Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/u9xIIuLCUEIgEnYLMipXYmzETp4.roa
File: u9xIIuLCUEIgEnYLMipXYmzETp4.roa (raw, json)
Hash identifier: SZR2WYQ/AiKyjLXjixNDBta7a4pFAqvQp6A4ZJL0Vt0=
Subject key identifier: BB:DC:48:22:E2:C2:50:42:20:12:76:0B:32:2A:57:62:6C:C4:4E:9E
Certificate issuer: /CN=425e132c37f05117dab94af1869a7149c6408d80
Certificate serial: 014CA1FB
Authority key identifier: 42:5E:13:2C:37:F0:51:17:DA:B9:4A:F1:86:9A:71:49:C6:40:8D:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ql4TLDfwURfauUrxhppxScZAjYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/u9xIIuLCUEIgEnYLMipXYmzETp4.roa
Signing time: Sat 01 Jan 2022 12:59:29 +0000
ROA not before: Sat 01 Jan 2022 12:59:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.81.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21799419 (0x14ca1fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425e132c37f05117dab94af1869a7149c6408d80
Validity
Not Before: Jan 1 12:59:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbdc4822e2c250422012760b322a57626cc44e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:16:ee:95:87:aa:16:5c:3f:92:9d:61:01:f1:
1f:64:c5:75:d9:96:56:63:ab:6f:06:1b:11:72:52:
8d:ca:55:41:2c:bb:e2:ec:94:e0:47:06:c6:72:80:
60:bf:64:11:bf:4b:77:1e:ee:e4:d6:bc:70:6a:b0:
cf:c0:e2:1a:9f:25:1c:80:8d:58:d9:89:83:45:ee:
e4:3b:42:28:e5:e0:4b:b4:1e:2d:a5:67:5b:13:c8:
e5:aa:83:3d:eb:79:04:59:a9:51:ac:a6:c8:d5:81:
c4:30:de:59:f9:4b:13:8a:25:09:76:fa:f3:6e:45:
7e:7e:55:3e:d8:08:ad:7f:6d:ae:1f:07:a9:d1:0e:
df:32:c7:b7:d5:1f:5c:a6:70:5d:eb:78:08:ae:3a:
99:d8:4d:ea:c6:ca:0c:71:8b:af:ed:49:42:28:82:
a3:c8:31:53:cf:79:8d:a0:f0:26:5c:b9:f3:f6:a2:
56:7f:fe:f3:0a:70:66:04:00:9e:ff:f6:5b:fc:f6:
3b:e9:b4:ba:d5:ef:f5:8c:09:07:da:1b:90:44:c6:
ac:c2:46:b0:7c:99:f7:fe:34:d1:af:9d:23:f0:70:
b5:6f:58:21:03:57:90:c2:78:81:8d:6a:36:2f:70:
21:a7:35:c3:72:33:49:b0:07:25:b4:c5:8b:99:bd:
5d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DC:48:22:E2:C2:50:42:20:12:76:0B:32:2A:57:62:6C:C4:4E:9E
X509v3 Authority Key Identifier:
keyid:42:5E:13:2C:37:F0:51:17:DA:B9:4A:F1:86:9A:71:49:C6:40:8D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ql4TLDfwURfauUrxhppxScZAjYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/u9xIIuLCUEIgEnYLMipXYmzETp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/Ql4TLDfwURfauUrxhppxScZAjYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.56.0/22
Signature Algorithm: sha256WithRSAEncryption
78:ca:3d:8c:b6:4f:df:4b:f5:7e:85:88:39:b1:fc:ef:8b:9e:
bf:c5:5c:bc:c5:da:ce:b7:c1:2c:49:d4:a6:4b:c5:49:e1:c3:
0a:eb:20:b8:6a:22:2b:dd:ae:b3:cc:b5:de:08:31:2b:c0:52:
55:44:d0:69:fe:0e:8f:fd:84:77:5a:06:e3:44:36:f3:d4:9e:
fb:ce:11:50:79:68:55:e4:d0:f8:b6:9d:95:43:2d:c9:1b:b1:
da:89:da:bd:0d:23:64:8c:38:f3:8b:6f:64:f5:dc:42:ab:67:
13:22:93:18:45:06:cf:2b:ad:f6:80:22:6c:ac:e2:df:04:7b:
bd:39:e2:ee:9e:b7:c5:29:5a:c7:13:78:6e:fb:55:80:89:ef:
41:d7:3e:70:10:ec:0b:4c:79:57:c5:a6:d6:97:85:36:7e:f1:
e8:f5:f4:20:7f:92:74:26:ac:10:06:74:53:12:bd:c0:84:02:
97:cd:b3:da:db:48:6c:78:7d:ee:cf:5e:a3:58:18:af:68:f0:
9d:f6:c2:82:e6:3d:5d:51:e4:46:9e:bf:f2:30:ea:1a:32:87:
7b:83:f5:03:c0:7c:29:72:bc:e1:48:c0:9c:7d:f9:8c:43:75:
8a:08:7a:5b:f1:55:d9:a5:1a:98:f0:8f:cb:20:ac:b5:32:4f:
f7:f4:2f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org