Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/729034-0cea-44f8-9f30-0d5eb3d609ea/1/pxi2jUPsNyEkJ0cJebhd1kz4WqE.roa
File: pxi2jUPsNyEkJ0cJebhd1kz4WqE.roa (raw, json)
Hash identifier: ZLN7i9mMeo8lao/eacQjySiuO+NeERDjDCUmJF+uZh8=
Subject key identifier: A7:18:B6:8D:43:EC:37:21:24:27:47:09:79:B8:5D:D6:4C:F8:5A:A1
Certificate issuer: /CN=85972a0487d95cc1bfe1da6d1a27b89d1d3576d6
Certificate serial: 046DEA29
Authority key identifier: 85:97:2A:04:87:D9:5C:C1:BF:E1:DA:6D:1A:27:B8:9D:1D:35:76:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZcqBIfZXMG_4dptGie4nR01dtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/729034-0cea-44f8-9f30-0d5eb3d609ea/1/pxi2jUPsNyEkJ0cJebhd1kz4WqE.roa
Signing time: Tue 07 Jun 2022 13:52:03 +0000
ROA not before: Tue 07 Jun 2022 13:52:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.95.232.0/24 maxlen: 24
45.95.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74312233 (0x46dea29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85972a0487d95cc1bfe1da6d1a27b89d1d3576d6
Validity
Not Before: Jun 7 13:52:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a718b68d43ec37212427470979b85dd64cf85aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a5:a8:b7:02:6f:72:56:8b:90:07:29:ed:55:
d1:20:95:03:ca:71:41:cb:57:f4:94:b9:02:d1:30:
ac:a7:db:8b:71:23:75:17:14:6d:81:42:5e:69:28:
fa:6f:c3:89:72:6b:5e:02:d3:e0:07:c4:d5:da:53:
38:22:23:70:e6:9e:fd:bb:0f:48:a1:c7:ba:2e:52:
85:7a:89:cf:da:62:9d:ab:01:cc:6d:48:65:c8:f9:
1b:db:4c:53:48:c5:d4:9e:e0:ae:07:d4:92:bd:92:
42:f9:04:06:71:64:b6:93:b4:cc:bd:95:d3:f5:7f:
e2:7b:f4:9e:1a:49:ae:02:2c:d1:b4:ee:b8:f5:62:
b8:1a:fb:ce:28:7c:6f:1a:84:76:49:15:a0:3f:38:
26:7c:e6:af:2b:ff:fc:35:0a:ef:34:95:09:6c:6e:
a5:9e:96:b1:11:cd:85:72:f2:5f:6e:38:ce:e3:8b:
7e:5c:bf:37:3a:cc:bf:9f:ce:48:7e:3a:c2:ab:b7:
58:09:ca:be:5a:65:65:2d:31:14:33:eb:7e:0f:e6:
93:19:f8:c6:c5:8c:72:5a:61:c9:29:14:85:2f:aa:
4a:2f:4c:cc:0d:81:06:91:17:12:10:90:37:b2:9b:
3c:c3:17:76:53:65:fb:78:6e:cd:77:3a:9f:2e:d8:
61:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:18:B6:8D:43:EC:37:21:24:27:47:09:79:B8:5D:D6:4C:F8:5A:A1
X509v3 Authority Key Identifier:
keyid:85:97:2A:04:87:D9:5C:C1:BF:E1:DA:6D:1A:27:B8:9D:1D:35:76:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZcqBIfZXMG_4dptGie4nR01dtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/729034-0cea-44f8-9f30-0d5eb3d609ea/1/pxi2jUPsNyEkJ0cJebhd1kz4WqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/729034-0cea-44f8-9f30-0d5eb3d609ea/1/hZcqBIfZXMG_4dptGie4nR01dtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.232.0/24
45.95.234.0/24
Signature Algorithm: sha256WithRSAEncryption
04:9c:e0:a3:a4:14:f8:61:e5:d9:f3:e9:9e:9d:82:6b:8a:a2:
57:f3:43:50:88:ce:f7:5c:19:fe:6b:df:ee:99:c1:c2:59:17:
fc:ce:ea:62:39:49:ac:e3:bf:9f:8c:b1:b6:96:24:3a:4f:9a:
ec:f9:5a:5f:07:e0:e7:5a:ff:c6:e3:38:f5:22:bf:c9:8e:90:
1a:f5:03:85:ec:c7:c3:a7:5f:3c:c6:ef:b1:31:b8:80:7f:a7:
ee:ef:cf:f8:e8:b5:ca:29:01:b2:1f:17:03:24:e3:82:b4:f8:
21:d2:78:ab:54:e4:05:ab:79:79:7b:f4:83:d8:b2:49:f8:d4:
00:d8:f8:42:46:eb:c9:29:6b:23:b6:c3:ec:85:6f:97:93:f2:
d6:ad:a6:56:d5:5a:03:9f:7f:57:38:56:59:aa:ac:c7:a7:1b:
6a:a5:d8:67:f0:a8:24:74:b7:df:5f:6a:ab:f3:e6:a4:36:10:
e0:0a:77:67:3d:2c:d0:54:59:43:88:85:e7:f1:b1:f4:d4:87:
ad:8c:ef:31:02:8e:90:2f:bf:30:07:03:be:0c:1b:73:06:88:
40:63:aa:71:00:1c:1a:39:13:66:67:35:8c:35:d6:4a:83:c8:
87:b7:e6:c1:f7:83:68:9b:c0:b2:aa:c8:0c:f8:e1:c3:24:17:
27:cb:b7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:55 2024 by rpki-client on console-fra.rpki-client.org