Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/abc38c-57fb-448e-b603-8df20f87e77f/1/5jv-GgwAjlZyxyBZL7WDuWpEIzg.roa
File: 5jv-GgwAjlZyxyBZL7WDuWpEIzg.roa (raw, json)
Hash identifier: a5Khs50n55PnGaw6NvCTWeORNJxmOuezMKDlKuw1IS4=
Subject key identifier: E6:3B:FE:1A:0C:00:8E:56:72:C7:20:59:2F:B5:83:B9:6A:44:23:38
Certificate issuer: /CN=a8122b9475d69daa928a5bdf1e4abd5e3900e4b3
Certificate serial: 018CC56DE993E43992D1FDBE8C51CB221399
Authority key identifier: A8:12:2B:94:75:D6:9D:AA:92:8A:5B:DF:1E:4A:BD:5E:39:00:E4:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBIrlHXWnaqSilvfHkq9XjkA5LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/abc38c-57fb-448e-b603-8df20f87e77f/1/5jv-GgwAjlZyxyBZL7WDuWpEIzg.roa
Signing time: Mon 01 Jan 2024 14:29:23 +0000
ROA not before: Mon 01 Jan 2024 14:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15404
IP address blocks: 45.134.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e9:93:e4:39:92:d1:fd:be:8c:51:cb:22:13:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8122b9475d69daa928a5bdf1e4abd5e3900e4b3
Validity
Not Before: Jan 1 14:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e63bfe1a0c008e5672c720592fb583b96a442338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:63:62:66:06:f5:63:8b:fc:7b:59:0e:80:2f:
99:f6:c3:c2:a0:b3:16:9c:69:16:8b:05:0c:9d:af:
b6:45:65:e6:ff:fe:9f:80:59:19:0d:ba:41:49:2f:
d9:c8:6b:fe:a5:84:1f:42:73:9b:d7:d3:32:d8:8f:
4e:9c:14:42:01:80:cf:37:20:bb:2c:ab:12:28:63:
6b:a0:c9:83:19:43:ca:31:a5:1f:10:56:90:5f:cb:
73:d5:68:a0:cb:14:80:d2:2e:68:3c:fb:6b:e2:99:
82:7c:07:a5:86:83:11:dc:98:8e:00:6e:05:0a:6c:
be:34:fc:f6:7c:91:95:b5:c4:e5:27:bc:11:1b:67:
6a:f9:b0:0a:7c:3c:0f:f2:5e:79:e3:4e:0b:9f:d9:
21:6c:38:82:e4:f8:e0:c4:c1:7e:ef:ea:7b:d5:e0:
12:ff:d2:21:76:30:1e:21:ef:64:31:08:52:ae:de:
58:06:49:9d:fe:a4:79:49:47:2a:ad:e7:ec:3e:c7:
e9:63:e0:cd:e6:64:20:9e:a2:81:8f:3c:5a:f2:90:
3d:52:27:df:d4:b7:55:30:e1:b2:0b:35:22:06:05:
75:a7:ce:0c:bf:28:1a:53:b1:1d:38:e2:20:ee:3f:
72:d8:3e:a0:56:19:a6:45:d2:2d:42:9c:ac:b5:d8:
de:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3B:FE:1A:0C:00:8E:56:72:C7:20:59:2F:B5:83:B9:6A:44:23:38
X509v3 Authority Key Identifier:
keyid:A8:12:2B:94:75:D6:9D:AA:92:8A:5B:DF:1E:4A:BD:5E:39:00:E4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBIrlHXWnaqSilvfHkq9XjkA5LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/abc38c-57fb-448e-b603-8df20f87e77f/1/5jv-GgwAjlZyxyBZL7WDuWpEIzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/abc38c-57fb-448e-b603-8df20f87e77f/1/qBIrlHXWnaqSilvfHkq9XjkA5LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.96.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:d7:b5:d6:a5:fc:a4:00:1c:57:9a:97:c0:ba:50:4e:50:0b:
8f:b0:8d:03:76:bc:b6:6a:94:5d:cc:96:03:df:0d:bf:f6:61:
73:51:20:a7:17:b2:8d:44:54:a6:1a:50:a4:ea:d8:d7:1f:49:
d1:2b:b8:bc:d5:46:bc:77:bf:ee:9e:47:fe:87:72:b9:99:e2:
49:3c:a0:7b:e3:73:65:00:b7:61:6a:45:40:dc:7c:ea:df:ea:
dc:2d:fd:16:a3:39:5c:4b:19:a5:bd:c0:52:06:1e:b1:ef:e7:
c6:ad:11:16:fe:78:bb:21:ec:a7:71:87:3d:7c:6a:61:26:07:
66:13:32:5d:6a:5f:4f:0b:67:f4:bb:d9:b0:64:6e:cc:fa:a0:
8e:3a:a7:4c:7b:69:38:d9:8d:cf:b6:5b:3d:5c:f3:87:08:73:
01:7e:e1:06:a0:fc:92:f6:be:68:6c:6b:85:25:4f:98:50:48:
f8:a2:ee:18:54:6b:67:f8:5a:07:1e:47:67:0c:a7:8e:36:44:
a0:80:a2:8c:a7:4c:17:40:09:6d:31:c1:cf:f9:73:36:44:91:
7d:94:e7:36:fe:44:d4:85:f9:39:4e:25:fd:af:d5:fc:f9:ad:
8d:bf:32:be:dd:c1:71:8c:9b:7e:f5:2f:e3:4e:4c:ff:86:15:
0c:cc:73:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 10:17:14 2024 by rpki-client on console-fra.rpki-client.org