Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/e64uf5ELF11Gz9M9yOBZtuN01QA.roa
File: e64uf5ELF11Gz9M9yOBZtuN01QA.roa (raw, json)
Hash identifier: QcxujUeV8sgPIZg5kouDi5OJTDlitfFtx2h86I9+p3E=
Subject key identifier: 7B:AE:2E:7F:91:0B:17:5D:46:CF:D3:3D:C8:E0:59:B6:E3:74:D5:00
Certificate issuer: /CN=37a8b5a1895c5088205095c2f7a5efe91d539e45
Certificate serial: 01846791DC081B83C7863F07488D51A64F0D
Authority key identifier: 37:A8:B5:A1:89:5C:50:88:20:50:95:C2:F7:A5:EF:E9:1D:53:9E:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6i1oYlcUIggUJXC96Xv6R1TnkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/e64uf5ELF11Gz9M9yOBZtuN01QA.roa
Signing time: Fri 11 Nov 2022 16:42:03 +0000
ROA not before: Fri 11 Nov 2022 16:42:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38337
IP address blocks: 45.128.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:67:91:dc:08:1b:83:c7:86:3f:07:48:8d:51:a6:4f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a8b5a1895c5088205095c2f7a5efe91d539e45
Validity
Not Before: Nov 11 16:42:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bae2e7f910b175d46cfd33dc8e059b6e374d500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d8:ab:81:c7:e7:27:a5:9d:53:7c:c9:c6:97:
5c:85:a8:33:df:31:ae:b2:2b:f6:50:c5:37:72:c8:
a6:6f:22:64:89:43:c8:34:72:45:a0:ed:da:1c:84:
52:b3:ad:1f:99:56:6b:d9:8e:b6:69:08:bc:a0:5a:
20:5f:57:9e:d0:72:4d:d8:29:38:3e:e0:d0:ef:ce:
dd:a8:28:27:61:9b:82:6d:5a:1a:7a:a3:1c:41:35:
25:b7:f5:8b:e8:8e:7d:5d:98:42:cd:5e:be:8c:c4:
0c:6a:17:14:64:6c:48:46:d2:d4:1f:81:aa:1b:dd:
cf:a4:16:fd:92:62:66:ff:1e:f4:9d:61:b1:1e:30:
01:81:fc:b1:2e:46:90:f0:41:4c:88:d9:f4:11:01:
88:49:e1:b8:b3:5b:84:ee:d8:d9:03:28:a1:f3:3d:
ad:e9:e4:0c:76:70:c0:b1:17:cc:59:b4:e7:6f:f6:
66:7d:8c:f5:e9:5e:c4:4c:c7:ee:54:6d:ad:a8:65:
27:27:d9:ab:d0:c4:6d:84:66:b9:25:a8:86:32:fe:
6f:d3:a0:a1:b0:98:62:f4:72:45:db:18:49:eb:11:
98:bb:35:8d:3e:d8:f3:6d:0f:c9:f5:a6:cd:5c:7a:
3c:0e:8c:2d:fe:c9:a2:c2:05:3f:eb:ad:6e:2b:ec:
ea:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AE:2E:7F:91:0B:17:5D:46:CF:D3:3D:C8:E0:59:B6:E3:74:D5:00
X509v3 Authority Key Identifier:
keyid:37:A8:B5:A1:89:5C:50:88:20:50:95:C2:F7:A5:EF:E9:1D:53:9E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6i1oYlcUIggUJXC96Xv6R1TnkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/e64uf5ELF11Gz9M9yOBZtuN01QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/N6i1oYlcUIggUJXC96Xv6R1TnkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.235.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:bb:3a:a8:71:8a:ac:66:b3:69:49:b8:f2:41:96:9c:cb:51:
fb:85:7f:ea:78:eb:3d:8d:89:8a:d8:35:73:38:4e:ab:d5:f3:
2c:85:24:ed:25:a6:5d:5d:7e:3a:d9:89:ad:29:d4:66:af:f1:
59:83:54:f1:95:03:e9:a1:66:b6:62:3b:fa:ee:1a:30:0f:51:
8f:18:00:43:97:63:0e:0d:23:fc:f3:02:4c:58:6e:70:44:73:
0e:2d:56:45:df:0d:0c:d9:be:07:1d:19:55:9c:30:11:85:61:
9b:6d:35:fe:51:5b:45:59:67:3a:43:62:8f:87:a1:67:26:5e:
16:e4:cc:6f:87:5c:cb:5b:83:92:12:8c:ba:81:0f:d6:0d:be:
d4:e1:0d:6c:1f:1e:d2:7e:6d:fa:7e:5e:08:a6:e7:37:05:20:
bf:5f:af:15:a1:d1:77:79:3a:14:97:1e:17:1b:ac:f6:33:73:
7e:e8:0d:39:f8:ed:8e:d7:0e:36:d3:21:f6:84:7e:c8:04:ff:
5f:4e:a6:60:84:81:c3:8a:ac:ee:16:09:32:33:7e:64:7d:a4:
70:a2:6e:79:e4:4d:52:d9:e5:f2:6b:aa:43:92:73:e8:59:bc:
df:56:ac:63:85:57:71:25:01:ab:f2:8f:c7:3e:08:56:34:58:
34:fe:26:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:24 2025 by rpki-client