Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ef3216-a310-469c-b3a8-2382e7ba72d8/1/1-K5MHA64Kequq-vavhHBeHXQB6U.roa
File: 1-K5MHA64Kequq-vavhHBeHXQB6U.roa (raw, json)
Hash identifier: P9MPVlJCPIQRMHPvhMOrgPCWU+2ip17XWyTq6o+pBW4=
Subject key identifier: F8:AE:4C:1C:0E:B8:29:EA:AE:AB:EB:DA:BE:11:C1:78:75:D0:07:A5
Certificate issuer: /CN=8d3458adcba08a1cd0ebf1b13b45a0bfac87d7d4
Certificate serial: 07345ABF
Authority key identifier: 8D:34:58:AD:CB:A0:8A:1C:D0:EB:F1:B1:3B:45:A0:BF:AC:87:D7:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTRYrcugihzQ6_GxO0Wgv6yH19Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ef3216-a310-469c-b3a8-2382e7ba72d8/1/1-K5MHA64Kequq-vavhHBeHXQB6U.roa
Signing time: Sat 01 Jan 2022 09:59:01 +0000
ROA not before: Sat 01 Jan 2022 09:59:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44285
IP address blocks: 45.156.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120871615 (0x7345abf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3458adcba08a1cd0ebf1b13b45a0bfac87d7d4
Validity
Not Before: Jan 1 09:59:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8ae4c1c0eb829eaaeabebdabe11c17875d007a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cf:d4:8f:15:d0:78:f5:89:b6:99:a9:cf:bf:
df:15:c3:0a:96:98:41:e4:d7:06:0f:78:df:bd:ed:
e2:42:71:0e:82:b0:3d:8e:10:4c:8c:9f:35:70:ad:
e4:ad:40:d9:f8:bb:b9:05:94:f7:0e:8e:92:98:40:
85:cd:af:9d:b6:23:2a:16:68:85:f1:96:e7:cc:66:
d7:47:6c:39:07:65:6b:ab:a4:62:e0:c4:f3:44:b6:
4b:14:f9:98:2f:ec:bf:c2:39:83:aa:ba:e7:19:2c:
79:df:55:99:97:b1:96:5c:8d:f0:87:7f:4c:a8:b8:
1f:12:b8:a6:23:31:cd:de:51:26:87:4b:d4:6f:8b:
b5:6a:c3:27:91:8d:5e:10:2d:ae:db:bd:03:83:87:
05:81:56:ba:36:b4:6a:d5:d2:ea:30:64:8b:ae:9e:
79:c3:dc:7e:66:cc:2d:43:b3:5c:35:09:a2:69:29:
ad:d2:ea:67:e8:fa:48:46:e2:06:77:d4:84:87:53:
e2:dd:b5:bd:95:11:be:52:64:a1:15:b3:2f:c1:29:
86:a1:6b:9c:e4:59:9e:0b:13:de:b5:53:1e:00:6b:
0f:45:12:41:93:ba:ba:2f:e9:49:4e:8c:91:97:47:
b3:5c:f5:e3:c1:be:7f:06:0a:20:dd:8d:da:66:7c:
02:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AE:4C:1C:0E:B8:29:EA:AE:AB:EB:DA:BE:11:C1:78:75:D0:07:A5
X509v3 Authority Key Identifier:
keyid:8D:34:58:AD:CB:A0:8A:1C:D0:EB:F1:B1:3B:45:A0:BF:AC:87:D7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTRYrcugihzQ6_GxO0Wgv6yH19Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ef3216-a310-469c-b3a8-2382e7ba72d8/1/1-K5MHA64Kequq-vavhHBeHXQB6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ef3216-a310-469c-b3a8-2382e7ba72d8/1/jTRYrcugihzQ6_GxO0Wgv6yH19Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.192.0/22
Signature Algorithm: sha256WithRSAEncryption
11:6d:86:4d:28:31:8b:47:ce:2d:db:03:b9:ef:59:0a:43:80:
8f:e6:1c:4c:3b:8e:4d:ba:e5:8c:af:67:0e:e3:75:0c:54:4a:
2a:76:fb:c7:6a:c4:16:20:08:f8:96:6b:cf:7c:20:2b:51:92:
44:a9:95:86:5e:f5:91:61:e5:37:f3:f2:b1:f3:b7:4b:cb:06:
6f:fe:aa:7f:a4:7b:07:9b:aa:8f:72:7c:20:d4:e3:4d:18:d7:
1d:d2:9e:e3:19:83:e9:20:42:72:02:7d:bf:29:93:ac:b9:3a:
fa:84:b5:6a:10:6e:54:90:ba:95:34:02:77:e7:7a:38:4d:c7:
22:21:5a:60:dc:b9:10:2f:fc:9c:f7:d3:d4:90:96:48:94:cb:
e6:75:30:6d:6f:44:6c:b1:8b:75:9e:64:c6:83:13:09:02:a3:
ed:a1:30:b9:ea:ca:43:ec:d1:71:4a:75:92:1e:62:cd:9c:71:
85:58:16:17:c8:40:ca:62:f2:0f:da:91:bf:8d:1d:fb:d4:42:
ea:7c:c9:98:c8:f3:9d:1c:b4:bc:58:33:a7:97:0c:fd:3f:7e:
07:ce:8b:78:a7:71:1b:4d:6d:c7:4e:b2:75:84:7b:15:3f:9e:
d9:21:04:cf:3b:7d:2b:ef:21:51:87:b8:a1:35:ad:17:ab:cd:
dd:e9:b6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:45 2024 by rpki-client on console-fra.rpki-client.org