Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/cb9956-28ff-4c27-b275-c9a2bfa4483f/1/X7jZcHHCpyRtyXItJadxxFCaI20.roa
File: X7jZcHHCpyRtyXItJadxxFCaI20.roa (raw, json)
Hash identifier: eARFNOJ2AmnmuB1EtFda5de3MC+u2ptBAnQkLlynXFA=
Subject key identifier: 5F:B8:D9:70:71:C2:A7:24:6D:C9:72:2D:25:A7:71:C4:50:9A:23:6D
Certificate issuer: /CN=ff01f1aa4db8ea3e49e1e3a35c8bc36a52750700
Certificate serial: 07BD2B18
Authority key identifier: FF:01:F1:AA:4D:B8:EA:3E:49:E1:E3:A3:5C:8B:C3:6A:52:75:07:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wHxqk246j5J4eOjXIvDalJ1BwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cb9956-28ff-4c27-b275-c9a2bfa4483f/1/X7jZcHHCpyRtyXItJadxxFCaI20.roa
Signing time: Sat 01 Jan 2022 11:59:18 +0000
ROA not before: Sat 01 Jan 2022 11:59:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208683
IP address blocks: 45.89.132.0/23 maxlen: 23
45.89.132.0/22 maxlen: 22
45.89.132.0/24 maxlen: 24
45.89.133.0/24 maxlen: 24
45.89.134.0/24 maxlen: 24
45.89.134.0/23 maxlen: 23
45.89.135.0/24 maxlen: 24
2a0b:cf00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129837848 (0x7bd2b18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff01f1aa4db8ea3e49e1e3a35c8bc36a52750700
Validity
Not Before: Jan 1 11:59:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fb8d97071c2a7246dc9722d25a771c4509a236d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:57:9d:ab:c4:cc:f5:08:9c:d0:96:47:96:54:
77:b6:c6:96:3a:fd:5c:10:dc:73:cf:b5:61:b0:3b:
11:67:12:2d:2d:cc:a4:29:16:79:10:24:13:fc:9c:
18:32:cf:f0:b3:92:71:89:68:89:15:8f:80:f1:f3:
eb:56:67:7a:65:0d:01:d0:be:b7:1b:f5:9c:c8:99:
75:4a:06:6d:05:43:71:2b:df:94:c0:56:97:3b:29:
50:b7:9a:0c:c5:af:18:79:49:72:7b:95:1e:22:57:
03:a4:a6:b7:d0:d4:e4:3f:a6:c5:a9:16:0a:74:29:
3f:0c:d7:cd:a8:d8:a0:b6:84:c6:4c:2e:8a:62:f9:
47:74:ff:91:d5:d2:07:85:4d:8e:14:d6:1f:46:05:
58:6e:ed:47:88:88:c0:29:d0:ea:44:5d:ef:26:2c:
9a:7b:5a:5f:e3:3d:d3:cc:10:e6:ed:45:44:bd:fd:
3d:f3:cb:73:47:c0:aa:e9:b9:a5:64:3b:09:04:e1:
fe:1c:f4:f7:be:64:8b:34:5f:53:ac:4f:23:8b:97:
5b:16:23:91:c3:e5:6f:c7:7c:f9:6d:fb:cd:7a:5c:
3a:68:50:ae:bf:25:46:57:b0:7f:c7:e4:1a:93:8e:
3f:07:ff:33:ae:5a:e5:8e:01:08:ac:30:8a:bb:e7:
f6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B8:D9:70:71:C2:A7:24:6D:C9:72:2D:25:A7:71:C4:50:9A:23:6D
X509v3 Authority Key Identifier:
keyid:FF:01:F1:AA:4D:B8:EA:3E:49:E1:E3:A3:5C:8B:C3:6A:52:75:07:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wHxqk246j5J4eOjXIvDalJ1BwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cb9956-28ff-4c27-b275-c9a2bfa4483f/1/X7jZcHHCpyRtyXItJadxxFCaI20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cb9956-28ff-4c27-b275-c9a2bfa4483f/1/_wHxqk246j5J4eOjXIvDalJ1BwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.132.0/22
IPv6:
2a0b:cf00::/32
Signature Algorithm: sha256WithRSAEncryption
11:44:de:fd:8f:41:e6:a8:61:bd:d1:bf:67:8f:8e:25:78:3e:
5f:90:7d:ed:a5:a9:0d:3d:11:91:e4:8e:86:a3:a5:40:9e:ca:
2a:1a:08:f0:04:f4:6b:b2:b5:90:7f:94:30:75:26:38:e0:f5:
79:13:3f:38:e6:33:eb:99:ac:4e:16:62:f2:dd:8c:18:2c:e4:
38:f5:e4:2e:d1:99:66:ae:4c:b2:36:64:db:d5:ab:ab:2d:58:
66:31:a0:f8:73:e0:84:ff:4b:9d:9b:cf:76:c8:af:d6:4e:5b:
47:ce:83:eb:23:ae:41:f3:f2:ce:7a:51:6e:90:aa:f9:06:44:
26:f4:ef:9e:52:f0:ae:ea:00:5e:ed:1c:3a:70:ef:2c:4d:85:
95:46:a9:d9:c3:8a:9d:1e:7f:96:41:da:e5:a2:c2:52:f2:42:
84:3f:37:67:6c:03:5c:bf:77:ee:51:cb:5e:e1:d1:6c:c7:6b:
e9:38:b3:d6:5c:85:7e:be:c4:ab:c4:41:87:36:fe:a0:ba:9b:
47:42:d1:f4:08:36:5c:0b:aa:a0:07:6d:5d:62:fe:be:81:24:
85:e3:60:17:aa:de:60:0b:1a:97:05:76:62:73:4a:91:7f:49:
16:89:66:b0:b1:ef:b3:ba:5f:b1:de:a3:d3:dd:c4:58:de:1d:
45:ef:a8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:17 2023 by rpki-client on console-ams.rpki-client.org