Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/cbd8e7-312c-4a48-830d-aa755b12de80/1/EM8laOYI81PIYQBVYGJeglPhyKU.roa
File: EM8laOYI81PIYQBVYGJeglPhyKU.roa (raw, json)
Hash identifier: 3+qesGGlxOVwj3hnqCr9W/pFRXCcql9KRlzP4tcU3G0=
Subject key identifier: 10:CF:25:68:E6:08:F3:53:C8:61:00:55:60:62:5E:82:53:E1:C8:A5
Certificate issuer: /CN=1f106f466c4afa3b9dc3bfff43caf70b8658c4e2
Certificate serial: 01856F9DB624D5342D9F3ED9028993E4A94A
Authority key identifier: 1F:10:6F:46:6C:4A:FA:3B:9D:C3:BF:FF:43:CA:F7:0B:86:58:C4:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxBvRmxK-judw7__Q8r3C4ZYxOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cbd8e7-312c-4a48-830d-aa755b12de80/1/EM8laOYI81PIYQBVYGJeglPhyKU.roa
Signing time: Sun 01 Jan 2023 23:14:44 +0000
ROA not before: Sun 01 Jan 2023 23:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25234
IP address blocks: 45.10.97.0/24 maxlen: 24
45.148.80.0/22 maxlen: 22
2a10:bbc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:b6:24:d5:34:2d:9f:3e:d9:02:89:93:e4:a9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f106f466c4afa3b9dc3bfff43caf70b8658c4e2
Validity
Not Before: Jan 1 23:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10cf2568e608f353c861005560625e8253e1c8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:76:18:c1:cd:2d:7f:4f:39:88:9f:2b:76:2c:
eb:db:1e:76:12:22:22:d9:d0:90:73:69:18:00:13:
eb:2f:23:24:8c:fb:61:8f:a6:63:86:2e:6b:fb:a5:
42:ed:93:93:e1:4d:8d:c1:c9:b0:56:13:e7:67:04:
25:bd:4c:4f:95:d7:49:43:2c:d3:69:e2:88:23:61:
87:7f:3f:4a:c3:bc:c8:96:0b:bf:44:33:b0:a3:21:
3f:0b:a1:0b:ca:b3:b2:1f:15:7c:db:1d:c5:ad:57:
33:c7:64:7c:15:14:bd:6a:63:e1:4c:38:7f:b5:5e:
a8:0f:ff:43:3b:b6:fe:98:1a:93:d7:a7:9e:14:f1:
bd:ac:96:49:9b:36:bf:ca:8a:d3:3a:00:17:0f:c7:
25:32:0b:4e:55:db:36:75:d7:02:6e:1c:ef:b0:f6:
12:28:4f:27:8d:8a:75:db:e3:a7:b4:5e:d7:2c:f4:
e8:1f:af:4d:4a:af:90:97:66:6e:ea:43:26:64:0e:
88:62:f8:8f:41:3a:bd:78:f9:41:a5:3f:4c:59:9a:
d0:83:c0:ed:4f:34:2c:7d:20:36:5e:9b:1c:1e:be:
a8:d9:c3:64:89:99:2e:e9:aa:1b:29:5a:3b:9c:d2:
c4:da:f8:62:5a:3f:03:2d:36:9f:23:1d:70:1c:b6:
27:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CF:25:68:E6:08:F3:53:C8:61:00:55:60:62:5E:82:53:E1:C8:A5
X509v3 Authority Key Identifier:
keyid:1F:10:6F:46:6C:4A:FA:3B:9D:C3:BF:FF:43:CA:F7:0B:86:58:C4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxBvRmxK-judw7__Q8r3C4ZYxOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cbd8e7-312c-4a48-830d-aa755b12de80/1/EM8laOYI81PIYQBVYGJeglPhyKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cbd8e7-312c-4a48-830d-aa755b12de80/1/HxBvRmxK-judw7__Q8r3C4ZYxOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.97.0/24
45.148.80.0/22
IPv6:
2a10:bbc0::/32
Signature Algorithm: sha256WithRSAEncryption
80:b8:0e:08:c4:08:ef:06:b9:a7:82:e5:57:1f:41:72:0f:59:
f8:93:e0:79:5d:c8:ba:e1:0a:8f:f7:a2:c9:49:27:22:35:df:
39:52:5b:6a:b7:f3:5c:82:2a:c7:b7:0f:fc:4a:c6:fc:0b:fc:
32:74:d4:b7:93:d5:05:09:d0:7f:50:23:bb:db:8f:65:49:04:
2a:79:36:91:30:84:e8:c9:29:62:96:4b:b4:b7:4f:ce:ce:85:
aa:6b:86:8f:f0:2e:93:13:39:07:1d:67:fa:11:b8:bf:63:3f:
07:31:b1:4e:6f:fa:52:b2:1c:28:46:36:dc:c5:a3:89:89:58:
53:af:b9:05:a8:9d:d1:ea:46:fd:fe:2f:f9:56:c9:c0:70:23:
ed:d5:5f:ce:36:79:af:e2:25:b3:0b:04:a1:67:b8:6e:80:45:
c5:04:43:ef:84:96:40:6f:83:4c:3a:9c:6c:9c:1d:80:3f:9e:
20:68:2e:30:21:c6:9f:53:16:e4:74:68:0d:10:7c:c5:67:e4:
42:1e:cd:07:5e:16:44:eb:90:b7:67:bf:27:49:14:d9:6a:8a:
09:da:3c:49:5a:4e:ea:9c:c8:fa:6c:95:01:11:d6:f8:90:bf:
f8:eb:fa:7d:d5:60:7d:bb:59:e3:22:65:af:d8:bc:75:8c:f9:
e0:f6:93:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-fra.rpki-client.org