02:38:39:c2:71:2d:38:83:3c:29:b6:c2:
d4:2c:41:2c:1c:0e:03:1d:c6:1d:32:7b:9f:6f:14:
1c:59:4c:c8:9d:4f:78:03:fd:65:cf:3c:79:7a:bf:
06:61:c8:7c:29:e0:b4:26:c8:f2:06:64:7b:e4:80:
cd:7b:53:e5:30:e8:1c:d3:53:96:0f:8c:a6:34:1a:
b2:8c:a5:63:7a:e1:a1:89:c6:80:b9:9e:eb:8c:3c:
a7:21:06:3d:c9:32:0d:98:d5:3e:c3:fc:30:06:58:
76:e1:aa:65:4b:8a:d3:c7:72:8e:df:9c:1d:63:be:
a2:fb:ac:53:41:e5:9d:01:9a:b9:71:ee:3e:cd:9c:
ca:c2:cc:0a:e9:e1:93:7f:cc:51:9f:1b:2a:bf:c9:
28:7d:30:de:1c:2a:e8:38:89:4c:46:98:ba:87:71:
f1:c4:ac:a1:fb:37:6d:4c:ab:80:0b:4b:45:c2:b2:
0f:c8:c4:cf:d0:4b:55:11:7f:69:e9:4c:b5:56:b5:
a2:30:1d:14:5d:01:1a:e1:59:b4:58:50:b9:55:64:
20:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E4:50:B5:32:76:E1:1F:6E:F2:F0:E4:24:D2:E0:AF:F4:B6:70:9E
X509v3 Authority Key Identifier:
keyid:DD:82:DE:4F:13:04:33:9F:DE:52:7B:A0:60:33:CA:9E:51:11:71:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YLeTxMEM5_eUnugYDPKnlERcb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/8eRQtTJ24R9u8vDkJNLgr_S2cJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/3YLeTxMEM5_eUnugYDPKnlERcb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.196.0/24
Signature Algorithm: sha256WithRSAEncryption
50:f9:a4:c0:49:fe:d1:be:21:d6:63:bc:49:bb:88:66:91:d9:
bf:89:86:49:a4:9b:da:3b:21:fd:77:db:09:fb:5a:2f:7e:99:
71:a5:4f:94:12:b2:a8:c6:7a:a6:a7:9f:1d:69:98:91:e0:86:
3a:b6:8f:32:54:31:bd:de:81:31:33:88:34:c4:3a:94:33:7d:
8b:4a:39:8d:c9:a4:c8:4a:14:85:6d:19:2e:28:35:e6:90:7d:
70:82:03:db:df:6b:ba:1e:1e:2a:94:ee:c0:96:92:a2:25:97:
8d:81:f7:02:45:ba:8f:05:3c:3d:21:4c:c1:61:fb:32:f9:43:
68:c0:09:02:0a:38:f6:cd:aa:2e:5d:cb:34:3e:fa:73:ae:42:
c4:f2:5c:06:e4:d9:86:a9:8d:a0:8b:6c:d7:80:de:ae:ef:ac:
af:5e:b2:85:b7:30:2a:59:74:f2:0d:1f:67:0f:d9:fc:7f:53:
0e:5b:5b:b4:d2:e6:9e:73:95:c3:74:85:02:a5:de:c8:0b:f0:
c9:25:1f:a6:90:e0:ef:c6:10:12:2a:84:6c:b3:60:7e:0e:8c:
a7:df:df:e6:3a:2c:12:1e:0c:c0:0d:33:7e:19:b3:49:23:ff:
84:26:52:dc:91:d5:86:cc:2c:8c:72:e2:d8:29:37:35:95:b0:
29:de:9d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 15:03:54 2023 by rpki-client on console-fra.rpki-client.org