Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/9e9849-abf7-4eb4-8b19-5309858d06ff/1/4H7uIfc2g-DazErapHG_OQkKGb4.roa
File: 4H7uIfc2g-DazErapHG_OQkKGb4.roa (raw, json)
Hash identifier: WLIy3mnV+Bo0M3YnCJba7/kbVYJWjALKnF/RAZ7EXeQ=
Subject key identifier: E0:7E:EE:21:F7:36:83:E0:DA:CC:4A:DA:A4:71:BF:39:09:0A:19:BE
Certificate issuer: /CN=5279cdfb8a898ff739bc191a5f665658df7befab
Certificate serial: 07F6E1D5
Authority key identifier: 52:79:CD:FB:8A:89:8F:F7:39:BC:19:1A:5F:66:56:58:DF:7B:EF:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnnN-4qJj_c5vBkaX2ZWWN9776s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/9e9849-abf7-4eb4-8b19-5309858d06ff/1/4H7uIfc2g-DazErapHG_OQkKGb4.roa
Signing time: Sat 01 Jan 2022 05:59:43 +0000
ROA not before: Sat 01 Jan 2022 05:59:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198610
IP address blocks: 45.130.42.0/24 maxlen: 24
45.130.43.0/24 maxlen: 24
45.130.40.0/22 maxlen: 22
45.130.40.0/24 maxlen: 24
45.130.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133620181 (0x7f6e1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5279cdfb8a898ff739bc191a5f665658df7befab
Validity
Not Before: Jan 1 05:59:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e07eee21f73683e0dacc4adaa471bf39090a19be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1a:ac:d2:b3:b5:9a:db:5d:fd:67:5f:82:21:
84:4d:b1:48:17:cb:0b:d1:3b:c7:af:c5:d4:c5:ff:
db:19:86:30:cc:4f:ce:36:bd:3b:52:86:16:f2:98:
5a:ab:da:4a:fe:36:40:76:39:a3:d7:81:b2:97:2c:
45:92:c2:f8:e5:71:39:90:ba:b7:ac:5b:de:4e:ee:
d2:f9:76:92:6f:ed:0f:23:31:4b:46:a4:de:69:46:
eb:5f:e3:83:e0:2e:f7:cf:1b:a2:fd:6e:85:b2:49:
9e:22:0d:58:ae:b9:3c:78:ab:ec:94:d7:1e:da:d0:
cb:83:3d:3f:1b:d4:9a:35:5f:c7:ac:48:58:a3:79:
80:ba:88:93:43:c4:c6:f8:22:83:11:e5:70:68:97:
d3:fd:ac:f4:7c:5a:b9:aa:84:46:48:95:f2:5e:cd:
23:f1:8c:0a:7d:1f:b2:c0:0f:4d:c1:f5:f2:5a:2a:
6e:5a:1b:e7:f9:36:b5:d8:6e:56:4c:7a:c4:94:ca:
72:ff:30:b2:0b:c2:b0:57:32:db:5f:9b:aa:4b:bb:
1a:9e:e5:13:f6:cb:21:ed:6d:da:0e:ad:27:1e:3a:
ca:be:0c:a8:b2:2e:be:07:05:47:8a:33:ac:56:a2:
f4:07:4f:3d:9d:76:e8:a4:bf:8c:cc:15:6d:59:77:
db:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7E:EE:21:F7:36:83:E0:DA:CC:4A:DA:A4:71:BF:39:09:0A:19:BE
X509v3 Authority Key Identifier:
keyid:52:79:CD:FB:8A:89:8F:F7:39:BC:19:1A:5F:66:56:58:DF:7B:EF:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnnN-4qJj_c5vBkaX2ZWWN9776s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9e9849-abf7-4eb4-8b19-5309858d06ff/1/4H7uIfc2g-DazErapHG_OQkKGb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9e9849-abf7-4eb4-8b19-5309858d06ff/1/UnnN-4qJj_c5vBkaX2ZWWN9776s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.40.0/22
Signature Algorithm: sha256WithRSAEncryption
11:29:81:ad:45:d4:1d:11:20:29:79:21:52:ee:ac:66:f8:90:
80:f9:5e:5d:dc:d9:d5:69:e5:4c:35:06:da:25:7d:ee:2b:54:
89:76:6d:48:08:c7:39:5d:1e:81:6f:4a:12:c4:b7:79:88:7b:
93:65:be:c6:dd:0d:39:f7:75:62:06:7a:6e:f6:95:ba:b5:94:
83:8e:23:69:a2:47:f6:68:07:55:ad:fa:46:3a:21:ac:d1:54:
57:7c:03:2e:57:9f:fd:7f:57:78:aa:85:da:72:23:af:87:da:
4f:82:4e:87:73:7c:01:98:84:be:f8:d0:55:39:a7:38:6f:4f:
10:2b:a9:e9:db:bd:90:c6:88:5d:6a:aa:d9:62:56:ae:a6:81:
18:a2:f9:c5:29:8f:ed:a2:3f:69:73:c7:5e:66:b9:57:ce:21:
36:d4:1d:30:68:08:86:81:36:a9:43:43:2d:66:a4:af:a1:09:
cc:24:38:1b:27:4c:be:fc:56:4c:f6:de:5b:47:f8:55:d5:e3:
65:8d:17:b9:f8:df:68:51:46:7b:21:42:03:cb:37:ac:44:48:
34:ff:9d:a5:84:14:f1:e7:6b:e9:8b:ab:db:d3:24:0f:eb:40:
05:b7:ed:ac:38:c7:9e:25:dd:ce:2e:d7:08:e5:21:97:3a:5e:
f9:51:54:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:31 2024 by rpki-client on console-fra.rpki-client.org