Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/455b4b-be5c-4a6d-9927-e2498f0c687a/1/3JUrGRiXXjRjGHIM2wSPzBOcyS0.roa
File: 3JUrGRiXXjRjGHIM2wSPzBOcyS0.roa (raw, json)
Hash identifier: YstH/GQMqc4reCjVfrfNnQFYB6reUAUSeIg+4n2FrVs=
Subject key identifier: DC:95:2B:19:18:97:5E:34:63:18:72:0C:DB:04:8F:CC:13:9C:C9:2D
Certificate issuer: /CN=51f40bfbe31f1e3bfefb363d58de9bd8a27d8715
Certificate serial: 01856FE707525911CBA84C7367552816D5BF
Authority key identifier: 51:F4:0B:FB:E3:1F:1E:3B:FE:FB:36:3D:58:DE:9B:D8:A2:7D:87:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfQL--MfHjv--zY9WN6b2KJ9hxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/455b4b-be5c-4a6d-9927-e2498f0c687a/1/3JUrGRiXXjRjGHIM2wSPzBOcyS0.roa
Signing time: Mon 02 Jan 2023 00:34:49 +0000
ROA not before: Mon 02 Jan 2023 00:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39020
IP address blocks: 45.80.14.0/24 maxlen: 24
45.80.12.0/24 maxlen: 24
45.80.15.0/24 maxlen: 24
45.80.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:07:52:59:11:cb:a8:4c:73:67:55:28:16:d5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f40bfbe31f1e3bfefb363d58de9bd8a27d8715
Validity
Not Before: Jan 2 00:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc952b1918975e346318720cdb048fcc139cc92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:a6:54:bb:11:a6:22:04:5d:57:03:f5:71:
33:ca:4d:ee:c9:81:8b:e0:5d:45:77:1c:be:50:e4:
dc:2b:e2:62:2f:bd:03:c5:0d:51:b9:62:2f:f9:78:
39:0a:67:98:af:95:6d:7b:18:b9:cd:3c:47:e9:6a:
57:79:45:d9:35:55:41:35:43:2f:53:cd:dd:c6:9a:
42:e3:a3:e5:7a:4d:9a:a1:e3:f8:33:6f:c0:fb:ec:
c9:cd:5d:d1:bd:d6:fa:bc:dc:f8:da:15:f1:39:96:
df:4a:16:2f:d8:32:46:2c:25:f7:55:32:e3:35:b3:
fc:0a:5c:5f:69:4e:6c:32:35:3e:c9:2e:66:05:6f:
b7:05:d7:66:ea:8e:7b:7e:de:15:c5:73:2e:cf:2f:
3b:6e:34:2b:25:c5:5d:b4:a9:7b:bf:dc:1f:7b:a8:
2d:f4:43:91:10:1a:e8:a5:10:b0:02:75:42:c1:22:
44:c0:62:bf:44:57:7f:67:06:58:00:ae:9b:12:e4:
63:e5:81:e1:23:28:14:42:42:c4:7d:d5:c0:8e:3a:
7b:d1:eb:59:58:cb:02:04:6a:50:88:32:5a:09:cd:
a9:6f:2d:2b:9e:33:30:68:0e:e4:ee:34:2d:8e:e7:
08:df:f7:4e:cd:5f:10:97:ba:a2:1e:9d:b3:66:e6:
d5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:95:2B:19:18:97:5E:34:63:18:72:0C:DB:04:8F:CC:13:9C:C9:2D
X509v3 Authority Key Identifier:
keyid:51:F4:0B:FB:E3:1F:1E:3B:FE:FB:36:3D:58:DE:9B:D8:A2:7D:87:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfQL--MfHjv--zY9WN6b2KJ9hxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/455b4b-be5c-4a6d-9927-e2498f0c687a/1/3JUrGRiXXjRjGHIM2wSPzBOcyS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/455b4b-be5c-4a6d-9927-e2498f0c687a/1/UfQL--MfHjv--zY9WN6b2KJ9hxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.12.0/22
Signature Algorithm: sha256WithRSAEncryption
54:56:06:d4:3a:14:f2:74:48:ca:d6:e5:61:ee:0f:90:fd:17:
28:ac:bd:89:16:a3:64:5e:28:02:09:9c:e3:2d:99:7c:42:48:
52:49:3a:99:d5:bc:dc:73:c4:da:e0:93:7c:f7:ae:c3:0f:db:
3a:9c:d5:1f:6f:ff:99:80:85:56:2d:51:73:90:a2:ed:6d:05:
70:72:aa:8a:61:84:5f:86:11:d1:f4:2a:22:53:a9:b9:42:c2:
46:ef:58:8d:ec:f7:5b:80:f5:be:7c:18:ad:3e:ef:94:2a:bd:
84:0f:c5:ac:bc:c4:a5:c4:e6:37:bf:4d:03:b2:b9:63:aa:c4:
17:43:df:30:03:89:4b:45:15:74:f1:81:a0:d1:fa:b4:be:4c:
06:a8:eb:b3:eb:fa:4e:fe:9c:44:b9:19:54:7a:97:ea:c2:0f:
8d:99:09:be:1d:11:27:b7:99:85:74:26:9a:f5:3a:84:9e:e3:
47:d5:75:c2:2f:4b:6e:cd:7d:6a:42:40:56:73:7f:17:9d:27:
21:3f:9b:bd:36:1b:11:34:2e:27:f8:c2:87:fc:e1:c9:c7:e2:
1a:e0:75:9e:11:b1:2c:a4:f6:1e:42:b2:9b:a4:22:3e:02:55:
3e:de:31:12:c5:70:d7:ec:21:30:0b:c7:d0:74:32:ac:64:e4:
5e:dd:85:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:48 2024 by rpki-client on console-ams.rpki-client.org