Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dd577b-606c-4ca5-a9da-2c4a848a3e81/1/eGp-w8cIhOHeAxK0w4mD4Jasfaw.roa
File: eGp-w8cIhOHeAxK0w4mD4Jasfaw.roa (raw, json)
Hash identifier: mEKQjmlZjSRj8r/7QOk91SNZ5X5Iw8nrlDK0gPC0F2Q=
Subject key identifier: 78:6A:7E:C3:C7:08:84:E1:DE:03:12:B4:C3:89:83:E0:96:AC:7D:AC
Certificate issuer: /CN=5b26e9376ae7ae4704be18f6f200074db0758231
Certificate serial: 01857169CB08D0437FB4F8E6B72A1E47AAEB
Authority key identifier: 5B:26:E9:37:6A:E7:AE:47:04:BE:18:F6:F2:00:07:4D:B0:75:82:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WybpN2rnrkcEvhj28gAHTbB1gjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dd577b-606c-4ca5-a9da-2c4a848a3e81/1/eGp-w8cIhOHeAxK0w4mD4Jasfaw.roa
Signing time: Mon 02 Jan 2023 07:37:16 +0000
ROA not before: Mon 02 Jan 2023 07:37:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1828
IP address blocks: 45.133.80.0/22 maxlen: 22
45.133.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:cb:08:d0:43:7f:b4:f8:e6:b7:2a:1e:47:aa:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b26e9376ae7ae4704be18f6f200074db0758231
Validity
Not Before: Jan 2 07:37:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=786a7ec3c70884e1de0312b4c38983e096ac7dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ab:c8:93:72:02:e9:82:8f:ac:b7:c0:22:e2:
87:80:a4:f0:99:f5:af:c3:53:2b:34:18:0f:c4:83:
79:53:e9:02:38:dd:8c:d7:b2:ce:2a:fb:17:fa:67:
11:81:38:53:fe:dc:d1:ee:8a:55:29:22:2b:29:b3:
9c:06:3d:4a:85:97:8b:26:5a:2c:f7:70:82:2c:d2:
b9:ac:3e:3b:58:b4:c0:fb:b9:1d:e9:dc:1f:17:6e:
85:18:4a:c8:6b:31:8f:0e:bf:30:2b:67:94:e3:f9:
1a:e3:85:50:85:52:1c:f7:9d:67:2b:e3:7e:3d:90:
19:bc:9c:2e:49:2e:38:d8:34:48:45:7b:a9:90:35:
13:36:2d:81:b9:e3:04:a3:6a:40:53:a1:d4:b1:c2:
ba:cd:3d:bf:f3:db:69:8c:5b:70:b3:8e:2a:2e:7d:
0e:a1:c3:29:3d:f2:83:e9:05:83:ff:45:b6:42:b6:
ee:27:58:11:b9:f4:59:b8:1f:8b:44:95:46:45:1e:
79:b5:ec:c0:2d:b4:06:e9:8d:cb:01:3c:6b:b6:7b:
e1:91:fd:0d:5e:60:52:36:f9:b6:7a:7d:31:da:c4:
8a:8f:5c:34:da:c9:3f:b5:be:7d:eb:b9:0e:65:19:
c9:8e:c7:b9:18:44:ce:b4:07:76:b0:64:87:5c:4c:
70:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6A:7E:C3:C7:08:84:E1:DE:03:12:B4:C3:89:83:E0:96:AC:7D:AC
X509v3 Authority Key Identifier:
keyid:5B:26:E9:37:6A:E7:AE:47:04:BE:18:F6:F2:00:07:4D:B0:75:82:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WybpN2rnrkcEvhj28gAHTbB1gjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dd577b-606c-4ca5-a9da-2c4a848a3e81/1/eGp-w8cIhOHeAxK0w4mD4Jasfaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dd577b-606c-4ca5-a9da-2c4a848a3e81/1/WybpN2rnrkcEvhj28gAHTbB1gjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.80.0/22
Signature Algorithm: sha256WithRSAEncryption
89:c3:e8:74:77:48:69:a6:ff:71:9b:ad:0e:d0:94:49:83:aa:
99:42:ab:2e:62:09:24:03:62:f5:f8:7e:bc:05:2d:ca:c5:45:
27:45:cf:2f:29:8c:da:51:03:2b:89:4f:59:a9:19:e4:d4:ee:
9f:a6:a6:f7:fd:fb:46:50:ff:db:cf:05:20:ef:e4:e2:7a:f4:
90:bd:62:ec:47:81:a3:5d:dd:50:60:44:e5:d3:1a:37:2c:f1:
30:08:be:62:9a:51:26:da:9a:c1:34:3b:57:88:bc:af:67:12:
24:2d:7d:1f:7b:60:22:f8:e8:46:21:14:1e:3a:7a:48:07:17:
59:5e:d1:e5:b0:02:d8:bb:1c:27:66:50:f4:1e:c6:01:7d:21:
3f:79:4e:8d:7f:e0:7a:9d:c2:1a:a3:2f:b1:3d:78:97:55:ec:
f5:c3:bb:4c:fa:45:53:d8:6e:8f:ba:f6:02:d5:22:db:d2:b4:
e2:ae:9e:07:2f:a6:a3:00:b5:a4:96:d1:68:af:65:fa:82:0f:
e0:e3:4e:ef:84:17:28:25:94:64:b5:d6:f4:01:7b:cf:7d:15:
01:d3:b2:b1:c8:9d:de:71:89:fb:a9:98:d9:3f:ef:66:27:b7:
5c:cb:85:91:a9:2e:2d:3a:d3:53:ac:00:4d:28:5a:ec:c6:2d:
e9:dc:5a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:16 2024 by rpki-client on console-fra.rpki-client.org