Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dd577b-606c-4ca5-a9da-2c4a848a3e81/1/9HzZiVsm0bugXy-4kT1R4eLm_aA.roa
File: 9HzZiVsm0bugXy-4kT1R4eLm_aA.roa (raw, json)
Hash identifier: DkmtvgWr8VGdrWkqJsyImDUrkj9fkoN37SZgr+SR7P4=
Subject key identifier: F4:7C:D9:89:5B:26:D1:BB:A0:5F:2F:B8:91:3D:51:E1:E2:E6:FD:A0
Certificate issuer: /CN=5b26e9376ae7ae4704be18f6f200074db0758231
Certificate serial: 0186A70BE894F1B84B3800C1753F625B86FE
Authority key identifier: 5B:26:E9:37:6A:E7:AE:47:04:BE:18:F6:F2:00:07:4D:B0:75:82:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WybpN2rnrkcEvhj28gAHTbB1gjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dd577b-606c-4ca5-a9da-2c4a848a3e81/1/9HzZiVsm0bugXy-4kT1R4eLm_aA.roa
Signing time: Fri 03 Mar 2023 10:37:00 +0000
ROA not before: Fri 03 Mar 2023 10:37:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1828
IP address blocks: 45.133.80.0/22 maxlen: 22
45.133.80.0/24 maxlen: 24
45.133.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a7:0b:e8:94:f1:b8:4b:38:00:c1:75:3f:62:5b:86:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b26e9376ae7ae4704be18f6f200074db0758231
Validity
Not Before: Mar 3 10:37:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f47cd9895b26d1bba05f2fb8913d51e1e2e6fda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dc:e0:c5:f0:ba:c4:87:a5:07:69:4f:25:15:
ff:a9:03:27:cc:07:5e:87:31:b3:c2:d5:15:07:eb:
21:20:de:62:c8:7f:b6:6b:47:05:3a:28:8c:70:89:
6b:d5:28:47:ee:ef:9c:44:82:63:f0:55:38:12:c0:
2e:e7:05:95:9f:1a:3e:d7:7f:af:0d:21:19:c8:38:
b2:81:8b:bd:7f:08:b8:04:ca:bf:2b:8c:d4:4d:2f:
63:64:62:10:d9:64:0c:14:2e:4f:3d:45:da:f0:f3:
2d:c5:df:7d:66:90:0c:ad:c4:60:32:82:c5:bf:50:
0f:52:93:59:89:b4:53:04:e1:33:1b:99:2d:8a:d6:
69:5e:e7:4a:60:68:bb:af:a1:45:30:bc:ba:0e:ff:
6b:ab:3c:05:17:c4:7a:63:07:62:fe:6d:ae:b5:d9:
29:ea:63:cc:d2:9a:4d:7a:0c:66:22:17:34:51:22:
33:ed:95:9d:f2:61:54:69:5d:c1:16:b0:b7:38:f2:
7c:17:f4:53:28:55:db:e9:36:02:f7:a0:da:a0:2b:
bb:ab:0d:cd:55:a8:e7:0d:9b:cb:66:07:c6:ac:f8:
5c:26:10:03:ef:21:20:76:26:71:c2:83:c6:80:00:
55:2f:e8:cb:e8:c4:5e:20:d9:cb:d3:4b:49:b1:45:
82:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7C:D9:89:5B:26:D1:BB:A0:5F:2F:B8:91:3D:51:E1:E2:E6:FD:A0
X509v3 Authority Key Identifier:
keyid:5B:26:E9:37:6A:E7:AE:47:04:BE:18:F6:F2:00:07:4D:B0:75:82:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WybpN2rnrkcEvhj28gAHTbB1gjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dd577b-606c-4ca5-a9da-2c4a848a3e81/1/9HzZiVsm0bugXy-4kT1R4eLm_aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dd577b-606c-4ca5-a9da-2c4a848a3e81/1/WybpN2rnrkcEvhj28gAHTbB1gjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.80.0/22
Signature Algorithm: sha256WithRSAEncryption
59:6d:c9:10:52:dc:16:e3:35:f1:57:62:c7:bb:d9:d4:48:3f:
67:5c:40:1a:0c:77:59:86:16:de:16:1f:65:f7:11:05:84:2f:
61:8f:11:28:f7:81:b8:42:72:b3:eb:d5:d3:94:a5:3c:60:53:
a5:0e:75:81:9e:6f:f2:47:b0:99:88:e3:0a:e0:90:11:53:a9:
12:18:64:40:c5:ce:25:47:62:a0:9c:de:2a:8c:9d:4a:29:63:
cf:d3:5f:a0:a4:a2:ce:e3:10:51:15:de:7c:07:35:de:7c:da:
18:7b:02:ce:13:17:42:df:07:43:4d:36:6c:a9:9c:c9:45:01:
9b:28:2d:53:f4:0b:e4:fe:ae:82:df:9f:18:c5:30:da:9d:d6:
4a:dd:24:68:5a:34:06:c6:ce:22:43:92:26:e9:36:23:0d:ed:
b3:fc:3a:af:80:b8:72:cd:f7:a6:e1:f3:d8:63:08:c5:8b:60:
ed:23:af:d5:de:57:5d:b5:4b:9a:e3:8f:ce:5d:52:1b:2c:a6:
dc:be:18:3a:fc:79:04:fc:cb:a1:e8:11:ca:17:92:a3:6f:6f:
2f:76:e7:b8:80:5b:2b:80:a2:cb:44:c8:5e:16:cf:81:a8:91:
5d:c7:f3:84:19:33:06:e6:55:29:56:fd:de:8b:aa:89:1b:69:
9d:34:5d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:16 2024 by rpki-client on console-fra.rpki-client.org