Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/00f6dc-b91d-44a4-967a-f3efaf5f1f87/1/SjuKEtfDB-2qqwAWl-UmJZ9SDRs.roa
File: SjuKEtfDB-2qqwAWl-UmJZ9SDRs.roa (raw, json)
Hash identifier: remBANZZwlFHE6fxZyQE3TA3IcQ1zSsesijjYvcHAMQ=
Subject key identifier: 4A:3B:8A:12:D7:C3:07:ED:AA:AB:00:16:97:E5:26:25:9F:52:0D:1B
Certificate issuer: /CN=936519b2e90dcc6f366210144140011786f7ac2e
Certificate serial: 01857203591F730F1DF6DE0B0AC530CC5D02
Authority key identifier: 93:65:19:B2:E9:0D:CC:6F:36:62:10:14:41:40:01:17:86:F7:AC:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2UZsukNzG82YhAUQUABF4b3rC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/00f6dc-b91d-44a4-967a-f3efaf5f1f87/1/SjuKEtfDB-2qqwAWl-UmJZ9SDRs.roa
Signing time: Mon 02 Jan 2023 10:25:00 +0000
ROA not before: Mon 02 Jan 2023 10:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47730
IP address blocks: 45.148.160.0/24 maxlen: 24
45.148.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:59:1f:73:0f:1d:f6:de:0b:0a:c5:30:cc:5d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=936519b2e90dcc6f366210144140011786f7ac2e
Validity
Not Before: Jan 2 10:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a3b8a12d7c307edaaab001697e526259f520d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5c:ff:b5:04:bd:8b:16:fe:81:46:03:e8:3b:
47:2c:3b:50:55:b7:1b:42:b2:83:6c:6e:14:38:34:
3d:9f:ba:3a:a1:4c:d1:b0:fd:ad:ea:47:8e:80:87:
39:b5:be:9f:21:e4:1f:b5:88:f8:45:f2:f0:a1:f8:
0e:8b:88:19:ad:aa:eb:2b:8c:fd:63:e9:ba:d6:19:
0a:71:62:0c:7c:08:0e:1d:72:dc:20:29:7b:a8:e9:
a5:46:29:8d:1c:31:cf:af:f5:08:23:a8:c3:4a:99:
d6:b5:2c:36:ff:ec:d7:f1:f9:7d:da:76:15:a5:2d:
eb:34:cd:10:0c:87:7e:b7:49:cd:e5:f6:98:e4:89:
ea:35:0f:99:39:c0:b9:75:0e:b2:21:7e:f7:9a:df:
8e:10:b2:b5:c5:e9:52:53:37:4f:02:35:02:61:2d:
a3:c7:9f:40:5e:58:e6:db:4f:74:73:52:15:7e:d7:
b4:fd:cd:52:5f:e8:38:cb:05:c9:4a:12:f7:aa:c5:
33:60:47:a7:96:0d:62:27:ca:44:d9:2b:c0:ef:29:
f6:98:8f:40:68:da:c9:69:53:da:12:85:8c:51:b6:
5c:5a:05:79:13:cb:dd:05:fe:81:19:35:4a:95:ab:
8b:34:3c:9f:70:e3:12:8d:8c:74:28:c3:50:03:73:
f7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3B:8A:12:D7:C3:07:ED:AA:AB:00:16:97:E5:26:25:9F:52:0D:1B
X509v3 Authority Key Identifier:
keyid:93:65:19:B2:E9:0D:CC:6F:36:62:10:14:41:40:01:17:86:F7:AC:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2UZsukNzG82YhAUQUABF4b3rC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/00f6dc-b91d-44a4-967a-f3efaf5f1f87/1/SjuKEtfDB-2qqwAWl-UmJZ9SDRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/00f6dc-b91d-44a4-967a-f3efaf5f1f87/1/k2UZsukNzG82YhAUQUABF4b3rC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.160.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:14:68:6c:c9:23:13:11:15:1c:66:e7:db:f3:f4:25:aa:67:
88:d8:45:52:2f:03:8a:ac:ec:03:df:f5:01:49:c6:da:c9:6c:
04:4a:50:79:0a:7c:73:43:4e:db:92:d2:dc:d7:5c:cc:96:42:
45:c3:14:e8:f1:14:e3:a3:ea:9e:ba:61:10:89:db:4b:55:02:
c5:49:a1:8d:95:b2:40:f8:76:66:3e:95:c3:5b:71:d3:e6:ed:
8f:92:4f:27:68:3a:1d:28:16:0c:83:4f:c7:5c:aa:1f:55:0c:
18:ec:ed:d5:e9:38:9f:de:e1:f6:ff:46:bb:21:6e:2b:44:2a:
c3:f9:00:d3:55:21:cc:72:77:0f:ee:57:e2:01:19:f5:b7:88:
46:04:f5:5d:ae:96:a7:cd:3d:f4:05:6c:72:61:9f:62:a7:c6:
03:60:77:72:02:b0:c3:4f:6f:c9:0c:ae:f4:57:28:0f:9b:5a:
82:d8:10:38:13:53:8d:82:9f:c0:d0:3d:9e:dc:26:7b:ec:4a:
be:18:c5:0e:62:af:3c:66:a4:b2:5b:9a:71:44:0b:7f:db:cf:
54:2f:f2:97:d0:e4:9d:a8:c1:e3:99:8a:84:9d:e3:11:17:f0:
13:1f:9f:4e:e8:9e:ba:96:13:b2:e8:f1:3c:ec:46:19:e9:4f:
25:9f:6e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:53 2024 by rpki-client on console-fra.rpki-client.org