Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5b2fd4-f5c5-4e0c-98e8-e17073d3623d/1/h4PAEE1rQQ28vHsTGhdMB7JEZYM.roa
File: h4PAEE1rQQ28vHsTGhdMB7JEZYM.roa (raw, json)
Hash identifier: dLnHU77lJFpR4YaFfASTebhbv/PtYVuszs6wUXCMBd4=
Subject key identifier: 87:83:C0:10:4D:6B:41:0D:BC:BC:7B:13:1A:17:4C:07:B2:44:65:83
Certificate issuer: /CN=37529d57a6db1ec827cbae446ad39f39d1a519da
Certificate serial: 0183E647904A99B07E774BCBCB2288C2F945
Authority key identifier: 37:52:9D:57:A6:DB:1E:C8:27:CB:AE:44:6A:D3:9F:39:D1:A5:19:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1KdV6bbHsgny65EatOfOdGlGdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5b2fd4-f5c5-4e0c-98e8-e17073d3623d/1/h4PAEE1rQQ28vHsTGhdMB7JEZYM.roa
Signing time: Mon 17 Oct 2022 14:09:53 +0000
ROA not before: Mon 17 Oct 2022 14:09:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22653
IP address blocks: 45.129.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e6:47:90:4a:99:b0:7e:77:4b:cb:cb:22:88:c2:f9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37529d57a6db1ec827cbae446ad39f39d1a519da
Validity
Not Before: Oct 17 14:09:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8783c0104d6b410dbcbc7b131a174c07b2446583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bf:30:59:ad:ef:eb:bc:de:13:b5:61:66:da:
12:86:33:89:6b:39:7d:ba:44:46:14:7e:07:fd:ec:
c4:31:b1:5d:34:4e:0f:9a:13:48:72:ca:1e:79:65:
26:17:61:88:7b:ce:ac:41:c5:a1:60:2a:0d:b7:c1:
a7:21:e0:6d:fa:60:49:2e:54:33:ff:b9:3e:03:c8:
ed:da:67:dc:d3:3c:06:22:20:5a:77:15:49:95:50:
5a:51:42:db:18:38:02:1f:7f:6b:cc:bf:42:85:7e:
33:dd:f9:6f:a1:ab:da:3d:65:0c:7d:1d:88:1d:91:
28:cd:41:40:98:64:70:7f:28:53:3a:3d:4e:99:1a:
4e:48:6b:3e:cf:94:5f:1c:a0:08:5e:c4:02:c0:15:
8e:c7:69:94:69:86:81:75:6c:84:bc:5f:7c:80:36:
f6:08:b3:05:21:57:41:9d:21:3e:8f:95:69:59:48:
cc:85:6b:07:8c:79:1c:eb:e4:5f:6d:49:4d:0f:84:
8d:c2:a1:d4:7d:6a:73:4f:83:46:5f:fd:32:d4:e1:
16:e3:06:5a:eb:7f:1d:bf:2a:e1:3f:e2:15:93:50:
a2:86:27:87:de:56:10:dc:ae:7c:ff:73:01:7c:52:
90:b3:e4:cb:55:32:ae:2f:69:89:74:19:04:fb:e0:
ab:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:83:C0:10:4D:6B:41:0D:BC:BC:7B:13:1A:17:4C:07:B2:44:65:83
X509v3 Authority Key Identifier:
keyid:37:52:9D:57:A6:DB:1E:C8:27:CB:AE:44:6A:D3:9F:39:D1:A5:19:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1KdV6bbHsgny65EatOfOdGlGdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b2fd4-f5c5-4e0c-98e8-e17073d3623d/1/h4PAEE1rQQ28vHsTGhdMB7JEZYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b2fd4-f5c5-4e0c-98e8-e17073d3623d/1/N1KdV6bbHsgny65EatOfOdGlGdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.84.0/22
Signature Algorithm: sha256WithRSAEncryption
48:1e:cb:dd:c5:3a:23:e5:ae:57:b0:d1:88:df:bb:f5:30:86:
85:4f:13:27:ad:7a:11:f3:47:a1:51:5a:4e:cc:2f:5c:e5:11:
2d:d3:0c:37:3e:f2:f0:75:32:8b:14:ca:82:b1:bf:86:0a:c3:
e2:6f:cb:05:88:94:83:69:c3:b6:61:1f:bb:27:49:c9:24:0e:
5b:6f:ad:87:e8:45:ec:9f:d9:6d:ff:82:09:fa:78:7e:70:ae:
1b:6f:99:11:60:dc:83:13:9d:0d:e0:38:79:ad:ac:1b:b6:c6:
91:1c:1d:45:33:e0:9f:cc:d3:d4:f3:e7:19:cf:73:68:d7:4c:
35:a3:ad:a6:4f:06:f8:94:fd:e7:13:fa:72:a9:cb:91:d2:77:
36:d9:8f:71:7b:a0:25:29:9d:39:3d:50:90:62:9e:9f:d2:2a:
21:ed:f6:83:29:11:65:19:12:c4:60:3c:06:75:c5:0e:33:53:
db:60:8c:ae:e9:56:87:43:fa:49:c3:63:eb:cb:57:fe:4e:0e:
2f:86:03:d0:21:8a:e1:48:ce:24:97:9f:4d:fa:21:b4:c3:56:
64:cc:42:0e:44:f7:5c:eb:84:49:d5:1a:56:8e:43:11:88:fa:
d4:d9:39:87:ff:13:db:7f:1a:40:b5:c2:56:f2:32:ad:19:9a:
dc:72:9c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:39 2024 by rpki-client on console-ams.rpki-client.org