Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5b2fd4-f5c5-4e0c-98e8-e17073d3623d/1/TvEhBRpfzMCfISEbTcciSxVBKjY.roa
File: TvEhBRpfzMCfISEbTcciSxVBKjY.roa (raw, json)
Hash identifier: 2dXuH9wJdnk4Urh/fIXkVrnf0ksrzPxbt3yWi3MA0jg=
Subject key identifier: 4E:F1:21:05:1A:5F:CC:C0:9F:21:21:1B:4D:C7:22:4B:15:41:2A:36
Certificate issuer: /CN=37529d57a6db1ec827cbae446ad39f39d1a519da
Certificate serial: 018456E2A168C52F7140F727F9BA26032973
Authority key identifier: 37:52:9D:57:A6:DB:1E:C8:27:CB:AE:44:6A:D3:9F:39:D1:A5:19:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1KdV6bbHsgny65EatOfOdGlGdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5b2fd4-f5c5-4e0c-98e8-e17073d3623d/1/TvEhBRpfzMCfISEbTcciSxVBKjY.roa
Signing time: Tue 08 Nov 2022 10:56:43 +0000
ROA not before: Tue 08 Nov 2022 10:56:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 45.129.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:e2:a1:68:c5:2f:71:40:f7:27:f9:ba:26:03:29:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37529d57a6db1ec827cbae446ad39f39d1a519da
Validity
Not Before: Nov 8 10:56:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ef121051a5fccc09f21211b4dc7224b15412a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ee:47:c3:cc:7a:bc:ac:99:b2:f4:e9:05:25:
26:af:22:87:d9:24:9f:fa:5e:f9:10:95:70:3f:d2:
19:a3:15:d0:c3:03:28:2b:1a:11:59:ff:06:94:48:
00:e1:1f:fb:ae:26:26:9e:d0:d9:9e:c5:a4:7f:b3:
10:7e:0b:7a:ae:aa:05:ef:f5:cf:d6:60:1d:f1:1f:
08:b2:41:64:ae:fe:e5:50:c5:5a:a1:bb:c3:39:67:
d9:66:34:32:7e:dd:28:71:ca:63:88:36:83:a9:ca:
2b:55:98:41:50:ce:82:3e:6d:44:58:c9:56:a0:48:
64:ac:6c:05:f1:c5:3f:ba:ee:da:25:16:f4:cd:9d:
7c:c3:97:10:86:5b:ae:af:00:53:ae:99:7f:2f:d2:
60:c0:d4:b0:70:4a:da:90:7b:0a:13:5f:c4:9a:5e:
56:39:aa:6b:61:c3:6d:ce:ff:97:57:87:09:17:c1:
63:ba:23:7d:1c:43:a8:c5:4e:00:35:89:88:e7:18:
4d:c4:6b:fb:6b:86:75:84:83:d4:93:68:e2:fd:b2:
e7:0c:bf:42:11:fa:00:e4:b6:73:52:7b:e4:bd:f1:
04:a9:54:a7:be:91:4a:5f:81:a4:11:94:e0:dd:91:
ab:27:a6:42:6a:51:72:7a:27:13:cf:b3:c6:25:b7:
d9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F1:21:05:1A:5F:CC:C0:9F:21:21:1B:4D:C7:22:4B:15:41:2A:36
X509v3 Authority Key Identifier:
keyid:37:52:9D:57:A6:DB:1E:C8:27:CB:AE:44:6A:D3:9F:39:D1:A5:19:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1KdV6bbHsgny65EatOfOdGlGdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b2fd4-f5c5-4e0c-98e8-e17073d3623d/1/TvEhBRpfzMCfISEbTcciSxVBKjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b2fd4-f5c5-4e0c-98e8-e17073d3623d/1/N1KdV6bbHsgny65EatOfOdGlGdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.84.0/22
Signature Algorithm: sha256WithRSAEncryption
33:71:f9:f7:c8:98:2c:73:f8:48:b1:f4:76:e5:96:f9:e8:f7:
d0:0b:5e:32:ed:ef:33:f0:20:f1:e6:05:a2:bd:31:81:20:51:
93:3b:16:33:0a:7e:57:e3:ee:b8:cd:29:01:fc:23:d8:0c:83:
88:82:54:e6:b6:1d:d7:a2:86:1b:1d:9c:b5:52:a3:d2:f0:49:
35:c6:2c:16:dd:c0:ca:c1:54:06:3b:c5:10:a8:2c:40:90:77:
b5:f8:33:d5:3a:a8:97:df:10:6f:2a:de:7f:4e:1a:4f:c9:89:
88:da:f5:af:29:70:d4:21:70:c9:b8:f7:f9:08:c6:04:48:29:
12:cd:4b:c6:4d:9f:a7:4e:e4:30:5a:f8:23:85:30:7b:54:ca:
50:ee:67:c6:09:84:5e:b0:6a:97:85:1a:68:cc:25:74:06:82:
af:07:3e:7c:25:58:fd:52:42:96:b2:fb:ba:e8:ab:e8:32:6c:
a7:b9:4b:b7:1c:02:9c:c9:77:8e:51:a8:60:5e:cc:fc:9c:d5:
70:72:28:d7:a1:52:c6:5a:40:b8:5d:78:ea:79:3f:f1:36:0a:
56:26:f3:9f:65:52:b7:7f:53:8b:e8:ff:a4:48:84:b6:57:67:
b8:f6:be:47:4d:59:e6:ed:7b:74:9f:67:d9:64:87:c9:0c:80:
51:71:37:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:51 2024 by rpki-client on console-fra.rpki-client.org