Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ce2aa1-0687-4a6a-8105-11e457b613f1/1/VuSM27WQKzKI469FoQAMpHDM3Uc.roa
File: VuSM27WQKzKI469FoQAMpHDM3Uc.roa (raw, json)
Hash identifier: hUJL1mifvUxGSKJweCLl8s21Fl6iY5jbsd2c7z1GB1g=
Subject key identifier: 56:E4:8C:DB:B5:90:2B:32:88:E3:AF:45:A1:00:0C:A4:70:CC:DD:47
Certificate issuer: /CN=412ec7428c151c604ef393a0ba4979f50902012c
Certificate serial: 0182F139558B4B1B71556DDFB103C94625DE
Authority key identifier: 41:2E:C7:42:8C:15:1C:60:4E:F3:93:A0:BA:49:79:F5:09:02:01:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QS7HQowVHGBO85Ogukl59QkCASw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ce2aa1-0687-4a6a-8105-11e457b613f1/1/VuSM27WQKzKI469FoQAMpHDM3Uc.roa
Signing time: Wed 31 Aug 2022 00:07:22 +0000
ROA not before: Wed 31 Aug 2022 00:07:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 45.80.226.0/24 maxlen: 24
45.80.225.0/24 maxlen: 24
45.80.224.0/22 maxlen: 22
45.80.224.0/24 maxlen: 24
45.80.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f1:39:55:8b:4b:1b:71:55:6d:df:b1:03:c9:46:25:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412ec7428c151c604ef393a0ba4979f50902012c
Validity
Not Before: Aug 31 00:07:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56e48cdbb5902b3288e3af45a1000ca470ccdd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:96:54:09:b2:20:da:dc:c0:d3:50:fd:3b:65:
a3:b3:68:cc:6e:6b:92:c2:1a:07:5a:7f:f8:96:08:
98:9b:18:64:3f:a3:77:ae:bd:f3:a5:a8:b4:29:aa:
fd:31:b2:62:cc:30:21:51:29:46:d2:2e:ae:b2:c8:
f5:75:71:e6:a4:b6:b7:ae:71:b0:3d:aa:e6:3b:56:
ac:90:95:f6:4a:99:d8:22:de:0b:52:c7:8a:61:48:
4c:18:b6:40:0f:f0:02:64:13:d3:2e:ed:e8:67:36:
b8:60:b1:d1:c1:3d:45:67:8e:8a:29:64:f6:b7:91:
e7:f2:3a:b7:c2:be:4e:ba:f4:45:4c:ed:3e:27:fa:
b6:a3:bd:a1:cf:71:d1:37:9c:dc:aa:64:11:6b:7a:
6c:2d:be:9b:a2:02:08:99:ca:2c:88:4d:85:5d:c3:
ac:c7:6f:51:c4:ad:4c:c3:28:88:76:50:fd:54:bd:
a3:f1:b5:3d:31:07:74:71:85:1a:0b:92:90:be:6c:
3f:63:b0:61:39:4e:2c:cb:3a:65:68:b9:0c:a5:54:
46:21:d1:8f:b9:23:65:cb:f0:28:12:a6:48:04:49:
a2:3e:f5:26:1f:62:d9:3c:40:69:f9:c3:26:1c:1d:
49:bb:6c:38:b3:1c:c3:d9:14:5f:1a:0c:d1:8b:5d:
f8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E4:8C:DB:B5:90:2B:32:88:E3:AF:45:A1:00:0C:A4:70:CC:DD:47
X509v3 Authority Key Identifier:
keyid:41:2E:C7:42:8C:15:1C:60:4E:F3:93:A0:BA:49:79:F5:09:02:01:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QS7HQowVHGBO85Ogukl59QkCASw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce2aa1-0687-4a6a-8105-11e457b613f1/1/VuSM27WQKzKI469FoQAMpHDM3Uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce2aa1-0687-4a6a-8105-11e457b613f1/1/QS7HQowVHGBO85Ogukl59QkCASw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.224.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:d6:8e:e3:ad:4c:f1:a9:9c:3b:28:5d:9b:5d:81:f6:b7:34:
0c:98:49:43:fc:a8:71:9c:14:35:7c:9d:1a:e9:0a:f8:99:f4:
05:94:6b:5d:79:4b:b6:ec:ea:45:74:32:72:dd:5b:0f:66:6e:
a8:06:30:48:88:57:c1:9e:12:90:35:9d:82:55:46:2e:a0:d8:
69:d6:f5:27:7d:76:10:88:d7:90:7b:d8:b6:c1:e7:30:bc:c4:
c3:06:62:e1:b1:e1:9d:9e:f1:6a:69:a6:58:d1:f8:2d:75:27:
9d:1d:ae:1b:97:7d:8c:76:38:74:69:ba:f9:3e:66:71:2d:e5:
30:26:c3:fa:1a:2e:a7:68:5e:9e:67:ac:5e:e5:00:86:fe:2f:
41:0b:67:de:5f:00:89:d3:94:42:28:1a:b1:06:52:b1:de:ab:
48:13:d5:54:fd:6f:32:3b:d0:c4:03:ee:f9:8d:74:ca:98:a7:
a1:2f:73:47:04:25:92:e0:21:15:08:90:5c:07:27:d6:cd:ba:
3a:ad:98:7d:4a:f4:02:e8:8c:72:94:da:de:0c:e2:36:48:b3:
26:bb:0f:a8:bf:9c:0c:3c:fe:a2:08:a8:70:02:25:59:d2:c4:
09:69:78:73:e0:ae:d5:64:36:69:bf:ab:23:32:75:7e:50:7d:
3b:80:d9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:25 2024 by rpki-client on console-ams.rpki-client.org