Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f1bdb2-6061-4a52-ad55-51a739a65fce/1/V84AYqqzsrSE6aX8hHqOCmjp0vE.roa
File: V84AYqqzsrSE6aX8hHqOCmjp0vE.roa (raw, json)
Hash identifier: BIAIBSaEq+k0osgrJxuiYjDvMNgTviH9zlpZWIpQeCY=
Subject key identifier: 57:CE:00:62:AA:B3:B2:B4:84:E9:A5:FC:84:7A:8E:0A:68:E9:D2:F1
Certificate issuer: /CN=e07de3144a09fd5f50559c493f86e2e8bd3c679e
Certificate serial: 07BAE1B8
Authority key identifier: E0:7D:E3:14:4A:09:FD:5F:50:55:9C:49:3F:86:E2:E8:BD:3C:67:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4H3jFEoJ_V9QVZxJP4bi6L08Z54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f1bdb2-6061-4a52-ad55-51a739a65fce/1/V84AYqqzsrSE6aX8hHqOCmjp0vE.roa
Signing time: Sat 01 Jan 2022 07:04:20 +0000
ROA not before: Sat 01 Jan 2022 07:04:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207409
IP address blocks: 45.9.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129687992 (0x7bae1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e07de3144a09fd5f50559c493f86e2e8bd3c679e
Validity
Not Before: Jan 1 07:04:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57ce0062aab3b2b484e9a5fc847a8e0a68e9d2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9c:56:ad:29:d5:66:b7:c9:2b:ac:04:cc:c5:
d0:49:eb:80:a5:97:76:b3:6d:62:e0:dd:44:85:e3:
8b:03:02:06:a4:49:bc:0c:76:d9:db:ca:f7:05:02:
5b:27:a4:32:9e:32:42:dd:8a:0a:b5:8e:2c:64:e9:
f3:40:b7:9a:54:c4:08:5e:f4:af:83:1e:7c:3e:eb:
08:1a:df:7d:1a:16:50:1f:b6:b1:b6:4a:f1:c2:ce:
8a:b0:c8:69:56:97:3b:95:6f:07:ae:46:e3:21:cc:
15:6d:a1:4f:c9:24:19:8f:7b:88:ea:85:bd:59:fc:
a9:86:87:62:13:ff:c0:56:fd:be:bc:22:c0:27:d4:
b3:70:85:e4:4f:6f:fa:65:bd:59:ae:75:92:08:13:
a0:fc:a1:47:dd:7e:da:47:63:42:27:13:46:5c:4f:
e2:9d:55:48:f2:e1:d1:ed:7a:62:74:c3:da:05:90:
e8:25:16:fa:b7:ab:e6:4a:43:68:c6:99:1c:57:70:
91:0f:23:60:92:e3:98:5a:5c:e5:fb:dc:05:9e:f3:
d3:a8:74:00:21:02:91:9b:c3:d4:44:af:22:f5:36:
9d:b6:aa:19:67:bb:27:33:23:05:b3:56:fd:bd:52:
e4:c3:d8:c1:06:f9:d4:ad:e9:da:73:d1:4e:99:4a:
89:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CE:00:62:AA:B3:B2:B4:84:E9:A5:FC:84:7A:8E:0A:68:E9:D2:F1
X509v3 Authority Key Identifier:
keyid:E0:7D:E3:14:4A:09:FD:5F:50:55:9C:49:3F:86:E2:E8:BD:3C:67:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H3jFEoJ_V9QVZxJP4bi6L08Z54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f1bdb2-6061-4a52-ad55-51a739a65fce/1/V84AYqqzsrSE6aX8hHqOCmjp0vE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f1bdb2-6061-4a52-ad55-51a739a65fce/1/4H3jFEoJ_V9QVZxJP4bi6L08Z54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.255.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b5:8c:76:01:61:3c:ae:f9:a7:d3:39:0b:b7:fc:93:73:9e:
1a:99:95:65:a9:18:f0:03:ba:aa:4e:29:c7:67:b4:90:1e:c0:
79:cb:08:db:94:57:59:cb:43:b2:86:3d:b7:39:7b:df:87:cd:
1f:84:ef:b7:0f:3d:c0:d1:6a:aa:18:93:77:f1:97:f8:05:63:
3e:5c:ac:d1:c2:e0:53:db:a4:b7:dc:cc:5e:0e:f2:93:7f:f3:
a6:cb:2e:c3:dd:6f:ef:81:1d:64:76:4d:76:62:fc:89:dd:20:
0a:0f:f6:0b:ef:80:1d:fa:66:bd:21:34:1d:8e:86:60:2f:d4:
c9:ee:24:bc:62:60:8c:f8:26:bf:53:4a:ad:06:a9:66:1c:96:
4a:5f:4f:1d:3e:53:53:93:a6:e0:83:1d:2f:6f:c5:e8:82:79:
a5:94:47:42:e5:01:73:59:bf:7d:aa:b4:a6:b7:ea:60:b9:e5:
3b:61:4c:38:a2:58:50:0b:73:c5:93:1b:92:0a:fd:09:7f:1c:
01:f1:61:49:94:fd:9a:14:91:6b:b6:e3:fe:ae:77:42:d7:00:
7c:64:9a:92:8f:1b:64:34:ce:96:7e:b4:95:40:24:15:d3:5a:
40:59:ae:97:6b:90:8b:79:07:d1:4e:e6:25:44:65:81:41:ed:
b5:ca:1f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:03 2023 by rpki-client on console-fra.rpki-client.org