Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/660561-0d28-40d9-9b83-b61a842efd3a/1/cEvK8l76loyC0dcM8i9PeEaRKIg.roa
File: cEvK8l76loyC0dcM8i9PeEaRKIg.roa (raw, json)
Hash identifier: diwlIHLI0nkp7oBbwOWdqgOBmYnQZfCjIavdP1/ed5Q=
Subject key identifier: 70:4B:CA:F2:5E:FA:96:8C:82:D1:D7:0C:F2:2F:4F:78:46:91:28:88
Certificate issuer: /CN=17160f933670e42cd2f9661cc43e17da7395d912
Certificate serial: 08506A20
Authority key identifier: 17:16:0F:93:36:70:E4:2C:D2:F9:66:1C:C4:3E:17:DA:73:95:D9:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxYPkzZw5CzS-WYcxD4X2nOV2RI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/660561-0d28-40d9-9b83-b61a842efd3a/1/cEvK8l76loyC0dcM8i9PeEaRKIg.roa
Signing time: Sat 01 Jan 2022 07:02:01 +0000
ROA not before: Sat 01 Jan 2022 07:02:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198610
IP address blocks: 45.84.226.0/24 maxlen: 24
45.84.224.0/24 maxlen: 24
45.84.225.0/24 maxlen: 24
45.84.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139487776 (0x8506a20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17160f933670e42cd2f9661cc43e17da7395d912
Validity
Not Before: Jan 1 07:02:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=704bcaf25efa968c82d1d70cf22f4f7846912888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7a:18:c0:cf:1e:46:d1:34:58:59:82:1c:db:
57:b8:ea:81:8a:5e:36:d5:1f:41:2b:8e:2b:0f:02:
72:2d:6d:b4:66:1f:72:3e:30:88:98:de:a1:02:d3:
b8:6e:09:ba:ae:fe:40:28:b1:61:2e:91:6f:d1:fa:
be:18:c6:bd:ff:85:8f:3f:8e:7d:2c:b5:c1:32:a2:
1e:58:ae:30:10:37:79:05:a8:d8:d6:22:2f:f1:6e:
7d:e3:41:7e:dd:15:8a:85:00:0c:7b:e2:52:e0:dc:
21:37:36:30:f2:dc:96:49:0b:2c:7a:4b:3a:74:d1:
8a:af:d7:a0:5f:42:5a:7e:62:78:34:05:61:52:5a:
e3:76:8a:06:94:56:6e:a6:d3:43:d7:68:b2:77:a3:
2d:61:c4:1f:02:87:8a:0b:a7:54:d1:15:b4:fc:80:
12:17:c6:f4:a1:ce:03:b9:32:22:1a:09:c2:60:0a:
c4:fe:b9:af:80:61:d9:90:f6:7a:5d:22:04:11:89:
a4:1a:db:ab:35:b8:0a:56:e1:c6:6a:07:ec:70:64:
67:64:2b:7a:64:58:4e:13:09:83:dc:ad:18:d9:91:
8f:60:3c:a8:be:1e:03:34:bb:94:e4:c1:2b:79:85:
4d:ab:34:44:31:e3:db:ae:c0:24:7b:57:55:5b:a0:
0f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4B:CA:F2:5E:FA:96:8C:82:D1:D7:0C:F2:2F:4F:78:46:91:28:88
X509v3 Authority Key Identifier:
keyid:17:16:0F:93:36:70:E4:2C:D2:F9:66:1C:C4:3E:17:DA:73:95:D9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxYPkzZw5CzS-WYcxD4X2nOV2RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/660561-0d28-40d9-9b83-b61a842efd3a/1/cEvK8l76loyC0dcM8i9PeEaRKIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/660561-0d28-40d9-9b83-b61a842efd3a/1/FxYPkzZw5CzS-WYcxD4X2nOV2RI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.224.0/22
Signature Algorithm: sha256WithRSAEncryption
71:f9:bd:b4:1e:83:aa:55:a4:4f:95:6b:e8:47:74:d9:a1:ce:
4d:28:b3:fb:50:3a:45:7c:41:26:1d:d5:71:15:ef:e2:99:0e:
6a:06:6f:56:a6:50:be:60:8c:0f:44:65:6e:44:00:7e:f5:99:
02:63:9c:6e:b0:08:68:6c:01:49:1e:ef:d8:04:a3:87:5c:e9:
82:e6:49:97:44:5e:04:2c:f3:ea:81:fc:ef:eb:06:83:1c:7f:
a7:32:85:28:5c:cd:32:71:33:b7:2f:ad:70:af:0d:1d:7b:e9:
c1:9f:a1:2a:5c:22:5b:eb:c9:e7:fe:1a:76:83:e1:3b:bd:09:
13:9c:86:97:11:d1:9e:9c:af:e4:ba:1e:56:af:92:e1:10:a6:
6a:6c:5d:e2:1b:9b:3b:06:87:7b:6a:27:a0:47:57:31:df:db:
19:1e:57:38:67:75:0f:04:5a:cd:ca:cb:5a:74:04:7f:63:30:
69:6b:09:a5:cf:ae:fc:3b:19:32:40:a7:36:3c:f8:6b:47:37:
da:dd:09:79:6c:b7:a0:6a:93:d2:9e:3f:d3:a3:4f:1c:c7:54:
e8:5f:ce:f3:80:fc:5d:1e:f7:40:df:8c:32:c1:4d:a7:b6:cd:
05:6e:7e:55:17:9d:65:c7:50:9b:0b:ff:17:0c:6a:c8:9e:71:
bf:e8:a4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:13 2025 by rpki-client