Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/aece21-99e3-49af-b958-636a67917f00/1/1ub07G77YIPem-TgXc9yxFWzCOI.roa
File: 1ub07G77YIPem-TgXc9yxFWzCOI.roa (raw, json)
Hash identifier: cklEHRx3TjjRu/DnhR5JVG2uqgYF4zX4pMuET+3+oW4=
Subject key identifier: D6:E6:F4:EC:6E:FB:60:83:DE:9B:E4:E0:5D:CF:72:C4:55:B3:08:E2
Certificate issuer: /CN=79b0a17a0e8749a4fbefc356744de3ab04080934
Certificate serial: 27404B
Authority key identifier: 79:B0:A1:7A:0E:87:49:A4:FB:EF:C3:56:74:4D:E3:AB:04:08:09:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebCheg6HSaT778NWdE3jqwQICTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/aece21-99e3-49af-b958-636a67917f00/1/1ub07G77YIPem-TgXc9yxFWzCOI.roa
Signing time: Sat 01 Jan 2022 01:59:43 +0000
ROA not before: Sat 01 Jan 2022 01:59:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202833
IP address blocks: 45.158.84.0/22 maxlen: 22
45.158.84.0/23 maxlen: 23
45.158.84.0/24 maxlen: 24
45.158.85.0/24 maxlen: 24
45.158.86.0/24 maxlen: 24
45.158.87.0/24 maxlen: 24
45.158.86.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2572363 (0x27404b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b0a17a0e8749a4fbefc356744de3ab04080934
Validity
Not Before: Jan 1 01:59:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6e6f4ec6efb6083de9be4e05dcf72c455b308e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:46:23:9e:8e:18:2e:74:10:b4:c4:f2:20:
64:3c:d2:77:7f:49:5e:6d:f9:32:e6:55:8f:f6:07:
b0:c2:bf:78:54:b1:88:89:9e:d4:b0:c6:40:46:88:
4b:27:08:39:25:67:c1:87:8a:74:bd:b8:b7:fb:47:
88:44:43:5f:8c:e8:17:bd:13:0c:1b:c9:5a:cb:8b:
8b:7e:ee:43:25:9a:d7:fb:50:28:74:3e:c4:ea:5b:
45:4a:0e:eb:5e:45:28:6a:9e:22:cb:12:c1:01:74:
3f:a5:64:db:26:ea:48:84:db:7e:37:ac:f2:b9:58:
e2:d3:36:4d:0e:d0:4f:41:67:f5:22:21:42:9b:b1:
00:a9:d5:a6:6f:78:f5:30:a3:d2:ee:5d:b1:53:c9:
b1:71:6b:c1:29:cb:2a:67:53:33:e0:3f:97:6b:75:
9b:12:bc:ad:a2:cb:e1:0c:bd:d0:f7:57:8b:ec:5d:
89:35:05:33:c5:c4:a5:c7:ca:60:2f:21:8a:ff:57:
b9:ea:11:11:8d:4e:58:e1:93:68:ca:1a:db:17:24:
69:de:32:45:eb:28:48:8e:68:6c:83:ed:db:88:cd:
5d:73:48:a3:99:d8:5b:15:2e:d6:ff:81:3c:5e:82:
13:70:f3:8d:b6:5d:53:9b:3c:05:a8:83:d7:3c:fe:
f1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E6:F4:EC:6E:FB:60:83:DE:9B:E4:E0:5D:CF:72:C4:55:B3:08:E2
X509v3 Authority Key Identifier:
keyid:79:B0:A1:7A:0E:87:49:A4:FB:EF:C3:56:74:4D:E3:AB:04:08:09:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebCheg6HSaT778NWdE3jqwQICTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/aece21-99e3-49af-b958-636a67917f00/1/1ub07G77YIPem-TgXc9yxFWzCOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/aece21-99e3-49af-b958-636a67917f00/1/ebCheg6HSaT778NWdE3jqwQICTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.84.0/22
Signature Algorithm: sha256WithRSAEncryption
82:49:9a:f0:f7:e5:db:05:76:03:58:a2:ad:f3:74:4a:8b:28:
75:70:fc:6e:ec:f1:37:70:71:2d:9f:12:d6:64:c7:2c:f0:b7:
e1:00:64:81:1b:10:be:82:a5:aa:19:db:4a:0f:2a:24:f6:38:
38:5c:28:43:7e:99:86:75:1e:ab:af:be:72:5b:f5:73:36:63:
fc:23:f7:c0:06:d5:59:5c:4f:99:93:6c:71:7c:03:bd:89:7a:
e9:49:6e:2e:66:56:be:9b:59:77:52:bc:0b:70:e2:8b:39:fa:
ff:be:46:78:5b:7d:0a:db:24:8b:06:af:7d:84:a3:57:7b:63:
8f:4f:fb:78:d4:7a:ad:be:fb:21:9b:db:7b:15:62:2f:53:77:
50:02:88:28:8d:87:ac:1d:69:63:8a:6f:97:cd:ad:e1:ac:c1:
d9:5a:30:32:3b:3e:d7:11:aa:6c:29:44:e9:60:3c:62:2b:01:
14:3b:47:fc:f8:e4:3a:33:c4:62:e1:41:4d:16:5f:d3:a5:b5:
5c:2e:01:ca:be:83:b0:d8:10:5b:26:52:9c:49:bc:93:15:dc:
3a:fb:aa:4c:fc:36:b4:40:81:6b:e7:5c:5d:7e:c4:e9:1d:e6:
b7:11:7b:51:d3:63:12:d0:fe:4a:29:ef:b0:fd:28:8d:b5:ce:
65:2d:18:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-fra.rpki-client.org