Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/qAnjWfUNugSFxCvKnzrGVyzgfjs.roa
File: qAnjWfUNugSFxCvKnzrGVyzgfjs.roa (raw, json)
Hash identifier: zAPCE4hQTgH3M6JBx18hWGTmtR0hxiNu/vqfoqxm0Vk=
Subject key identifier: A8:09:E3:59:F5:0D:BA:04:85:C4:2B:CA:9F:3A:C6:57:2C:E0:7E:3B
Certificate issuer: /CN=73588934a0b0d648daf94dd9e629d3dd22ed5abf
Certificate serial: 018CC7274B9BA730BE75A9C7731FBA3E4474
Authority key identifier: 73:58:89:34:A0:B0:D6:48:DA:F9:4D:D9:E6:29:D3:DD:22:ED:5A:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1iJNKCw1kja-U3Z5inT3SLtWr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/qAnjWfUNugSFxCvKnzrGVyzgfjs.roa
Signing time: Mon 01 Jan 2024 22:31:30 +0000
ROA not before: Mon 01 Jan 2024 22:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207633
IP address blocks: 45.80.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:4b:9b:a7:30:be:75:a9:c7:73:1f:ba:3e:44:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73588934a0b0d648daf94dd9e629d3dd22ed5abf
Validity
Not Before: Jan 1 22:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a809e359f50dba0485c42bca9f3ac6572ce07e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:82:4e:fc:54:bd:b1:4e:5e:3c:af:42:b2:
8a:7f:61:03:84:6d:0d:0e:2d:86:c5:7a:3e:5d:8f:
22:f2:de:1d:d8:f8:da:08:42:0c:31:13:cf:ec:d9:
f8:11:91:e2:c8:1f:ec:41:74:90:17:ad:66:fb:97:
50:02:a8:ac:46:37:94:10:26:ff:35:5a:fb:f1:b7:
f4:3c:5c:81:0a:c8:c8:59:95:d1:ef:89:7f:e8:d1:
82:d5:5b:db:70:a4:96:dc:9d:69:2c:71:dc:b8:c9:
55:33:fa:5d:84:7c:da:9e:b8:8c:ab:d6:ef:91:41:
0a:0c:49:c6:6c:a8:d3:f1:61:97:85:22:ad:6f:96:
eb:de:88:94:5f:b7:78:4e:ad:b9:b8:ac:5c:2b:6d:
ad:04:a7:02:63:41:1c:a0:d3:8a:b5:1f:4e:08:71:
97:09:b3:28:26:33:ba:45:01:f2:44:0e:b9:53:e6:
01:41:41:d6:ab:75:f2:85:6f:30:90:bc:30:42:b0:
58:38:34:bf:0b:54:76:3c:7c:8a:f1:3b:99:4d:d8:
1b:ac:7b:81:33:65:8c:b4:45:20:bf:87:af:06:a9:
55:01:78:d5:e9:a4:15:12:7f:70:ca:8a:ca:df:3c:
fc:f2:09:cb:62:cb:77:77:ac:e9:a4:c6:59:39:ea:
36:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:09:E3:59:F5:0D:BA:04:85:C4:2B:CA:9F:3A:C6:57:2C:E0:7E:3B
X509v3 Authority Key Identifier:
keyid:73:58:89:34:A0:B0:D6:48:DA:F9:4D:D9:E6:29:D3:DD:22:ED:5A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1iJNKCw1kja-U3Z5inT3SLtWr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/qAnjWfUNugSFxCvKnzrGVyzgfjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/c1iJNKCw1kja-U3Z5inT3SLtWr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.174.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:4f:76:21:6c:bf:b4:25:bb:df:57:3d:b5:e1:15:db:e0:f1:
62:7e:5d:d2:4d:5f:38:6b:8d:b7:7b:6c:bc:e1:55:0a:99:e6:
f5:fa:3f:bd:8d:2f:b7:3c:bd:8f:61:ed:28:e6:46:68:07:90:
71:5a:3d:b3:a1:dc:90:68:98:2d:92:01:3f:df:d9:71:2c:fa:
38:23:8d:a2:6c:0a:18:85:32:6a:cc:62:2d:0d:42:c2:18:15:
ca:54:2a:34:0e:06:8e:e8:fc:22:73:a2:b8:fb:de:98:f8:c3:
ba:d6:9c:dc:d1:66:96:7b:1a:c0:4d:1c:85:cd:ff:00:0d:94:
7f:4d:97:e8:6c:3c:1c:0c:9e:07:2f:be:34:e5:79:54:b7:0c:
37:e1:27:a4:2f:4b:fd:7e:5e:20:5d:2e:c4:6f:38:74:72:2a:
4f:1a:c1:b9:03:a1:30:22:6c:38:3f:71:88:7a:d8:03:30:c1:
2f:54:0c:f7:99:82:b5:dd:70:1e:ac:83:37:98:78:c1:50:e6:
ba:7a:e5:73:ce:38:9d:69:1d:b7:ce:2d:f3:2f:48:52:bd:bf:
34:f6:70:dc:93:6a:7e:04:92:8d:fb:6f:1b:78:44:d8:94:cf:
72:c7:33:c5:8e:5b:67:4d:78:97:bd:5a:89:09:47:f4:df:30:
10:93:5c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:19 2024 by rpki-client on console-fra.rpki-client.org