Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/7K8CcrdkVVdH9fqVrTLgCbt6AXk.roa
File: 7K8CcrdkVVdH9fqVrTLgCbt6AXk.roa (raw, json)
Hash identifier: C+xHWjCYvuc935/S45e/aLqj6/1wsbFZpX+s+wChDlw=
Subject key identifier: EC:AF:02:72:B7:64:55:57:47:F5:FA:95:AD:32:E0:09:BB:7A:01:79
Certificate issuer: /CN=d793a8d736beb92be16d193b101f93be55325919
Certificate serial: 078DF8F1
Authority key identifier: D7:93:A8:D7:36:BE:B9:2B:E1:6D:19:3B:10:1F:93:BE:55:32:59:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15Oo1za-uSvhbRk7EB-TvlUyWRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/7K8CcrdkVVdH9fqVrTLgCbt6AXk.roa
Signing time: Sat 01 Jan 2022 12:04:40 +0000
ROA not before: Sat 01 Jan 2022 12:04:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2914
IP address blocks: 45.145.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126744817 (0x78df8f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d793a8d736beb92be16d193b101f93be55325919
Validity
Not Before: Jan 1 12:04:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ecaf0272b764555747f5fa95ad32e009bb7a0179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:df:05:98:7a:2d:c7:37:73:91:ca:d3:34:6b:
89:ec:4b:7d:93:b3:3c:03:c5:a9:60:4d:79:f9:2e:
d6:76:35:51:40:cb:31:de:51:73:34:7f:dc:de:dc:
1a:f1:9d:63:a2:7d:c4:1e:ab:84:d8:77:96:53:69:
c7:3f:80:02:c1:3e:1c:50:74:c1:c7:9c:c7:4e:fa:
bc:d3:a0:3f:fe:d3:49:42:38:ea:86:df:9e:0c:12:
ae:90:b0:bb:b7:a2:ad:e6:e0:47:ad:70:21:89:1e:
43:59:04:8f:5e:8f:ee:db:56:68:49:f3:07:46:8b:
24:bd:67:80:0b:cd:51:b2:ce:21:6e:62:0a:c8:1f:
0b:3b:94:71:85:be:7f:d1:78:f4:fd:93:8a:53:63:
9d:d6:fd:2c:78:71:45:6a:29:98:18:c8:49:39:09:
37:7a:87:dd:5e:47:f4:e5:d5:9e:82:7f:b2:7b:9c:
02:5f:27:76:75:b7:fd:78:97:bb:a5:47:14:a0:a2:
7d:fb:38:e3:ee:70:39:20:71:33:3e:03:2d:31:2c:
70:64:4c:2c:c3:58:09:c7:ad:65:75:e3:2b:12:38:
c9:1b:91:21:61:02:d2:08:ff:ef:d5:93:2b:e1:a2:
d8:be:77:4d:0f:20:39:93:f3:ec:be:b6:b1:02:44:
c2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AF:02:72:B7:64:55:57:47:F5:FA:95:AD:32:E0:09:BB:7A:01:79
X509v3 Authority Key Identifier:
keyid:D7:93:A8:D7:36:BE:B9:2B:E1:6D:19:3B:10:1F:93:BE:55:32:59:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15Oo1za-uSvhbRk7EB-TvlUyWRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/7K8CcrdkVVdH9fqVrTLgCbt6AXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/15Oo1za-uSvhbRk7EB-TvlUyWRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.96.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:b5:03:5d:92:0f:ba:99:7c:84:92:83:3b:67:06:a9:eb:89:
46:0b:ef:2d:eb:dc:0d:26:40:7c:26:5f:df:a2:de:4c:f8:35:
ac:e4:84:16:28:89:ed:24:49:43:5b:d2:05:a9:1d:25:f0:f4:
52:b3:95:1d:f5:6e:61:b9:6f:2a:5a:0f:d2:03:74:68:6f:66:
4a:ed:fa:33:0b:b0:b0:c4:5b:cf:12:9f:83:0c:99:7a:7f:1a:
ff:5a:39:33:47:3f:ab:76:3f:1c:49:72:99:ab:1d:ee:1c:77:
c4:80:b7:c9:28:e5:7a:51:4d:d4:9b:c7:0c:39:3a:ea:9c:b2:
ba:f3:a7:68:89:02:23:36:4b:f7:79:c3:d8:43:58:10:7b:b8:
fd:e2:59:ad:c1:7f:0c:26:46:42:61:fe:6e:f9:6e:5b:d9:52:
89:5a:b8:fd:9d:a8:59:ca:04:33:9b:cd:61:ec:d0:fa:41:73:
63:0e:fc:6c:8e:f2:26:4c:ff:0b:c9:93:b9:e2:49:fd:d2:b2:
de:f9:4e:bc:65:a2:1d:2f:8c:01:01:6c:57:96:01:25:ca:e8:
20:5e:81:4b:23:e0:29:cf:6b:21:59:9a:fc:99:6b:a5:69:44:
af:89:1e:67:ad:d8:0e:dc:1d:f0:d8:06:f4:12:c8:63:c8:51:
da:09:b4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:47 2023 by rpki-client on console-fra.rpki-client.org