Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6e1d77-adf6-4e84-8183-2318eab9f63a/1/VBldFR_jW7IDGWT-wOE__WCH-8I.roa
File: VBldFR_jW7IDGWT-wOE__WCH-8I.roa (raw, json)
Hash identifier: k2uAL/3pwmDD5PejfY5CWOGlT6IyosIXR5/IbRXOtX8=
Subject key identifier: 54:19:5D:15:1F:E3:5B:B2:03:19:64:FE:C0:E1:3F:FD:60:87:FB:C2
Certificate issuer: /CN=2ee80cb1b12d669785e17a8ee3ef9c8244e64e00
Certificate serial: 01856F42AD34C6D481DC66F1A679216DE36A
Authority key identifier: 2E:E8:0C:B1:B1:2D:66:97:85:E1:7A:8E:E3:EF:9C:82:44:E6:4E:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LugMsbEtZpeF4XqO4--cgkTmTgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6e1d77-adf6-4e84-8183-2318eab9f63a/1/VBldFR_jW7IDGWT-wOE__WCH-8I.roa
Signing time: Sun 01 Jan 2023 21:35:18 +0000
ROA not before: Sun 01 Jan 2023 21:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41047
IP address blocks: 45.137.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:ad:34:c6:d4:81:dc:66:f1:a6:79:21:6d:e3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee80cb1b12d669785e17a8ee3ef9c8244e64e00
Validity
Not Before: Jan 1 21:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54195d151fe35bb2031964fec0e13ffd6087fbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:f2:17:57:60:c9:2c:d2:ba:2a:39:bd:90:
37:79:ca:c2:69:23:3c:51:c6:f6:35:95:cb:5b:7e:
9a:4c:17:bd:f3:80:da:9a:9b:34:79:9c:f9:17:b0:
0a:cf:b8:9d:19:6c:75:7f:1b:7d:44:85:85:3b:fb:
92:e1:bc:36:9c:84:f0:00:0b:16:95:af:b3:b1:dd:
a0:65:a3:c7:79:d2:3c:3d:2e:13:1c:dd:3e:6b:7e:
ff:b5:51:80:2a:38:04:3a:5a:b5:e0:73:0f:fd:3f:
1b:f7:6c:b5:32:5f:b1:2e:6f:34:cf:e4:82:14:d6:
fb:ad:b0:55:32:88:0c:18:64:e8:0a:ce:29:c9:d4:
a2:6a:e6:17:ae:4c:9b:cd:b2:85:1a:ef:e9:b9:6c:
bd:d4:29:aa:21:7f:1d:3f:5e:c6:3e:0b:c3:d9:a1:
6a:a0:bc:0f:a4:f8:77:62:30:f0:a0:8c:ac:54:6f:
fb:87:3a:4d:41:55:53:8e:89:15:d7:38:2e:8e:60:
55:2a:6b:96:b4:0d:72:de:cb:a7:5d:25:c5:33:28:
ed:f6:82:fa:93:74:b5:b6:c8:a0:6d:88:d8:81:2e:
36:f4:8e:4e:46:32:25:2c:2b:56:5b:54:18:05:6b:
99:a0:28:ca:3b:9d:ad:19:b6:0e:b6:e4:c3:b7:9c:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:19:5D:15:1F:E3:5B:B2:03:19:64:FE:C0:E1:3F:FD:60:87:FB:C2
X509v3 Authority Key Identifier:
keyid:2E:E8:0C:B1:B1:2D:66:97:85:E1:7A:8E:E3:EF:9C:82:44:E6:4E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LugMsbEtZpeF4XqO4--cgkTmTgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6e1d77-adf6-4e84-8183-2318eab9f63a/1/VBldFR_jW7IDGWT-wOE__WCH-8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6e1d77-adf6-4e84-8183-2318eab9f63a/1/LugMsbEtZpeF4XqO4--cgkTmTgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.184.0/22
Signature Algorithm: sha256WithRSAEncryption
39:62:9a:b6:61:b6:88:aa:76:55:88:83:94:6a:f1:ee:a8:86:
a5:e7:6b:be:a0:17:55:37:07:56:8a:7a:11:ff:11:ab:61:7c:
cd:0c:93:4e:30:fe:05:15:52:97:aa:50:43:6d:7b:1d:ea:16:
e7:20:f4:09:f1:0e:44:f5:eb:25:ee:54:a2:2e:5b:a0:3b:e7:
98:7d:db:ce:d8:bd:84:f7:8b:e3:68:4c:e6:fc:af:f4:19:74:
de:16:56:5f:f1:68:7d:eb:62:1b:4f:81:5b:de:de:b9:79:33:
e3:81:70:cf:1e:41:6f:05:d0:70:f7:e0:09:8b:55:32:43:51:
34:d6:29:57:82:08:86:69:cc:ce:5e:0e:07:72:91:6d:de:87:
20:3f:19:ed:b0:fa:61:6c:1d:b0:dd:c2:54:5a:07:f2:a1:c6:
3c:92:38:f6:1e:ec:17:37:b6:49:d0:1e:1b:30:08:89:26:aa:
70:5b:f8:40:fb:47:09:c5:1a:44:73:b9:e6:d2:11:56:03:ce:
51:ce:2b:cc:e2:b3:e7:ad:cd:00:20:71:60:ab:f2:a0:2c:81:
43:84:3c:3d:c5:1f:96:a8:d7:5b:a4:75:aa:10:dc:b5:84:11:
e9:93:b8:74:61:15:43:f4:01:58:f5:94:a8:8a:4f:bc:12:1c:
e5:a6:28:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:46 2024 by rpki-client on console-fra.rpki-client.org