Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/cb9956-28ff-4c27-b275-c9a2bfa4483f/1/4IF8f_M8gYMj3sRUYe9DgQLFfHs.roa
File: 4IF8f_M8gYMj3sRUYe9DgQLFfHs.roa (raw, json)
Hash identifier: jgysNKv5zvMEWou7LaMan5IROkbLyCinWbXdKH69e34=
Subject key identifier: E0:81:7C:7F:F3:3C:81:83:23:DE:C4:54:61:EF:43:81:02:C5:7C:7B
Certificate issuer: /CN=ff01f1aa4db8ea3e49e1e3a35c8bc36a52750700
Certificate serial: 01856F5DAF9A85F2361F4E191BFC50C1401B
Authority key identifier: FF:01:F1:AA:4D:B8:EA:3E:49:E1:E3:A3:5C:8B:C3:6A:52:75:07:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wHxqk246j5J4eOjXIvDalJ1BwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cb9956-28ff-4c27-b275-c9a2bfa4483f/1/4IF8f_M8gYMj3sRUYe9DgQLFfHs.roa
Signing time: Sun 01 Jan 2023 22:04:48 +0000
ROA not before: Sun 01 Jan 2023 22:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208683
IP address blocks: 45.89.132.0/23 maxlen: 23
45.89.132.0/22 maxlen: 22
45.89.132.0/24 maxlen: 24
45.89.133.0/24 maxlen: 24
45.89.134.0/24 maxlen: 24
45.89.134.0/23 maxlen: 23
45.89.135.0/24 maxlen: 24
2a0b:cf00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:af:9a:85:f2:36:1f:4e:19:1b:fc:50:c1:40:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff01f1aa4db8ea3e49e1e3a35c8bc36a52750700
Validity
Not Before: Jan 1 22:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0817c7ff33c818323dec45461ef438102c57c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b9:a4:ac:e0:1d:90:dd:04:01:d3:1f:2a:05:
84:a4:1e:31:d1:1e:8d:20:06:19:6f:06:f5:31:d2:
ac:8c:49:da:a1:53:6d:07:91:57:66:de:e6:94:41:
bc:d7:5b:dc:08:69:29:d5:b3:d2:df:ce:6d:28:7e:
13:1a:69:a4:2c:0b:b5:a3:8d:34:bf:0b:a2:79:21:
80:be:f3:93:a5:b4:0f:26:64:4d:63:40:a0:f8:9d:
29:a1:4d:7d:08:80:cc:48:0c:bd:af:8e:c6:94:a5:
8b:82:e0:54:fe:d9:90:83:c0:27:4e:31:d8:c6:64:
b5:65:a8:e0:f2:d4:88:32:98:c9:d5:2b:48:dc:9f:
87:e3:ea:de:db:e0:c5:30:5c:22:bb:41:47:62:90:
3d:19:17:65:b9:a4:33:e5:a9:c4:3b:b1:d8:fd:25:
94:93:8e:56:44:f0:31:67:c8:60:5b:46:05:f3:00:
a5:1e:ec:f6:89:c3:76:f7:cb:19:09:b5:0b:62:11:
43:49:11:a1:43:34:08:e6:b6:40:d2:a8:bd:46:c3:
22:3c:7b:22:21:1f:65:26:6e:5b:5a:da:34:05:5a:
86:d1:06:38:04:a6:63:25:76:88:1e:03:f6:7c:b7:
dd:6b:4f:b1:2e:06:e5:4f:5f:39:71:84:40:4e:51:
d7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:81:7C:7F:F3:3C:81:83:23:DE:C4:54:61:EF:43:81:02:C5:7C:7B
X509v3 Authority Key Identifier:
keyid:FF:01:F1:AA:4D:B8:EA:3E:49:E1:E3:A3:5C:8B:C3:6A:52:75:07:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wHxqk246j5J4eOjXIvDalJ1BwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cb9956-28ff-4c27-b275-c9a2bfa4483f/1/4IF8f_M8gYMj3sRUYe9DgQLFfHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cb9956-28ff-4c27-b275-c9a2bfa4483f/1/_wHxqk246j5J4eOjXIvDalJ1BwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.132.0/22
IPv6:
2a0b:cf00::/32
Signature Algorithm: sha256WithRSAEncryption
12:6f:9c:7d:29:b6:6f:58:82:79:24:39:8c:0a:e2:7b:50:d2:
15:ee:6a:54:63:b1:27:9c:37:70:88:0e:ae:11:20:dc:f2:f8:
09:c1:81:01:54:bb:9e:9c:7a:51:1f:85:5b:90:64:b2:88:39:
ec:54:c0:36:15:8c:9a:29:2f:b2:0c:68:e2:15:b4:25:1d:f9:
ff:de:6c:27:26:64:d0:be:69:9f:f8:c9:1d:e9:76:bc:05:d9:
02:36:af:bb:29:e4:f6:40:d3:e3:5d:ea:13:f7:42:44:b5:23:
c1:78:50:06:f1:14:24:7d:a6:3b:cf:03:20:c5:32:cf:c4:9b:
4f:f8:b6:e7:2a:03:2e:9a:a4:4d:e2:17:16:78:2e:42:e9:27:
b3:a1:86:bd:73:50:02:c5:fa:29:95:cc:51:ee:9c:e6:a9:42:
39:f3:c2:92:20:1d:b2:b5:d4:5a:4e:62:72:f3:b2:d7:dd:06:
3d:d6:df:03:bd:db:40:06:62:a3:6c:a8:56:c0:0e:07:9e:5c:
2c:01:eb:05:c8:9c:04:78:74:eb:14:4a:96:2e:db:d6:ff:65:
c8:c0:20:5f:fe:38:78:d9:b6:9a:28:8d:fb:5b:c4:f8:7e:7e:
77:84:d9:e7:1c:0b:5e:1d:aa:1d:ea:e4:eb:23:f0:9e:46:ea:
07:6c:c6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-fra.rpki-client.org