Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/cu4XQmVo9j3uodHhTKYgA8jJ0nA.roa
File: cu4XQmVo9j3uodHhTKYgA8jJ0nA.roa (raw, json)
Hash identifier: X0f1FR55st96IHkAsyOLNZdPAFsZ8yTgPhqw670nAow=
Subject key identifier: 72:EE:17:42:65:68:F6:3D:EE:A1:D1:E1:4C:A6:20:03:C8:C9:D2:70
Certificate issuer: /CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Certificate serial: 0172935F
Authority key identifier: 4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/cu4XQmVo9j3uodHhTKYgA8jJ0nA.roa
Signing time: Sat 01 Jan 2022 03:01:34 +0000
ROA not before: Sat 01 Jan 2022 03:01:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 195.18.26.0/24 maxlen: 24
45.133.18.0/24 maxlen: 24
45.133.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24286047 (0x172935f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Validity
Not Before: Jan 1 03:01:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72ee17426568f63deea1d1e14ca62003c8c9d270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a6:24:6c:5c:42:d3:23:70:6f:31:70:8b:5c:
32:9a:ca:81:1c:56:f5:84:98:6f:4b:8e:2c:9e:86:
a7:b7:93:d9:b1:5c:9a:fc:2c:09:99:33:f7:62:d5:
0e:eb:fb:8d:1c:83:80:2b:0c:6c:b5:3f:e8:fd:83:
05:36:39:86:1d:d9:24:b2:6a:1d:71:75:af:32:11:
69:38:41:ab:0b:e7:7d:b2:04:9e:69:9c:c4:4a:e8:
c2:50:10:53:b6:bb:d9:52:12:c2:b5:e2:11:ee:f4:
90:e2:64:f1:ab:b9:ae:e9:c5:b3:d3:9d:bc:e0:99:
42:b4:b4:0d:1f:b0:ef:1f:fb:a9:fc:06:62:14:6d:
59:bf:6c:b1:e1:48:01:55:08:1a:18:bd:80:68:70:
a7:6e:c9:ef:ed:39:8e:0b:3b:f4:ba:51:32:ce:b8:
7e:50:4a:bc:55:bf:e7:a4:ae:9b:3f:06:4f:6a:c9:
67:96:bc:ca:6a:6d:fc:df:90:2e:6d:60:57:d0:a4:
32:f2:a6:05:76:0e:5a:45:dc:0c:a8:42:6b:ca:9e:
fa:3e:59:ec:b2:f8:fc:8b:18:7c:02:be:60:af:93:
b7:95:1b:34:ed:16:73:4c:5e:13:09:c1:6f:c3:25:
80:5f:e0:59:82:f1:11:52:aa:71:b3:34:98:c6:5f:
a0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EE:17:42:65:68:F6:3D:EE:A1:D1:E1:4C:A6:20:03:C8:C9:D2:70
X509v3 Authority Key Identifier:
keyid:4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/cu4XQmVo9j3uodHhTKYgA8jJ0nA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/S3zB9YvdJYyNktNCvuairUzj90Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.18.0/23
195.18.26.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:8e:37:35:e9:80:3d:bb:a4:68:3f:5f:ad:d4:ec:97:cc:81:
e3:bd:4b:fd:b8:b5:48:85:a2:de:21:f7:26:c7:d1:12:1e:83:
ad:35:14:6f:3c:54:e5:6b:17:fd:b1:b0:76:35:ad:28:95:1c:
1f:c4:00:fd:c6:26:51:7b:3a:d9:bf:97:17:6c:75:0d:fc:0a:
12:d6:bf:4e:88:99:4d:db:b4:fb:11:2a:eb:52:8d:fc:a0:ba:
20:1c:a9:1c:48:e3:38:c7:23:b5:18:c5:e7:1b:f2:00:e8:9f:
d8:17:4b:ed:82:dd:f1:20:73:91:06:52:a9:2b:de:72:85:a9:
04:d8:ca:0b:f7:4c:88:4b:d0:8d:ed:26:9c:df:04:a2:42:ed:
dd:33:de:a8:a9:85:01:da:27:8b:4e:87:2a:60:0e:c5:41:d3:
a5:50:ab:54:7c:3c:fe:d1:27:7f:4f:d2:c3:ed:ac:3d:b8:7f:
e8:45:1a:8c:1b:07:2f:65:3c:e7:bc:f6:7a:f2:5f:3d:02:be:
d5:17:32:77:f8:c9:fc:54:c4:ad:73:03:78:42:9e:20:12:ac:
13:31:8f:e3:55:3a:62:7d:ab:dc:35:d5:83:d2:e5:5f:4d:c9:
e3:f7:b6:19:73:9b:d9:18:29:76:90:15:0a:eb:b0:d1:de:38:
5f:7e:bd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:59 2024 by rpki-client on console-ams.rpki-client.org