Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/jEDs5lTGoI_cq-idCFLeuoKRhDo.roa
File: jEDs5lTGoI_cq-idCFLeuoKRhDo.roa (raw, json)
Hash identifier: VuP4eC1xSV9kN+veH6wrIN+XpGsIiWq5u5OzYFCzLGE=
Subject key identifier: 8C:40:EC:E6:54:C6:A0:8F:DC:AB:E8:9D:08:52:DE:BA:82:91:84:3A
Certificate issuer: /CN=5d55260cebf2a73ca14709d96d24a5ff3bcb5dc4
Certificate serial: 08D09D4C
Authority key identifier: 5D:55:26:0C:EB:F2:A7:3C:A1:47:09:D9:6D:24:A5:FF:3B:CB:5D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XVUmDOvypzyhRwnZbSSl_zvLXcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/jEDs5lTGoI_cq-idCFLeuoKRhDo.roa
Signing time: Tue 10 May 2022 08:43:45 +0000
ROA not before: Tue 10 May 2022 08:43:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212369
IP address blocks: 45.155.125.0/24 maxlen: 24
194.36.85.0/24 maxlen: 24
194.36.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147889484 (0x8d09d4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d55260cebf2a73ca14709d96d24a5ff3bcb5dc4
Validity
Not Before: May 10 08:43:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c40ece654c6a08fdcabe89d0852deba8291843a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:48:4d:8b:b0:cf:4d:7d:5b:04:c6:a8:94:
fb:80:d0:b6:a2:74:95:67:1c:12:25:9e:cc:50:2c:
67:7b:27:e3:70:90:68:55:6d:c5:9a:d9:d3:ad:ec:
6c:a6:55:86:02:01:fa:2e:4c:da:a4:5d:f6:24:e2:
c6:cd:ed:05:0d:c5:78:75:39:a5:9a:f5:7f:4e:54:
c7:d5:03:67:f0:9f:c5:f6:d8:af:60:75:ab:46:52:
99:cb:39:e7:54:8d:d0:39:67:77:3f:7a:99:21:0a:
ea:00:a7:2e:44:e7:e2:d1:f1:ad:48:ba:ba:54:64:
a9:68:4b:37:5a:06:dd:c7:a5:6b:50:4c:2b:9c:1d:
d8:df:c5:98:e2:e2:57:d0:02:72:e9:ed:24:2f:88:
e7:c5:aa:e9:4f:00:25:79:6d:00:44:c8:60:6f:b6:
b7:56:ba:94:3c:c8:92:48:25:92:3e:87:f5:7a:7d:
c9:55:7a:79:9d:ad:34:86:c4:a2:e3:d2:da:bc:12:
ee:bd:47:36:28:f3:18:d7:63:96:cd:29:b2:17:35:
15:c1:0d:89:4e:b4:1c:42:d5:fd:b6:09:3a:19:18:
81:16:89:f1:5d:c3:61:fd:31:e1:5f:fa:38:92:e5:
f9:29:77:99:48:2a:c0:04:80:07:7b:38:dd:42:3a:
01:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:40:EC:E6:54:C6:A0:8F:DC:AB:E8:9D:08:52:DE:BA:82:91:84:3A
X509v3 Authority Key Identifier:
keyid:5D:55:26:0C:EB:F2:A7:3C:A1:47:09:D9:6D:24:A5:FF:3B:CB:5D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVUmDOvypzyhRwnZbSSl_zvLXcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/jEDs5lTGoI_cq-idCFLeuoKRhDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/XVUmDOvypzyhRwnZbSSl_zvLXcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.125.0/24
194.36.85.0/24
194.36.87.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:46:13:21:ba:d6:dc:81:a7:25:5e:c9:7e:88:da:e4:0c:97:
db:c3:2b:05:2a:6e:54:18:fc:b1:c0:b2:d5:b8:f1:72:71:f8:
9e:55:97:9f:e5:37:40:c0:66:73:54:4e:fd:70:26:a2:0c:a3:
cc:a2:51:e4:b3:cb:a2:fe:1f:8f:58:b8:be:8a:8a:69:6a:8e:
da:aa:91:9e:25:7a:bc:65:75:c2:71:3a:d2:e7:81:97:a5:78:
a8:f6:4c:90:3a:1c:71:09:14:cc:c2:52:f9:71:a9:71:59:ce:
e4:3f:84:91:66:8a:80:1a:74:8e:2c:82:c7:ac:80:1c:f0:1d:
8f:96:f9:69:72:b2:60:9d:10:f4:6d:1d:4a:08:c7:56:fd:08:
02:de:88:a9:45:b9:38:ac:d3:c0:87:3c:33:6d:b4:99:77:82:
c1:86:c7:c5:b2:79:4b:e4:fa:24:25:33:c2:20:fc:7b:b8:05:
02:cb:b3:ab:90:f2:88:a2:0d:a9:02:64:4e:b9:6d:27:6f:35:
4b:ee:e0:4f:20:03:8b:4a:23:8e:85:67:00:af:b0:50:b6:90:
01:18:b8:61:00:5f:73:c8:d5:ed:68:52:5b:e0:c3:4a:2a:c2:
f6:40:0a:c8:b4:5a:43:29:2f:b9:62:49:01:4e:33:0a:b7:0c:
48:39:31:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:37 2024 by rpki-client on console-fra.rpki-client.org