Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0b1f25-80cf-4038-8d23-95e72dfda8bf/1/AoKsAcMACvNz-9243qKS3xDYPVA.roa
File: AoKsAcMACvNz-9243qKS3xDYPVA.roa (raw, json)
Hash identifier: 6Za5ZpikzogLC1nuSBq1o4ixSo7IAGsOZXPa8KagWZE=
Subject key identifier: 02:82:AC:01:C3:00:0A:F3:73:FB:DD:B8:DE:A2:92:DF:10:D8:3D:50
Certificate issuer: /CN=4261a61434e019e7e40a8f3bd98719128bb23733
Certificate serial: 15DD64
Authority key identifier: 42:61:A6:14:34:E0:19:E7:E4:0A:8F:3B:D9:87:19:12:8B:B2:37:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmGmFDTgGefkCo872YcZEouyNzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0b1f25-80cf-4038-8d23-95e72dfda8bf/1/AoKsAcMACvNz-9243qKS3xDYPVA.roa
Signing time: Fri 04 Feb 2022 14:21:09 +0000
ROA not before: Fri 04 Feb 2022 14:21:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50215
IP address blocks: 45.93.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1432932 (0x15dd64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4261a61434e019e7e40a8f3bd98719128bb23733
Validity
Not Before: Feb 4 14:21:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0282ac01c3000af373fbddb8dea292df10d83d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:ae:4b:58:41:56:92:0a:fa:4b:9b:31:8b:
b4:f4:68:3c:7c:ab:e1:7c:f9:71:b7:95:c9:94:8e:
88:e0:88:4d:ea:bd:80:4e:1b:4e:7c:24:48:f3:6b:
c0:90:31:fd:1a:80:d4:d2:cc:d5:dd:29:d7:bb:4a:
37:91:c2:7d:01:b2:c0:7b:fd:f4:f0:58:5c:b0:8f:
9a:d8:7e:1a:ce:af:e7:30:55:48:e2:b9:88:ff:f9:
46:9b:23:50:55:b7:8e:c3:db:d8:24:10:0f:8f:b9:
00:6d:78:26:4f:92:fa:cf:3e:46:44:fe:4c:28:5c:
95:98:0b:16:95:88:e7:cf:e5:29:20:75:d3:0c:64:
f8:e7:b8:c8:1c:8b:f1:2e:23:4d:68:fa:bc:4c:00:
37:ac:5c:f4:d3:20:c7:36:83:00:2e:5d:ec:0f:4f:
86:54:cb:d3:de:d9:a9:25:65:ec:b9:09:90:3a:9e:
87:cb:0c:09:47:a5:4f:72:b9:df:54:44:db:62:6a:
0b:85:5f:34:52:3e:ca:f0:00:22:b5:cc:53:3f:3a:
a6:e0:d3:14:02:15:9f:c2:ec:50:79:fe:d7:ac:97:
1d:44:e3:a9:36:28:9e:53:c5:ac:d4:49:d8:ae:05:
4e:a2:8d:ce:4b:82:58:bd:ad:84:f0:62:d9:5c:53:
97:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:82:AC:01:C3:00:0A:F3:73:FB:DD:B8:DE:A2:92:DF:10:D8:3D:50
X509v3 Authority Key Identifier:
keyid:42:61:A6:14:34:E0:19:E7:E4:0A:8F:3B:D9:87:19:12:8B:B2:37:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmGmFDTgGefkCo872YcZEouyNzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0b1f25-80cf-4038-8d23-95e72dfda8bf/1/AoKsAcMACvNz-9243qKS3xDYPVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0b1f25-80cf-4038-8d23-95e72dfda8bf/1/QmGmFDTgGefkCo872YcZEouyNzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.20.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:59:bf:3b:ea:8f:9e:50:a9:67:62:f8:c7:6b:54:e7:6a:88:
9b:d1:a2:07:a0:67:be:4f:0f:3d:7c:de:1e:99:84:e8:af:82:
e7:78:c3:76:f6:a3:51:0f:90:21:64:63:17:ee:43:ff:4c:5a:
a2:c4:80:91:95:22:64:4b:1b:f5:14:0a:d2:5d:0a:70:34:49:
74:be:88:2b:b9:c8:51:37:4e:f5:89:e7:aa:20:b0:1e:be:78:
09:5d:63:3d:fa:d5:c8:b4:ea:8b:d6:d6:50:77:39:2e:34:b7:
86:2b:71:1f:07:23:be:ba:4b:de:41:f5:3f:d7:9f:90:9b:4f:
9f:0a:ab:40:43:7a:aa:03:d6:39:75:6f:fd:2e:ac:8f:83:b1:
a3:6f:37:52:0a:eb:14:aa:33:cd:78:a5:96:c3:4f:ca:4a:e7:
d3:a3:5e:ee:8e:1c:b8:37:24:eb:fa:d5:f7:c7:7c:a0:75:72:
ab:a1:b3:80:ea:f1:1c:d9:a0:fd:20:8f:7f:9c:19:c4:8c:2d:
57:a7:a8:dc:04:81:75:81:7f:c2:81:fc:d3:b3:44:9e:15:8d:
5d:03:63:38:20:35:5e:db:4c:88:6a:d4:db:64:1f:07:4a:a5:
89:ea:39:1a:a8:87:eb:f8:aa:e8:89:cd:6b:ef:32:1c:f1:1d:
5d:74:1e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:05 2024 by rpki-client on console-fra.rpki-client.org