Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/sIBnPnGj7yyaNdtw4aQp7-fZAGU.roa
File: sIBnPnGj7yyaNdtw4aQp7-fZAGU.roa (raw, json)
Hash identifier: DeqDqJoH4oVBdYIvzdRQVfEq+o96mSy/hT8Xqe+wSPU=
Subject key identifier: B0:80:67:3E:71:A3:EF:2C:9A:35:DB:70:E1:A4:29:EF:E7:D9:00:65
Certificate issuer: /CN=76c2deff015fa3e8015b1d5fdbbfb779a2c8e617
Certificate serial: 0184373E248A1E2FD37CE3F754CFB4675FD4
Authority key identifier: 76:C2:DE:FF:01:5F:A3:E8:01:5B:1D:5F:DB:BF:B7:79:A2:C8:E6:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dsLe_wFfo-gBWx1f27-3eaLI5hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/sIBnPnGj7yyaNdtw4aQp7-fZAGU.roa
Signing time: Wed 02 Nov 2022 07:28:49 +0000
ROA not before: Wed 02 Nov 2022 07:28:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20454
IP address blocks: 45.8.93.0/24 maxlen: 24
45.8.94.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:37:3e:24:8a:1e:2f:d3:7c:e3:f7:54:cf:b4:67:5f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76c2deff015fa3e8015b1d5fdbbfb779a2c8e617
Validity
Not Before: Nov 2 07:28:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b080673e71a3ef2c9a35db70e1a429efe7d90065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7f:24:f6:2c:2c:61:82:b9:2d:3e:96:cd:46:
a9:60:df:f2:41:85:a2:34:84:54:5f:0b:5d:e4:16:
1d:71:38:23:08:05:14:ec:f1:1c:44:76:f5:ea:e4:
18:7e:13:e3:4e:a3:a9:04:9c:1d:0c:bf:62:33:34:
1b:9b:ad:23:ad:a0:18:7b:54:b6:df:0f:e4:d5:7f:
51:3f:f7:c9:12:f9:bb:b0:d7:6f:81:fc:92:8a:9c:
35:b8:da:6a:29:b2:a4:d1:83:d1:0a:95:88:f7:f4:
68:ef:bd:36:79:32:23:e1:4e:28:53:c3:9c:36:3e:
bf:40:49:9e:59:a6:12:9b:85:40:07:b9:84:15:13:
09:0f:c6:e6:23:84:67:03:b0:0a:7d:a8:24:69:cc:
0b:6a:b5:21:d1:ac:1d:41:e7:0d:5c:23:50:fe:be:
68:2e:b3:62:ef:d6:63:b9:2f:f3:86:6b:e1:db:22:
42:ae:0e:65:92:35:b6:e4:85:02:7f:d1:f2:6c:e2:
1d:66:9b:79:97:e8:0e:f9:f1:55:c6:4d:97:8f:db:
78:4a:d5:ce:e2:bd:53:67:62:76:a4:1a:a8:65:b8:
81:ee:2e:b8:4b:18:e9:60:83:0f:af:6f:e4:c1:8e:
bc:60:7b:22:c7:60:c0:58:63:99:fb:e2:cf:69:68:
e9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:80:67:3E:71:A3:EF:2C:9A:35:DB:70:E1:A4:29:EF:E7:D9:00:65
X509v3 Authority Key Identifier:
keyid:76:C2:DE:FF:01:5F:A3:E8:01:5B:1D:5F:DB:BF:B7:79:A2:C8:E6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dsLe_wFfo-gBWx1f27-3eaLI5hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/sIBnPnGj7yyaNdtw4aQp7-fZAGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/dsLe_wFfo-gBWx1f27-3eaLI5hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0-45.8.95.255
Signature Algorithm: sha256WithRSAEncryption
a8:9d:6d:40:18:63:2a:72:21:ce:d0:b4:cb:6e:f9:fe:01:fa:
03:27:26:72:59:a1:db:2f:ed:aa:8b:1e:b7:23:b0:91:d0:28:
7a:8b:ed:3e:35:32:ca:21:6f:11:de:77:97:48:e3:86:c2:27:
dc:80:09:22:ba:d0:75:31:aa:3d:7e:cc:2e:be:a3:a1:95:4a:
d8:08:77:2b:a6:af:95:8a:e0:e8:43:d4:ea:74:dd:1f:b0:08:
ac:69:58:fb:48:e0:ea:7a:6a:4f:b4:99:c3:b0:13:f1:bf:48:
0a:79:4e:0a:65:6c:d7:78:49:b1:e9:19:48:b7:d0:24:85:94:
d9:16:d3:41:76:cb:f7:40:a1:21:57:24:70:b5:9f:5c:8a:d9:
35:72:99:e5:10:07:f6:e9:c4:d9:06:be:72:58:5e:aa:3c:00:
6e:b6:06:bf:65:8e:b0:e7:24:a6:52:8a:ab:14:7f:d3:7c:9f:
65:c9:4c:b9:0f:f8:6c:a9:ca:b0:91:16:7c:33:f8:77:3f:94:
4a:1b:86:1f:b7:c3:dd:7e:99:db:87:4e:34:66:ad:c4:66:6a:
97:b0:47:e8:22:9d:b2:6d:53:98:d5:b1:01:b3:54:44:d7:38:
e8:6f:09:73:63:e0:dd:f1:53:8e:e3:f5:ac:b8:92:03:d7:da:
93:0e:75:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:54 2024 by rpki-client on console-fra.rpki-client.org