Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/8OE2pUafsW8yGo34mgtZAQ3tUgQ.roa
File: 8OE2pUafsW8yGo34mgtZAQ3tUgQ.roa (raw, json)
Hash identifier: fqEBx0IsOwz4X7PsIiPgwmFUmdpSyDyeAJFgA1ysSOc=
Subject key identifier: F0:E1:36:A5:46:9F:B1:6F:32:1A:8D:F8:9A:0B:59:01:0D:ED:52:04
Certificate issuer: /CN=37a8b5a1895c5088205095c2f7a5efe91d539e45
Certificate serial: 0183E971C9E1D0D529A3E120DA7D166CC7FA
Authority key identifier: 37:A8:B5:A1:89:5C:50:88:20:50:95:C2:F7:A5:EF:E9:1D:53:9E:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6i1oYlcUIggUJXC96Xv6R1TnkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/8OE2pUafsW8yGo34mgtZAQ3tUgQ.roa
Signing time: Tue 18 Oct 2022 04:54:52 +0000
ROA not before: Tue 18 Oct 2022 04:54:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22653
IP address blocks: 45.128.232.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e9:71:c9:e1:d0:d5:29:a3:e1:20:da:7d:16:6c:c7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a8b5a1895c5088205095c2f7a5efe91d539e45
Validity
Not Before: Oct 18 04:54:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0e136a5469fb16f321a8df89a0b59010ded5204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8e:ef:71:bc:a7:09:98:eb:2c:9e:be:19:6b:
2a:ab:12:fe:54:38:55:c4:5c:f2:6d:24:c6:9c:b4:
f8:4b:7b:fe:27:3d:b2:df:63:43:00:77:f5:d5:1a:
95:5c:3c:12:e8:38:4b:29:72:02:4d:d1:fc:33:0d:
78:67:54:02:7d:2d:4f:8c:bd:04:bd:a1:d2:a2:1f:
1d:e1:76:ac:c5:f1:58:77:2e:da:c6:cb:f0:d7:13:
51:2c:a1:c8:bc:c8:77:93:7a:7c:1b:4f:67:d3:f4:
a4:71:83:48:c0:71:3e:21:cf:38:72:48:c9:55:ba:
81:a9:56:31:59:47:33:59:10:64:fa:32:71:de:c2:
ad:72:ed:85:18:a7:51:8d:33:e6:d9:dd:1a:43:d6:
f4:21:28:8a:c9:05:97:dc:9c:9c:48:66:9a:e8:f8:
31:a7:ca:fc:28:89:b4:47:ce:f7:84:3b:46:d8:d0:
a2:ca:1b:10:54:03:54:f9:e1:2c:ec:c5:da:9c:d5:
dc:c2:a5:70:0c:0e:78:d6:04:d6:4a:c6:03:d0:d3:
2b:b1:a1:f4:58:b0:84:cb:8a:89:64:62:d6:e9:35:
3b:51:c6:15:a9:f3:ec:13:91:40:f2:b0:ed:0b:f2:
d1:8e:89:61:f2:15:44:93:c3:b4:ea:02:fc:1e:34:
6e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E1:36:A5:46:9F:B1:6F:32:1A:8D:F8:9A:0B:59:01:0D:ED:52:04
X509v3 Authority Key Identifier:
keyid:37:A8:B5:A1:89:5C:50:88:20:50:95:C2:F7:A5:EF:E9:1D:53:9E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6i1oYlcUIggUJXC96Xv6R1TnkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/8OE2pUafsW8yGo34mgtZAQ3tUgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/N6i1oYlcUIggUJXC96Xv6R1TnkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.232.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:c8:a9:d4:7c:50:7e:41:2a:ae:9a:7d:e9:8d:3e:00:b3:7e:
44:f1:29:2c:aa:0f:1b:de:40:ec:1c:ef:dc:d0:3c:72:c6:ee:
6a:08:86:66:26:0a:6a:b0:a4:b9:b1:b1:2c:7b:14:55:0f:9a:
49:b3:de:8a:75:66:1b:67:89:d4:49:8a:9a:0e:f4:85:3f:f7:
27:10:2e:cc:c1:5d:23:7e:77:1f:48:4c:98:59:6b:93:ee:f9:
5a:2c:13:f7:e8:5b:f0:5e:2c:a6:50:83:0d:d5:74:62:e1:47:
15:09:98:05:1c:ba:79:ec:fd:43:36:7c:82:b2:8c:d3:ff:9c:
c4:d7:5c:9c:10:09:98:42:6d:80:8d:38:e9:8b:2a:fa:74:20:
12:da:52:50:45:db:a8:82:ec:26:2a:0f:65:b8:19:14:b4:46:
b2:06:af:a0:eb:0e:e7:05:93:4c:ec:d7:a5:34:4d:43:f2:5e:
ee:86:59:b2:d7:27:08:0b:25:9c:58:cc:69:b6:83:e1:22:a4:
7c:a3:b3:d4:d0:3f:39:1e:dd:d6:31:16:2a:2c:0c:54:12:3f:
fe:8a:a8:b3:6b:42:d5:a1:c0:1e:fa:90:3e:97:53:a1:2a:90:
f7:39:80:76:93:37:d8:ca:c3:48:02:24:40:99:ac:22:7b:71:
b1:20:98:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:24 2024 by rpki-client on console-ams.rpki-client.org