Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/EQTEd3836HA2DHr3Xw_Qnakq5Yw.roa
File: EQTEd3836HA2DHr3Xw_Qnakq5Yw.roa (raw, json)
Hash identifier: tH390CCu5p9hc+pfgOotZTVgf0MUnU5264MB3k77PKU=
Subject key identifier: 11:04:C4:77:7F:37:E8:70:36:0C:7A:F7:5F:0F:D0:9D:A9:2A:E5:8C
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 018269A2F421FBFCF039AA3D745A8DBFAA9B
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/EQTEd3836HA2DHr3Xw_Qnakq5Yw.roa
Signing time: Thu 04 Aug 2022 16:14:23 +0000
ROA not before: Thu 04 Aug 2022 16:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 45.8.216.0/24 maxlen: 24
45.8.218.0/24 maxlen: 24
45.8.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:69:a2:f4:21:fb:fc:f0:39:aa:3d:74:5a:8d:bf:aa:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Aug 4 16:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1104c4777f37e870360c7af75f0fd09da92ae58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:2c:af:71:3c:32:de:f2:ae:71:af:f0:20:
fd:91:63:77:0b:32:88:bd:d2:29:66:7a:70:8c:22:
d4:42:fa:17:05:fd:24:b2:7a:07:ed:d6:02:80:98:
6b:17:20:26:99:d4:a9:8f:3e:01:ae:16:55:05:c1:
8e:35:16:9b:43:a3:72:7f:38:cc:96:b0:cc:f7:3d:
e0:79:37:a9:ee:29:23:d4:36:a2:a7:53:53:98:7e:
ff:a8:ae:84:e5:ac:91:fa:59:cb:6b:31:9c:05:cb:
c7:a9:88:08:fe:98:17:45:89:3d:41:2e:fb:88:4d:
ae:e2:8f:9f:7f:be:da:a5:bb:9c:22:ba:e7:b5:a8:
b2:54:9b:0a:bc:2d:b6:99:e7:71:97:60:46:5e:22:
f4:0b:49:0e:3b:0c:dd:df:b8:ee:d2:d9:0d:74:37:
f6:c5:a3:3b:c4:47:a4:d6:71:69:d1:0e:25:e7:48:
02:64:3e:17:95:bf:ca:b9:6c:82:a1:2a:4e:f8:f4:
a6:5b:14:7c:27:94:4a:f7:4d:65:a1:b2:2c:14:74:
e2:5b:6b:51:b5:ab:e7:4d:d4:e0:77:7b:2a:01:79:
07:fb:30:50:79:d1:b0:60:bd:43:a3:ad:d0:03:3a:
2c:eb:ba:71:a9:85:34:85:1c:f8:17:29:a7:ef:d6:
39:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:04:C4:77:7F:37:E8:70:36:0C:7A:F7:5F:0F:D0:9D:A9:2A:E5:8C
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/EQTEd3836HA2DHr3Xw_Qnakq5Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.216.0/24
45.8.218.0/23
Signature Algorithm: sha256WithRSAEncryption
52:2c:fd:7b:97:fc:de:4e:1d:9d:c3:0b:3f:1e:98:78:2b:6b:
a1:9f:ec:cd:c2:f0:24:bd:b0:2a:ed:07:9d:11:c3:74:22:fb:
af:8b:2b:33:a2:16:f4:29:ee:3a:c2:8e:ec:b8:8a:c4:7f:86:
48:a4:cd:26:ab:18:50:14:1e:fa:30:ff:62:50:26:fa:f1:6e:
62:11:4d:9d:ed:48:9f:0f:fe:3f:1c:5b:7c:c2:cc:ed:39:55:
cf:b1:df:0f:27:ce:29:23:52:d9:78:da:48:d6:7b:3c:7b:ca:
37:d4:cc:af:9d:01:d3:63:c6:bd:5d:5f:05:82:8d:43:ce:91:
4a:46:2c:36:da:3d:de:68:a6:d1:d6:83:2c:4a:19:2a:dc:80:
a3:f9:b4:bd:60:e6:6f:1d:93:9a:9d:4b:f2:a5:94:54:89:e0:
b1:db:49:db:3a:53:2b:3f:0e:72:23:f6:9d:28:77:df:11:1f:
2b:00:45:7b:29:f4:3a:a7:6d:83:a1:d9:1c:a1:28:78:3f:2c:
85:a2:24:89:7c:09:ad:7b:a0:97:a9:eb:e9:da:64:97:66:1b:
82:4d:9f:03:00:d1:5f:78:a2:ec:de:e1:e8:be:a7:9e:f9:45:
ce:26:32:48:f7:38:69:cf:60:92:fc:ad:5c:14:99:b8:58:65:
dc:32:8e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:42 2024 by rpki-client on console-fra.rpki-client.org