Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/90c2ef-e0ee-4dcf-9dd5-9c7fdbdad0db/1/jTrvrYu0aTVOFsiWtdb12dRyf2s.roa
File: jTrvrYu0aTVOFsiWtdb12dRyf2s.roa (raw, json)
Hash identifier: IBZxEjRkZm301HrSdU03Wwy3wOcyJebQ/wzOrDmBPfk=
Subject key identifier: 8D:3A:EF:AD:8B:B4:69:35:4E:16:C8:96:B5:D6:F5:D9:D4:72:7F:6B
Certificate issuer: /CN=7485bd93bbaae9d7c973ab386872f1148bb258d1
Certificate serial: 018572BA59B6A2B50A5FBD5026D994FD4185
Authority key identifier: 74:85:BD:93:BB:AA:E9:D7:C9:73:AB:38:68:72:F1:14:8B:B2:58:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIW9k7uq6dfJc6s4aHLxFIuyWNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c2ef-e0ee-4dcf-9dd5-9c7fdbdad0db/1/jTrvrYu0aTVOFsiWtdb12dRyf2s.roa
Signing time: Mon 02 Jan 2023 13:44:53 +0000
ROA not before: Mon 02 Jan 2023 13:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208632
IP address blocks: 45.92.44.0/22 maxlen: 24
2a0e:1d40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:59:b6:a2:b5:0a:5f:bd:50:26:d9:94:fd:41:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7485bd93bbaae9d7c973ab386872f1148bb258d1
Validity
Not Before: Jan 2 13:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d3aefad8bb469354e16c896b5d6f5d9d4727f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:3e:61:14:a4:cb:a6:be:1e:62:a1:6f:20:
4e:65:4c:42:79:e2:11:0a:98:7e:4c:a3:62:5e:de:
e1:bb:25:5e:b8:d9:12:06:02:46:8d:7c:73:a9:8a:
06:1d:10:30:e5:9f:93:d7:66:a3:74:eb:99:56:c4:
8b:48:4c:af:c9:cb:98:b4:b9:9a:d3:8b:4e:d5:f3:
ef:a0:bc:06:c4:0f:dc:5f:8a:86:96:c8:48:ba:01:
e3:f4:93:b6:10:6c:ef:95:0e:7e:cd:50:0c:11:68:
90:db:1a:fc:7e:c5:04:9a:ac:13:6e:2b:2c:ca:8e:
f5:2a:2a:45:dd:2a:2a:ad:d7:3b:43:cf:a3:ff:11:
eb:20:6d:5b:33:8f:f3:76:58:15:ba:64:06:63:ce:
11:17:50:29:a7:89:e9:36:2e:8f:b9:bf:87:19:7e:
ec:17:27:69:b7:c1:02:32:d3:be:7b:ed:98:b1:4e:
cc:26:b7:89:16:3f:a8:5d:db:7b:cb:8d:69:5c:b3:
5a:64:c9:3b:b4:3e:ac:e4:96:d1:00:30:2e:a2:b8:
7d:d8:05:9b:87:17:25:bc:97:c0:d0:21:0e:03:ed:
c2:0a:c0:40:a6:ed:27:c6:1b:9a:04:fa:5a:df:9b:
67:56:55:43:50:5b:fc:00:73:0b:b1:09:1b:81:fd:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3A:EF:AD:8B:B4:69:35:4E:16:C8:96:B5:D6:F5:D9:D4:72:7F:6B
X509v3 Authority Key Identifier:
keyid:74:85:BD:93:BB:AA:E9:D7:C9:73:AB:38:68:72:F1:14:8B:B2:58:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIW9k7uq6dfJc6s4aHLxFIuyWNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c2ef-e0ee-4dcf-9dd5-9c7fdbdad0db/1/jTrvrYu0aTVOFsiWtdb12dRyf2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c2ef-e0ee-4dcf-9dd5-9c7fdbdad0db/1/dIW9k7uq6dfJc6s4aHLxFIuyWNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.44.0/22
IPv6:
2a0e:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
48:a4:6b:dc:de:3c:15:40:e6:b8:78:1a:c3:81:fc:98:46:10:
15:8a:91:e4:13:f0:22:97:33:4b:ec:82:eb:c7:d9:3a:4b:4a:
68:60:46:47:23:aa:4a:26:1d:b1:8c:92:82:79:65:6f:c9:d5:
0f:ec:6d:fe:4f:63:4b:80:f7:92:b4:9e:62:fe:b0:d6:ee:4f:
ce:c1:e6:ed:0f:14:7b:c5:c7:2f:af:0c:1e:1f:dc:d9:48:96:
66:ee:b7:0a:7f:1a:51:d2:6d:92:6d:a4:6f:38:73:4b:70:fe:
97:3a:82:9c:fb:4f:07:ef:50:d8:72:fb:8f:f7:a7:46:1d:b2:
3d:ac:83:31:b4:66:28:23:b3:a7:d0:df:fc:5f:1d:ff:09:16:
b6:5d:60:95:7c:32:78:d6:0a:26:48:a1:13:30:13:82:ab:52:
05:54:41:41:60:5b:a4:4b:90:70:80:67:54:42:e8:84:d6:99:
4e:de:a4:9a:82:17:d4:48:db:09:ca:93:93:91:54:eb:e5:1d:
92:d4:76:03:4a:d0:bb:fb:6a:c6:a3:cf:0e:9d:a6:93:f5:47:
48:4b:b9:0a:c1:cf:47:99:90:39:35:22:94:e1:c0:78:ea:76:
07:a3:e7:52:69:a3:3b:1e:b3:c5:ed:f0:4a:d2:fc:35:9f:9b:
61:94:61:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:08 2024 by rpki-client on console-fra.rpki-client.org