Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/EJkq6DSSpYFnfTWxwP96FLTMkhY.roa
File: EJkq6DSSpYFnfTWxwP96FLTMkhY.roa (raw, json)
Hash identifier: z55f8T1xe+5oWfKizXvIgYEjGYwBeoveCTnAXS8gjuk=
Subject key identifier: 10:99:2A:E8:34:92:A5:81:67:7D:35:B1:C0:FF:7A:14:B4:CC:92:16
Certificate issuer: /CN=d3202774b7de641d8ea18be56a75ff6098747618
Certificate serial: 018CC3B68CD6D035CC48266195008990A126
Authority key identifier: D3:20:27:74:B7:DE:64:1D:8E:A1:8B:E5:6A:75:FF:60:98:74:76:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yAndLfeZB2OoYvlanX_YJh0dhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/EJkq6DSSpYFnfTWxwP96FLTMkhY.roa
Signing time: Mon 01 Jan 2024 06:29:29 +0000
ROA not before: Mon 01 Jan 2024 06:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 109.95.124.0/22 maxlen: 28
45.150.56.0/24 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:8c:d6:d0:35:cc:48:26:61:95:00:89:90:a1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3202774b7de641d8ea18be56a75ff6098747618
Validity
Not Before: Jan 1 06:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10992ae83492a581677d35b1c0ff7a14b4cc9216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:52:57:e4:de:6a:10:a5:76:6f:f0:9a:f8:01:
0c:db:2c:20:01:3f:14:b4:b3:b7:30:d2:6f:00:a0:
9b:cc:65:da:ca:98:9e:e1:55:73:5e:87:47:a0:e9:
da:9f:eb:f7:15:6c:e4:97:fe:bc:2a:2d:09:77:30:
f2:0d:d4:91:a6:71:4c:1c:95:b9:0d:1c:b6:00:76:
37:ad:70:96:b4:2a:9e:eb:d1:52:4f:78:a4:36:c1:
4a:ba:b0:d5:c8:f9:95:ae:59:a2:9c:b0:ed:e5:89:
39:ef:cb:08:b5:24:7c:cd:b2:f0:3b:dc:14:b2:38:
86:8d:bf:bd:9b:5c:58:9a:4b:6c:73:a5:8a:c9:17:
38:0b:b3:60:e6:10:8f:f5:74:08:c6:6f:81:68:75:
48:1d:23:89:ac:0d:a2:be:4a:f3:54:83:26:34:10:
db:5c:4c:93:02:49:83:d0:79:59:54:89:81:96:42:
bb:31:b6:e8:84:4c:6e:66:5c:50:fa:13:aa:72:3c:
9a:db:20:a6:0c:31:2f:f8:42:b3:ca:4a:e9:f3:ef:
8a:2e:53:85:92:37:ab:af:e3:ff:88:f1:e5:0e:2d:
0f:f5:f8:65:a1:71:dd:f4:6d:2c:64:b6:24:20:0d:
e1:1f:a0:9b:76:61:78:f3:22:bc:d5:39:de:7c:ae:
92:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:99:2A:E8:34:92:A5:81:67:7D:35:B1:C0:FF:7A:14:B4:CC:92:16
X509v3 Authority Key Identifier:
keyid:D3:20:27:74:B7:DE:64:1D:8E:A1:8B:E5:6A:75:FF:60:98:74:76:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yAndLfeZB2OoYvlanX_YJh0dhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/EJkq6DSSpYFnfTWxwP96FLTMkhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/0yAndLfeZB2OoYvlanX_YJh0dhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.56.0/24
109.95.124.0/22
Signature Algorithm: sha256WithRSAEncryption
37:70:9e:df:0c:a5:c4:1b:a5:e6:37:6a:e7:7d:f7:de:a9:0a:
2b:bf:f0:33:32:85:c9:26:6c:61:b9:bd:f1:97:34:ee:79:24:
16:5a:26:7a:41:a4:3c:f5:cf:91:30:fc:22:f9:f6:5a:b3:1e:
9a:2e:fd:32:9d:bf:24:b6:f3:ab:14:89:4f:b8:fc:87:da:f4:
30:75:61:37:6a:d3:f8:30:e5:b1:7c:a1:e5:47:69:22:91:ae:
32:89:21:4d:47:c1:c5:3e:20:c0:d7:e8:6f:5f:6c:06:a0:31:
8d:76:23:05:c4:ee:14:be:f6:56:55:e8:a6:06:41:a2:bd:aa:
d4:54:be:e1:16:da:06:36:0f:d2:56:ca:4e:92:15:39:9d:df:
cb:c1:64:b8:ee:33:38:42:b6:4d:0c:3a:b5:7b:6c:4a:f4:14:
21:11:ee:f8:2e:d1:3f:7a:b0:49:24:33:fe:a6:63:1a:6f:8f:
cc:5b:81:1f:b9:51:8d:d6:3a:1a:f0:61:47:dc:34:86:bc:02:
c3:64:74:33:85:5a:79:4c:4a:25:41:11:df:37:73:82:34:d8:
49:37:3e:15:27:9c:76:41:52:4d:fa:46:7d:f0:bb:40:ea:0e:
9e:ce:03:35:59:da:84:03:30:f8:71:5c:42:64:b6:19:c4:11:
75:be:86:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:21 2024 by rpki-client on console-ams.rpki-client.org