Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/85e970-8a63-47d5-a2ff-994fb6f53b58/1/XoiDLUCpz8UWz2aeM-RSHFYon-s.roa
File: XoiDLUCpz8UWz2aeM-RSHFYon-s.roa (raw, json)
Hash identifier: YItXg1vzGkKh+3tuCde/Io03y41gQL/bPbuGRJnoCD0=
Subject key identifier: 5E:88:83:2D:40:A9:CF:C5:16:CF:66:9E:33:E4:52:1C:56:28:9F:EB
Certificate issuer: /CN=9c378004b2d850fe49a35559e40abf09adee402e
Certificate serial: 018414DE55E8E937B3E050876FBF67547BA8
Authority key identifier: 9C:37:80:04:B2:D8:50:FE:49:A3:55:59:E4:0A:BF:09:AD:EE:40:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDeABLLYUP5Jo1VZ5Aq_Ca3uQC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/85e970-8a63-47d5-a2ff-994fb6f53b58/1/XoiDLUCpz8UWz2aeM-RSHFYon-s.roa
Signing time: Wed 26 Oct 2022 15:17:06 +0000
ROA not before: Wed 26 Oct 2022 15:17:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212477
IP address blocks: 45.144.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:de:55:e8:e9:37:b3:e0:50:87:6f:bf:67:54:7b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c378004b2d850fe49a35559e40abf09adee402e
Validity
Not Before: Oct 26 15:17:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e88832d40a9cfc516cf669e33e4521c56289feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:77:e5:b2:54:ed:43:2d:7c:b2:72:a7:44:0e:
df:f3:b6:32:95:34:ab:7b:d9:db:34:98:e7:83:06:
3d:44:98:e2:71:33:d8:2b:c8:99:50:ad:dd:11:08:
ce:0a:11:4b:c0:3a:5e:5d:2e:19:ec:2d:1c:75:3b:
28:83:da:d3:36:e7:44:65:52:ec:f2:e3:f0:7b:02:
4c:fd:79:cf:c9:d2:d2:8f:27:89:ad:25:0e:8e:e0:
06:3e:4b:1e:bf:95:54:c3:22:ed:c9:c1:e3:bf:22:
f0:54:c6:e5:20:58:5b:4e:5a:05:8c:10:2c:a8:b3:
3a:44:ac:01:9d:a5:58:cd:4c:2d:08:ee:31:af:15:
e7:75:88:08:f9:4a:57:c6:4b:d1:3a:db:3c:9d:a1:
95:f4:a0:0a:c9:60:b6:70:7d:d7:28:1d:12:0e:42:
20:5c:ba:d0:71:69:b3:87:9a:91:3d:34:d1:84:f0:
ac:9b:47:3b:aa:73:e9:c8:0b:34:80:54:82:14:f7:
47:38:44:47:4c:81:4a:75:45:e0:b5:6b:ec:ba:97:
eb:1f:ee:6c:28:e0:e1:32:c7:12:cb:7c:48:02:96:
cf:f7:c7:a6:9f:22:f3:d0:15:56:08:14:0a:98:6a:
27:93:93:fb:d3:45:32:5c:d4:e8:e1:63:af:fe:3b:
03:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:88:83:2D:40:A9:CF:C5:16:CF:66:9E:33:E4:52:1C:56:28:9F:EB
X509v3 Authority Key Identifier:
keyid:9C:37:80:04:B2:D8:50:FE:49:A3:55:59:E4:0A:BF:09:AD:EE:40:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDeABLLYUP5Jo1VZ5Aq_Ca3uQC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/85e970-8a63-47d5-a2ff-994fb6f53b58/1/XoiDLUCpz8UWz2aeM-RSHFYon-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/85e970-8a63-47d5-a2ff-994fb6f53b58/1/nDeABLLYUP5Jo1VZ5Aq_Ca3uQC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.196.0/24
Signature Algorithm: sha256WithRSAEncryption
08:65:62:81:ba:46:cd:d9:5f:5b:c6:05:a5:7e:c5:ab:68:fa:
2c:15:c7:24:18:9b:26:ab:49:13:f8:a3:cc:1d:e5:8f:ed:0d:
1c:18:96:b4:c6:d1:db:04:f0:13:70:02:8c:d0:bd:3a:f9:ec:
93:f8:b1:6b:04:c3:c9:1a:62:f7:49:01:44:20:02:00:02:d5:
54:d5:9c:53:e6:a3:98:64:e0:42:96:79:b0:8f:ab:28:c9:6f:
0c:e9:03:5f:c4:e2:75:48:95:ea:4c:52:28:1c:14:e0:7f:09:
0e:89:1a:6d:17:c3:81:56:d6:24:b3:e5:14:d0:da:7b:3c:b0:
f8:62:d2:4a:49:c8:54:48:e3:ba:95:5f:09:e9:f5:03:05:1a:
dc:14:e6:eb:c9:32:6c:3d:08:8f:49:88:fb:25:e4:1f:62:97:
3c:56:ab:d5:64:6b:3c:9b:f5:60:f2:61:5a:7d:01:e6:a9:5f:
93:c4:ab:4c:50:6d:84:d9:fb:e0:16:11:98:3d:e9:34:c8:30:
b4:03:c5:0a:67:e6:3c:ff:7e:b1:a3:5c:4b:1a:f5:c6:56:41:
17:57:77:ca:a6:d2:7d:ff:6d:74:f0:f9:69:ba:f1:9a:88:93:
aa:84:98:9d:a7:a0:dd:fa:68:07:08:14:c6:62:d6:10:26:a9:
b5:36:31:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:20 2024 by rpki-client on console-fra.rpki-client.org