Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/7af521-48b0-4e8e-ac5f-bbb6fb695fb5/1/kGBvrAz7tDVgxyqtGKD2bFsWAM4.roa
File: kGBvrAz7tDVgxyqtGKD2bFsWAM4.roa (raw, json)
Hash identifier: ryj7ZJCF3XcImZFiRYNV/w8386TglrV5geK4N7EpWDk=
Subject key identifier: 90:60:6F:AC:0C:FB:B4:35:60:C7:2A:AD:18:A0:F6:6C:5B:16:00:CE
Certificate issuer: /CN=b459be8f9d068fae4140580498bcab6f21fb4cb5
Certificate serial: 076B2C53
Authority key identifier: B4:59:BE:8F:9D:06:8F:AE:41:40:58:04:98:BC:AB:6F:21:FB:4C:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFm-j50Gj65BQFgEmLyrbyH7TLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/7af521-48b0-4e8e-ac5f-bbb6fb695fb5/1/kGBvrAz7tDVgxyqtGKD2bFsWAM4.roa
Signing time: Sat 01 Jan 2022 07:00:40 +0000
ROA not before: Sat 01 Jan 2022 07:00:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205199
IP address blocks: 45.138.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124464211 (0x76b2c53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b459be8f9d068fae4140580498bcab6f21fb4cb5
Validity
Not Before: Jan 1 07:00:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90606fac0cfbb43560c72aad18a0f66c5b1600ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:82:41:08:02:fe:d8:62:33:02:8e:a0:e9:
2e:85:48:ba:0c:e0:c9:a9:7e:7c:0b:b7:3c:75:d0:
c8:9d:e7:7a:6d:03:0a:da:0a:c9:d3:65:24:28:56:
f0:8d:d7:59:77:1a:63:1b:9c:00:7a:4a:10:d7:7f:
c2:69:17:1c:60:1d:aa:a4:9b:de:f5:b5:b7:66:33:
ae:2b:f2:7b:95:33:e4:df:d7:7e:39:b4:a0:69:14:
4c:dc:63:fe:60:9e:84:40:12:3c:d4:0d:71:13:6d:
65:e2:80:7c:fb:33:d9:9b:f1:bc:44:d8:f8:ed:06:
b5:d4:fd:12:47:76:f3:6a:1f:1a:7c:bf:bc:69:33:
42:cf:8d:7d:80:a8:4a:47:d4:e9:46:ba:a3:49:16:
79:8a:92:71:b8:6f:87:06:87:fe:34:73:d6:76:47:
ac:16:9b:d3:95:9b:e1:d7:16:a3:09:00:d3:cb:3b:
f4:46:1e:46:26:6b:03:67:1f:20:c1:d1:18:0e:c9:
d3:17:64:5f:0d:7a:1a:23:5a:28:37:f8:9d:81:c2:
20:94:d1:f5:66:85:92:82:cf:e9:28:f8:8e:5f:b2:
b2:d9:0a:61:44:39:cf:65:9e:53:b1:69:d2:6c:57:
14:45:65:f4:89:02:be:d8:19:22:53:8e:d5:80:52:
e5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:60:6F:AC:0C:FB:B4:35:60:C7:2A:AD:18:A0:F6:6C:5B:16:00:CE
X509v3 Authority Key Identifier:
keyid:B4:59:BE:8F:9D:06:8F:AE:41:40:58:04:98:BC:AB:6F:21:FB:4C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFm-j50Gj65BQFgEmLyrbyH7TLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/7af521-48b0-4e8e-ac5f-bbb6fb695fb5/1/kGBvrAz7tDVgxyqtGKD2bFsWAM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/7af521-48b0-4e8e-ac5f-bbb6fb695fb5/1/tFm-j50Gj65BQFgEmLyrbyH7TLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.140.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:ad:f8:8a:54:89:8a:46:bb:25:c6:0a:a2:3f:1c:22:70:10:
66:e6:c2:01:e5:d1:1d:2f:33:74:8a:14:cf:60:af:2f:f1:cf:
1d:7e:74:49:ea:8d:c6:7d:a3:f8:6c:96:f5:f7:a6:eb:c7:f6:
c4:ea:10:90:bf:27:c5:9c:f1:8c:dd:05:7a:58:9b:78:63:33:
bc:d3:53:5e:5e:a4:4c:03:03:c9:a4:e1:80:55:f3:6b:9b:c0:
66:c0:9a:76:38:ef:76:e6:49:29:0e:74:f8:fe:b0:c4:21:c0:
ef:4b:a1:9f:de:9b:03:92:3b:a9:18:79:46:59:46:cc:68:e4:
06:33:9e:a2:43:fe:42:3b:66:fd:cd:df:97:0b:4b:d3:e0:56:
5c:3f:e1:a7:0f:6a:39:f6:34:d7:ee:d0:7d:0d:2a:fb:47:e3:
72:41:40:f4:41:9f:de:38:c3:9a:bb:43:5b:4d:9e:27:88:39:
73:3e:0e:c8:ce:15:db:11:a4:1c:cd:06:7e:6f:19:b9:d3:90:
0a:64:d6:40:c3:a7:3b:fb:74:92:76:f6:d7:8c:1e:60:3c:1c:
b9:56:0e:de:44:11:d4:9c:f4:12:6d:c4:6f:72:58:60:45:05:
83:f1:e3:5c:85:2b:5f:9d:04:40:3f:dc:4e:f5:10:b2:8a:b6:
11:25:bc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org